CVE-2021-33034

CVE-2021-33034 is a use-after-free in Linux kernel before 5.12.4 in net/bluetooth/hci_event.c when destroying an hci_chan, enabling arbitrary writes. Affected: Linux kernel before 5.12.4 (Bluetooth HCI driver). Mitigation: upgrade to 5.12.4 or later (ChangeLog-5.12.4).

CVE-2019-18218

CVE-2019-18218 is a concrete issue affecting the file utility: cdf_read_property_info in cdf.c (up to version 5.37) does not cap the number of CDF_VECTOR elements, enabling a heap-based buffer overflow (4-byte out-of-bounds write). Public advisories (Arch Linux ASA-202001-2, ALAS-2019-1326/1370, ...

CVE-2022-28924

The CVE-2022-28924 entry concerns UniverSIS-Students prior to v1.5.0, where a crafted GET request to /api/students/me/courses/ can disclose sensitive information. The vulnerability is an information disclosure flaw in the API endpoint, enabling attackers to access data without proper authorizatio...

CVE-2020-14323

Affects Samba Winbind in Samba; root cause is a null pointer/invalid lookupsids path leading to a crash and DoS. Affected versions are prior to 4.11.15, prior to 4.12.9, and prior to 4.13.1. Remediation is to upgrade to a fixed Samba release (e.g., 4.13.x line such as 4.13.3 per AlmaLinux advisor...

CVE-2017-18468

CVE-2017-18468 affects cPanel prior to 62.0.17. The vulnerability arises in the Htaccess::setphppreference API (SEC-232), enabling code execution by demo accounts. No exploitation details are provided in the documents. Affected software: cPanel before 62.0.17. Impact: remote code execution by una...

CVE-2018-20856

CVE-2018-20856 : Linux kernel before 4.18.7 contains a use-after-free in block/blk-core.c__blk_drain_queue() when an error case is mishandled. This could allow a local attacker to cause a denial of service or, potentially, execute arbitrary code. The issue was addressed in the 4.18.7 patch releas...

CVE-2019-12735

CVE-2019-12735 affects Vim and the Neovim fork, where the ":source!" command was not filtered inside a sandbox, enabling shell command execution via a crafted file opened in Vim/Neovim. Connected documents confirm affected products include vim (and Neovim) across multiple distributions (Debian, C...

CVE-2026-47040

CVE-2026-47040 describes a vulnerability in the Oracle Net Services component of Oracle Database Server. Affected are 19.3–19.31, 21.3–21.22, and 23.4.0–23.26.2. An unauthenticated attacker with network access via Oracle Net can compromise Oracle Net Services, potentially leading to unauthorized ...

CVE-2022-29526

CVE-2022-29526 is a privilege-assignment flaw in Go’s Faccessat path (go1.17.10 and go1.18.2 fixes cited in initial description). The provided connected documents confirm this CVE affects multiple downstream packages (e.g., buildah, podman, cni, containernetworking-plugins, golang, sriov-network-...

CVE-2022-31072

The CVE affects the Ruby Octokit gem; versions 4.23.0 and 4.24.0 ship world-writable files (permissions 0666) instead of 0644, enabling modification by non-owners in affected environments. The root cause is improper packaging of files during these releases. A fix is available in Octokit 4.25.0. W...

CVE-2022-25227

Thinfinity VNC v4.0.0.1 is affected by a Cross-Origin Resource Sharing (CORS) flaw that can allow an unprivileged remote attacker, tricked into visiting a malicious site, to obtain an ID that can be used to send websocket requests and achieve remote code execution. The CVE description consistentl...

CVE-2022-28651

Vulnerability: JetBrains IntelliJ IDEA prior to 2021.3.3 allowed retrieving passwords from protected fields. Affected product/versions: IntelliJ IDEA before 2021.3.3. Root cause details are not specified in the provided documents. Impact: confidentiality of passwords may be exposed; CVSS data ind...

CVE-2021-43618

CVE-2021-43618 affects GMP up to version 6.2.1. The issue is an integer overflow in mpz/inp_raw.c that can cause a buffer overflow, leading to a segmentation fault on 32‑bit platforms. Public advisories in multiple distributions confirm a patched release is available (e.g., GMP 6.2.1-2 and newer;...

CVE-2019-2529

CVE-2019-2529 affects Oracle MySQL Server (Server: Optimizer). Affected: 5.6.42 and prior, 5.7.24 and prior, 8.0.13 and prior. Low-privilege, network-access attacker can cause a hang or complete DOS. Remediation: advisories/applicable updates exist (e.g., ALAS/CentOS/RHSA); update mariadb/mysql p...

CVE-2021-2144

CVE-2021-2144 affects Oracle MySQL Server (component: Server: Parser). Affected versions are 5.7.29 and earlier and 8.0.19 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the MySQL Server, potentially leading to takeover of ...

CVE-2021-27876

CVE-2021-27876 affects Veritas Backup Exec (BE) Remote Agent/BE Agent prior to 21.2. The SHA-authentication vulnerability allows an attacker to bypass authentication, issue data-management commands on an authenticated channel, and access arbitrary files on the BE Agent system with SYSTEM/root pri...

CVE-2019-11768

phpMyAdmin prior to 4.9.0.1 is affected by an SQL injection via the Designer feature triggered by a specially crafted database name. The issue is fixed in 4.9.0.1 (and later per advisories). Impact per sources includes potential high-severity consequences; upgrade to 4.9.0.1 or newer to remediate.

CVE-2007-2447

CVE-2007-2447 concerns Samba’s MS-RPC handling in the SMB/CIFS server. According to the provided documents, Samba versions 3.0.0 through 3.0.25rc3 are affected by a remote command-execution vulnerability triggered when the username map script smb.conf option is enabled, allowing remote attackers ...

CVE-2026-12143

The CVE-2026-12143 entry concerns the form-data library where, in versions up to 4.0.5, the field argument to FormData#append and the filename option are concatenated into the Content-Disposition header without escaping CR, LF, or "." This enables CRLF injection when attacker-controlled data is u...

CVE-2026-5281

A use-after-free vulnerability exists in the Dawn component (Chromium's graphics layer and WebGPU implementation) of Google Chrome versions prior to 146.0.7680.178 . A remote attacker who has compromised the renderer process can execute arbitrary code via a crafted HTML page. This vulnerability i...

CVE-2020-36776

In the Linux kernel, CVE-2020-36776 concerns the slab OOB issue in thermal/cpufreq_cooling. The vulnerability is triggered in cpu_power_to_freq() when the EM table does not contain a suitable power entry (power below OPP0), leading to a negative index read. The documented fix returns the lowest a...

CVE-2021-43565

The CVE-2021-43565 vulnerability affects golang.org/x/crypto’s x/crypto/ssh: the package before 0.0.0-20211202192323-5770296d904e can cause an SSH server to panic. The issue is tied to the x/crypto/ssh component and is triggered by the cited pre-release version of the package. A patched version e...

CVE-2022-23720

PingID Windows Login prior to 2.8 is vulnerable when provisioned with the full permissions PingID properties file, allowing administrator-privileged API credentials to be deployed to Windows Login user endpoints. This misprovisioning can enable an attacker to perform administrative actions agains...

CVE-2021-20305

CVE-2021-20305 affects Nettle prior to 3.7.2 where signature verification (GOST DSA, EDDSA, ECDSA) calls ECC multiply with out-of-range scalars, potentially producing incorrect results and allowing an attacker to force an invalid signature (leading to assertion failure or validation issues). Docu...

CVE-2020-24656

CVE-2020-24656 affects Maltego prior to version 4.2.12, with the underlying issue described as an XML External Entity (XXE) vulnerability. The connected documents confirm the affected product and the vulnerability class, but do not provide exploitation details or a published patch/version fix in ...

CVE-2019-12828

CVE-2019-12828 affects Electronic Arts Origin prior to 10.5.39. The issue arises from improper sanitization of origin:// and origin2:// URI schemes, allowing injection of additional arguments into the Origin process and enabling remote code execution by loading a backdoored Qt plugin via the plat...

CVE-2018-17456

CVE-2018-17456 is a remote code execution in Git triggered when processing a recursive clone of a superproject if a .gitmodules URL starts with a dash. Affected Git versions include 2.14.5 and later 2.15.x/2.16.x/2.17.x/2.18.x/2.19.x before the fixed releases listed (e.g., 2.14.5 and subsequent u...

CVE-2017-18190

CVE-2017-18190 affects the CUPS printing system. Connected sources confirm a vulnerability where a localhost.localdomain whitelist entry in valid_host() (scheduler/client.c) in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon ...

CVE-2015-1593

CVE-2015-1593 affects the Linux kernel: on 64-bit platforms, the stack randomization (ASLR) feature uses incorrect data types for bitwise left-shift results, making it easier to predict the stack top address and bypass ASLR. The issue is tied to functions such as randomize_stack_top in fs/binfmt_...

CVE-2025-30401

A spoofing vulnerability in WhatsApp for Windows (prior to version 2.2450.6 ) allows an attacker to disguise the true nature of a malicious attachment by creating a mismatch between its MIME type and its filename extension . While the application displays the file based on its MIME type, it selec...

CVE-2024-12344

CVE-2024-12344 affects TP-Link VN020 F3v(T) with firmware TT_V6.2.1021, where the FTP USER Command Handler is vulnerable to memory corruption. The root cause is improper input validation of the USER command, allowing crafted payloads to overflow buffers and crash or corrupt memory, potentially en...

CVE-2024-1086

CVE-2024-1086 is a use-after-free in Linux kernel nf_tables (netfilter). The vulnerability stems from nft_verdict_init() allowing positive values as drop errors in the hook verdict, enabling nf_hook_slow() to trigger a double-free when NF_DROP is issued with a drop error resembling NF_ACCEPT. Exp...

CVE-2023-36417

CVE-2023-36417 is a Remote Code Execution vulnerability affecting the Microsoft SQL Server OLE DB Driver. The Nessus entries and Microsoft advisories indicate an RCE in the SQL OLE DB component that can enable authentication bypass and arbitrary command execution. The issue has been addressed in ...

CVE-2022-25881

CVE-2022-25881 affects the http-cache-semantics package, specifically versions before 4.1.1. The issue can be exploited by sending malicious request header values to a server that reads the cache policy from the request using this library. This is a header/input handling vulnerability in the clie...

CVE-2022-42252

CVE-2022-42252 affects multiple Tomcat series (8.5.0–8.5.82, 9.0.0-M1–9.0.67, 10.0.0-M1–10.0.26, 10.1.0-M1–10.1.0). The issue: if rejectIllegalHeader is false (default on 8.5.x), Tomcat may fail to reject a request with an invalid Content-Length header, enabling a request-smuggling scenario when ...

CVE-2022-24875

The CVE-2022-24875 issue affects the CVEProject/cve-services project prior to and including version 1.1.1, where the org.conroller.js routine could log user secrets. The root cause is logging sensitive data; this has been fixed in commit 46d98f2b, with the fix expected in subsequent releases. Rem...

CVE-2021-30900

CVE-2021-30900 affects Apple’s GPU Drivers in iOS/iPadOS (Smartphone OS); root cause is an out-of-bounds write leading to memory corruption. Impact: potential arbitrary code execution with kernel privileges, exploitable locally. Apple fixes were released in iOS 14.8.1 / iPadOS 14.8.1 and iOS 15.1...

CVE-2026-43503

The CVE-2026-43503 entry concerns Linux kernel net/skbuff handling: when frags are moved by frag-transfer helpers (notably __pskb_copy_fclone() and skb_shift()), the SKBFL_SHARED_FRAG flag was not propagated to the destination skb, causing destination pages to remain shared while skb_has_shared_f...

CVE-2025-20362

CVE-2025-20362 affects Cisco Secure Firewall ASA/FTD VPN web server. Root cause: improper validation of user-supplied input in HTTP(S) requests, allowing an unauthenticated remote attacker to access restricted VPN-related URL endpoints. Impact: potential DoS via unexpected reloads (and in some re...

CVE-2024-49748

Google Android is affected by a heap buffer overflow vulnerability within the gatt_sr.cc file, specifically in the gatts_process_primary_service_req function. An attacker can exploit this flaw to achieve remote code execution (RCE) without requiring additional execution privileges or user interac...

CVE-2024-10978

The CVE-2024-10978 issue in PostgreSQL is described as incorrect privilege assignment that can let a less-privileged application user view or modify rows not intended when the session has used SET ROLE or SET SESSION AUTHORIZATION. The vulnerability arises if a query reacts to current_setting('ro...

CVE-2024-23334

CVE-2024-23334 affects aiohttp when used as a web server with static routes and follow_symlinks=True, where reading a file isn’t validated against the static root. The vulnerability enables directory traversal to access arbitrary files; PoC and multiple advisories reference this behavior in versi...

CVE-2023-24532

CVE-2023-24532 involves the ScalarMult and ScalarBaseMult methods on the Go golang P256 curve. The vulnerability can yield an incorrect result when invoked with certain unreduced scalars larger than the curve order. The issue does not affect usages of crypto/ecdsa or crypto/ecdh. Public advisorie...

CVE-2017-3143

The CVE-2017-3143 issue is a TSIG authentication bypass in ISC BIND that could allow an attacker who can communicate with an authoritative DNS server and knows a valid TSIG key name to manipulate BIND into accepting an unauthorized dynamic update. The vulnerability affects multiple BIND releases ...

CVE-2018-13405

CVE-2018-13405 involves the Linux kernel inode_init_owner() logic where, in a scenario with an SGID directory and a writably user who is not in that group, a local user could create a plain file with the SGID group ownership and executable bits, effectively escalating privileges. Connected docume...

CVE-2025-3248

CVE-2025-3248 : Langflow versions prior to 1.3.0 are vulnerable to unauthenticated remote code execution via the /api/v1/validate/code endpoint. The root cause is execution of arbitrary Python code through unsanitized input passed to exec(), allowing an attacker to run arbitrary commands without ...

CVE-2025-1066

OpenPLC_V3 contains an arbitrary file upload vulnerability that can be leveraged for malvertising or phishing campaigns. The affected software is an open-source programmable logic controller developed by Thiago Alves, used for industrial automation and research. While the specific version affecte...

CVE-2024-27198

CVE-2024-27198 affects JetBrains TeamCity prior to 2023.11.4, where an authentication bypass enables attackers with no privileges to perform admin actions and potentially achieve remote code execution (RCE). Connected PoC/documentation detail a bypass that abuses a REST API routing flaw via an un...

CVE-2023-38552

CVE-2023-38552 affects Node.js where the experimental policy/ integrity-check mechanism can be bypassed by forging a checksum during policy validation. The root issue is interception of the integrity verification against a trusted manifest, enabling an attacker to disable the integrity check for ...

CVE-2022-34803

The CVE-2022-34803 entry concerns Jenkins OpsGenie Plugin 1.9 and earlier, which stores API keys unencrypted in the plugin’s global configuration file and in job config.xml on the Jenkins controller. The keys can be viewed by users with Extended Read permission (config.xml) or by anyone with acce...