CVE-2024-5911

CVE-2024-5911 affects Palo Alto Networks PAN-OS Panorama web interface via an arbitrary file upload vulnerability accessible to an authenticated read-write administrator. The issue can disrupt system processes and crash Panorama, with repeated attacks potentially forcing maintenance mode requirin...

CVE-2024-21723

CVE-2024-21723 describes an open redirect in the Joomla! core installation application caused by inadequate URL parsing. Public docs consistently identify this as an Open Redirect vulnerability in Joomla! installation, enabling redirection to an arbitrary URL when a crafted link is processed. The...

CVE-2023-40093

CVE-2023-40093 is an information-disclosure vulnerability in Google Android where trimmed content could be included in PDF output due to a logic error. It allows local information disclosure with no user interaction; confidentiality is impacted. Public sources cite this CVE in Android security bu...

CVE-2023-42835

The CVE-2023-42835 entry corresponds to a logic issue in macOS Sonoma that could let an attacker access user data. The connected documentation (Apple security content) confirms the flaw is addressed by the macOS Sonoma 14.1 security update, which removes the vulnerable code or strengthens checks....

CVE-2024-3658

CVE-2024-3658 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-42939

CVE-2023-42939 is a WebKit logic issue in iOS/iPadOS that may cause a user’s private browsing activity to be saved in the App Privacy Report. It is fixed in iOS 17.1 and iPadOS 17.1; no exploits or attack vectors are detailed in the provided documents.

CVE-2023-49250

CVE-2023-49250 affects Apache DolphinScheduler prior to 3.2.0, where the HttpUtils class fails to verify TLS certificates. This allows an attacker in a MITM position on outgoing HTTPS connections to impersonate the server, potentially impacting confidentiality, integrity, and availability of the ...

CVE-2021-47035

The CVE-2021-47035 entry concerns a Linux kernel IOMMU VT-d issue. The vulnerability was in how second-level paging entries were assigned permissions for IOVA translation: Write-Only permission was still being treated inconsistently with the first-level mappings. The fix removes the Write-Only co...

CVE-2021-47029

CVE-2021-47029 concerns a Linux kernel issue in the mt76 Connac driver (mt76_connac_mcu_uni_add_dev) that emitted a kernel-warning trace when adding a monitor interface during EEPROM init (mt7921e path). The problem was addressed by fixing the kernel warning in the mt76_connac_mcu_uni_add_dev rou...

CVE-2021-47055

CVE-2021-47055 affects the Linux kernel MTD subsystem. The root cause is that MEMLOCK, MEMUNLOCK, and OTPLOCK modify protection bits and thus require write permission; MEMLOCK/MEMUNLOCK may be write-only on some hardware (e.g., SPI-NOR with WP# tied to GND) and OTPLOCK is always write-once. MEMSE...

CVE-2024-26458

CVE-2024-26458 is documented in IBM Security Bulletins as affecting IBM Application Gateway (versions 23.10–25.09) with Kerberos 5 (krb5) 1.21.2 memory leak in /krb5/src/lib/rpc/pmap_rmt.c. IBM lists remediation: update to fixed IBM Application Gateway release and container image. Upgrading via d...

CVE-2024-30727

CVE-2024-30727 is rejected/not used; does not represent an active vulnerability entry.

CVE-2021-47040

CVE-2021-47040 relates to the Linux kernel io_uring subsystem. The vulnerability stems from overflow checks in provide_buffers() for io_provide_buffers_prep(), with prior attempts not addressing the overflow/sign-extension issue. It was resolved by introducing robust overflow checks via helper fu...

CVE-2024-30728

CVE-2024-30728 is rejected/withdrawn and does not represent an active vulnerability entry.

CVE-2024-1551

The CVE-2024-1551 issue is a header-injection vulnerability in Set-Cookie handling within multipart HTTP responses. The root cause is that an attacker able to control the Content-Type header and part of the response body could inject Set-Cookie headers that the browser would honor. Affected produ...

CVE-2023-52453

CVE-2023-52453 affects the Linux kernel; the issue is in the hisi_acc_vfio_pci code during PRE_COPY migration, where saving/resume data pointers were not updated correctly based on the fd offset. This can cause migration data corruption and, when the device boots on the destination, errors such a...

CVE-2021-47036

CVE-2021-47036 affects the Linux kernel UDP GRO offload path. When NETIF_F_GRO_FRAGLIST or NETIF_F_GRO_UDP_FWD are enabled and UDP tunnels exist, udp_gro_receive() could perform L4 GRO aggregation at the outer UDP tunnel level, causing inner headers (e.g., VXLAN) to be corrupted and potentially m...

CVE-2021-47014

CVE-2021-47014 affects the Linux kernel’s net/sched code, specifically the act_ct action used during IP fragment handling. The root cause was a wild memory access that occurred when a temporarily stored IP fragment was reassembled: restoring skb->cb could overwrite FRAG_CB(), causing invalid m...

CVE-2024-26610

Mode C: The CVE-2024-26610 vulnerability affects the Linux kernel’s iwlwifi component (iwl_fw_ini_trigger_tlv::data) where data is a __le32*; copying to data + offset with a byte-based offset can overflow the buffer, causing memory corruption. Connected Astra Linux advisory confirms a fix in the ...

CVE-2021-47011

The CVE-2021-47011 issue affects the Linux kernel memory control slab (memcg). The root cause was that some corner allocations (e.g., SLUB allocations larger than order-1 pages and buddy-allocated pages) continued to hold a reference to the memory cgroup, allowing KMEM pages (and thus kernel stac...

CVE-2024-30703

CVE-2024-30703 entry is rejected and not used; no vulnerability exists.

CVE-2024-41091

CVE-2024-41091, in the Linux kernel, is due to missing verification of frame length in the tun_xdp_one() path. This can allow a skb with insufficient Ethernet header length to be processed, risking out-of-bounds access or header-length inconsistencies in subsequent processing. A related path (tun...

CVE-2024-30704

CVE-2024-30704 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-47004

CVE-2021-47004 affects Linux kernel f2fs by fixing a get_victim() GC bug in CP-disabling mode. Two issues when using LFS or SSR/AT_SSR to pick a victim: (1) GC could choose a section with checkpointed data if only current-segment checks were performed; the fix adds section-level validation so a v...

CVE-2024-30659

CVE-2024-30659 is rejected/not used; this CVE entry is not active.

CVE-2021-46999

CVE-2021-46999 affects the Linux kernel SCTP implementation and is caused by a transport use-after-free when processing a duplicate COOKIE-ECHO in sctp_sf_do_dupcook_a. The issue can lead to a panic (general protection fault) due to old asoc state being used to send COOKIE-ACK/SHUTDOWN chunks aft...

CVE-2024-30708

CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.

CVE-2024-26615

CVE-2024-26615 affects the Linux kernel net/smc code. A crash from NULL pointer dereference occurs when dumping SMC-D connections due to illegal rmb_desc access to conn->rmb_desc during an in-progress connection. The issue is fixed by adding a check before dumping to ensure rmb_desc has been i...

CVE-2023-52498

CVE-2023-52498 : Linux kernel sleep deadlock in system-wide PM code in low-memory conditions. root cause: system-wide resume core code could deadlock because async_schedule_dev() sometimes runs the argument synchronously and may contend for a mutex; this could cause ordering issues in resume call...

CVE-2021-47016

CVE-2021-47016 is rejected/not used; not an active vulnerability entry.

CVE-2024-26619

CVE-2024-26619 concerns the Linux kernel on riscv, where a use-after-free was introduced by the order of kfree calls during module loading. The vulnerability is resolved by reversing the free order, preventing use-after-free conditions. The available details identify the affected component as the...

CVE-2024-26611

CVE-2024-26611 : In the Linux kernel, the ZC XDP path briefly mishandles memory when bpf_xdp_adjust_tail() shrinks a packet with MEM_TYPE_XSK_BUFF_POOL, causing a NULL pointer dereference in __xdp_return() when the xdp_buff argument is NULL. The issue arises in the non-linear XDP RX path for zero...

CVE-2023-52482

CVE-2023-52482 is a Linux kernel issue where x86 SRSO mitigation was added to address speculative return stack overflow on Hygon processors. The connected Nessus entry for MiracleLinux 9 references kernel commits that implement x86 srso mitigation for Hygon and notes this CVE’s resolution, aligni...

CVE-2024-26617

CVE-2024-26617 (Linux kernel) : The vulnerability stems from fs/proc/task_mmu where the mmu notification mechanism was moved inside the mm lock, preventing a race with components that depend on the notifier to invalidate memory ranges. The patch tightens the notifier scope inside the mm lock, red...

CVE-2023-42889

CVE-2023-42889 : macOS privacy-bypass issue where an app may bypass certain Privacy preferences due to insufficient checks. Affected platforms/versions (per provided documents): macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. Root cause described as “improved checks.” Remediation:...

CVE-2023-28120

CVE-2023-28120 affects ActiveSupport: invoking the new bytesplice method on a SafeBuffer with untrusted input can lead to cross-site scripting (CWE-79). Connected sources confirm the vulnerability exists, but the provided documents do not specify affected versions or a fixed patch version. There ...

CVE-2021-39275

CVE-2021-39275 affects Apache HTTP Server (httpd) up to 2.4.48 and earlier. The issue is an out-of-bounds write in ap_escape_quotes() when given malicious input, potentially crashing the server or enabling code execution in some environments. Several connected sources concur this vulnerability ex...

CVE-2024-26616

CVE-2024-26616 affects the Linux kernel Btrfs file system, specifically the scrub path. The bug occurs when a converted ext4-converted Btrfs with chunk layout causes Scrub to split a bio and free resources twice, leading to a use-after-free in scrub_read_endio/scrub_submit_initial_read. The root ...

CVE-2024-6236

CVE-2024-6236 is a Denial of Service affecting Citrix NetScaler Console, NetScaler Agent, and NetScaler SDX (SVM). Citrix CTX677998 lists affected versions: Console 14.1 before 14.1-25.53; Console 13.1 before 13.1-53.22; Console 13.0 before 13.0-92.31; SDX/Agent likewise limited to the same or re...

CVE-2024-30686

This CVE-2024-30686 entry is rejected/not used; withdrawn by its CNA and not a valid vulnerability.

CVE-2023-52493

CVE-2023-52493 concerns the Linux kernel’s bus: mhi: host subsystem. The vulnerability arises from locking the channel by taking both read and write locks in succession during parse_xfer_event, allowing a client callback to queue buffers while holding locks, which can lead to multiple locks and a...

CVE-2023-52377

CVE-2023-52377 affects Huawei EMUI (cellular data module). The vulnerability arises from input data not being verified, potentially enabling out-of-bounds access. Reported CVSS v3.1 base score is 7.4 (HIGH) with network attack vector, high impact on confidentiality and availability, and no user i...

CVE-2024-25763

CVE-2024-25763 affects openNDS 10.2.0 with a Use-After-Free in /openNDS/src/auth.c. The Red Hat/OSV/Ubuntu/NASL entries confirm the same description across multiple sources. The CVE’s metrics show a CVSS v3.1 base score of 5.5 (Medium) with network attack vector, low attack complexity, and privil...

CVE-2023-52491

CVE-2023-52491 concerns a use-after-free in the Linux kernel’s media/mtk-jpeg driver. The issue arises from binding jpeg->job_timeout_work to mtk_jpeg_job_timeout_work in mtk_jpeg_probe and a path in mtk_jpeg_dec_device_run where an error in mtk_jpeg_set_dec_dst leads to a worker being started...

CVE-2024-23349

Apache Answer (github.com/apache/incubator-answer) is affected by a Cross-site Scripting (XSS) flaw in the summary field present through version 1.2.1. The root cause is improper neutralization of input during web page generation, enabling a logged-in user to inject malicious code when editing th...

CVE-2023-52487

The CVE-2023-52487 entry relates to the Linux kernel, specifically the mlx5 Ethernet driver area (net/mlx5e). Root cause: a refactor of mlx5e_tc_del_fdb_peer_flow() caused the DUP flag to linger when a peer flow was still referenced concurrently, leading to attempts to remove a flow from eswitch ...

CVE-2024-6768

CVE-2024-6768 affects the Windows Common Log File System (CLFS.sys) and can be triggered by a crafted BLF input to cause an unrecoverable state, leading to a Blue Screen of Death (BSOD). The vulnerability stems from improper validation of input quantities in CLFS, specifically manipulating the _C...

CVE-2024-30706

CVE-2024-30706 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-26578

CVE-2024-26578 describes a race condition in Apache Answer (through 1.2.1) caused by concurrent access to a shared resource during user registration, enabling rapid scripted submissions to create multiple accounts with the same name. The issue is a synchronization flaw that can affect account cre...

CVE-2024-22220

CVE-2024-22220 affects Terminalfour and Formbank: unauthenticated stored cross-site scripting can lead to admin session hijacking via the Form Builder and Form Preview. Affected: Terminalfour 7.4–7.4.0004 QP3, Terminalfour 8–8.3.19, and Formbank up to 2.1.10-FINAL. Root cause is XSS in form-relat...