CVE-2022-23125

Netatalk CVE-2022-23125 is a remote, unauthenticated code execution flaw in the copyapplfile function where len validation for user data can overflow a fixed-size stack buffer. Affected product: Netatalk (AFP) 3.1.x. Root context: multiple sources confirm root-level impact and disclosure of this ...

CVE-2023-23914

CVE-2023-23914 affects curl before 7.88.0, related to cleartext transmission and HSTS handling. The issue occurs when multiple URLs are requested serially on the same command line, where the HSTS state may not be carried forward, causing curl to unexpectedly use insecure HTTP despite HTTPs in the...

CVE-2023-25193

CVE-2023-25193 affects HarfBuzz up to 6.0.0, where hb-ot-layout-gsubgpos.hh can trigger O(n^2) growth by consecutive marks when looking back for base glyphs during mark attachment. Public references in the provided documents confirm the vulnerability and its association with HarfBuzz, but no expl...

CVE-2022-28739

CVE-2022-28739 describes a buffer over-read during String-to-Float conversion in Ruby. Affected are Ruby versions: 2.6 and earlier, 2.7.x prior to 2.7.6, 3.x prior to 3.0.4, and 3.1.x prior to 3.1.2. The flaw affects conversion paths such as Kernel#Float and String#to_f and can lead to memory saf...

CVE-2020-10756

CVE-2020-10756 is a concrete vulnerability in the QEMU SLiRP networking (libslirp) implementation. The issue is an out-of-bounds read in icmp6_send_echoreply() when replying to ICMP echo requests, enabling a guest to leak host memory and cause information disclosure. Affected component/version: l...

CVE-2025-12888

CVE-2025-12888 affects X25519 constant-time implementations, with timing side channels arising from compiler optimizations and CPU architecture constraints on Xtensa-based ESP32 chips. The issue is tied to the X25519 code path and may impact confidentiality (per CVSS data, base score high in some...

CVE-2025-52367

PivotX CMS 3.0.0 RC3 is affected by a Cross Site Scripting vulnerability in the title and subtitle fields that can lead to Remote Code Execution. The root cause, per exploit reports, is unsanitized data stored during page creation via PHP serialize in modules/pages_flat.php, with the vulnerabilit...

CVE-2022-26386

The CVE-2022-26386 issue concerns Firefox ESR versions prior to 91.7 and Thunderbird versions prior to 91.7. Previously, Firefox on macOS/Linux downloaded temporary files to a user-specific directory in /tmp; this was changed to /tmp where other local users could affect the files. The behavior wa...

CVE-2019-17498

CVE-2019-17498 is an integer overflow in libssh2’s SSH_MSG_DISCONNECT bounds check (packet.c) on v1.9.0 and earlier. This can let a crafted SSH server cause an out-of-bounds memory read, enabling information disclosure or denial of service on the client. Public advisories confirm patches/upgrades...

CVE-2004-1943

CVE-2004-1943 describes a PHP remote file inclusion in album_portal.php for phpBB modified by Przemo 1.8. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a crafted phpbb_root_path parameter. The details come from NVD/CVE records; no additional exploit, mitigat...

CVE-2026-27212

CVE-2026-27212 affects the npm package swiper (versions 6.5.1 through 12.1.1). The vulnerability is a prototype pollution in shared/utils.mjs where indexOf() checks input against forbidden strings; crafted input can pollute Object.prototype via Array.prototype, despite a prior mitigation. This ca...

CVE-2025-34027

Summary of CVE-2025-34027: Versa Concerto SD-WAN exposes an authentication bypass in the Traefik reverse proxy configuration, enabling unauthorized access to administrative endpoints. In addition, the Spack upload endpoint can trigger a TOCTOU race with path loading manipulation to achieve remote...

CVE-2025-23120

CVE-2025-23120 affects Veeam Backup & Replication. A deserialization flaw (CWE-502) in Veeam.Backup.EsxManager.xmlFrameworkDs and Veeam.Backup.Core.BackupSummary allows remote code execution by authenticated domain users on domain-joined servers. The vulnerability exists in versions up to 12.3.0....

CVE-2025-26411

Wattsense Bridge devices are affected by CVE-2025-26411 through the web interface Plugin Manager. An authenticated attacker with a valid Wattsense web account can upload malicious Python files to the device, enabling remote root access. The vulnerability is tied to the Plugin Manager functionalit...

CVE-2024-9465

Summary: CVE-2024-9465 is an unauthenticated SQL injection in Palo Alto Networks Expedition that can disclose database contents (password hashes, usernames, device configurations, API keys) and allow creation/read of arbitrary files via the CHECKPOINT.php endpoint. Multiple connected sources corr...

CVE-2024-1597

CVE-2024-1597 affects the PostgreSQL JDBC Driver (libpgjava) used with pgjdbc. The vulnerability exists when PreferQueryMode=SIMPLE is enabled (not the default); an attacker can inject SQL to alter queries. Affected versions include before 42.7.2, and older 42.6.1, 42.5.5, 42.4.4, 42.3.9, and 42....

CVE-2023-33010

CVE-2023-33010 is a high-severity (CVSS 3.1: 9.8) buffer overflow in the ID processing function of Zyxel firewalls (ATP, USG FLEX, USG, ZyWALL/VPN) that can be exploited without authentication to cause DoS and remote code execution. Affected firmware ranges include Zyxel ATP 4.32–5.36 Patch 1, US...

CVE-2020-15349

BinaryNights ForkLift 3.x prior to 3.4 is affected by a local privilege escalation due to a privileged helper tool exposing an XPC interface that permits file operations (copy, move, delete) across processes as root and to change permissions. Impact is local privilege escalation with full root-le...

CVE-2020-10730

CVE-2020-10730 affects the Samba AD DC LDAP Server (ASQ, VLV, and paged_results) with a NULL pointer dereference/use-after-free in affected builds prior to 4.10.17, 4.11.11, and 4.12.4. The root cause is in handling certain LDAP controls in the AD DC LDAP server, with the issue also present in th...

CVE-2020-12770

CVE-2020-12770 arises from the Linux kernel sg_write path in the SCSI generic (sg) driver not releasing internal resources in a specific error path because sg_remove_request is not called. This root cause is cited in multiple sources (e.g., ALAS2KERNEL-5.4-2022-012) and is described as a local-ac...

CVE-2019-10130

CVE-2019-10130 affects PostgreSQL where statistics kept for columns can be consulted during query planning before row-level security is enforced, allowing an attacker with SELECT privilege to read the most common values or histograms of certain columns. Affected versions include PostgreSQL 11.x (...

CVE-2018-8034

CVE-2018-8034 concerns missing host name verification over TLS in the WebSocket client of Apache Tomcat. The issue affects multiple Tomcat branches and versions (7.0.35–7.0.88, 8.0.0.RC1–8.0.52, 8.5.0–8.5.31, 9.0.0.M1–9.0.9). Impact: an attacker on the local network could bypass host name verific...

CVE-2024-3566

Technical details about CVE-2024-3566 are not provided in the connected documents. The initial description notes a command injection risk, but no affected products, versions, impact, or fixes are specified here. Monitor for updated technical disclosures.

CVE-2021-46950

The CVE-2021-46950 entry concerns a Linux kernel data corruption issue in md/raid1(bitmaps): when ending a failed write request, bitmap bits could be cleared, causing corruption. The vulnerability arises in the failure handling path of raid1_end_write_request, where the I/O might be retried (R1BI...

CVE-2023-24539

CVE-2023-24539 affects golang html/template across multiple advisories (Astra Linux, CBLMariner, AlmaLinux) and is linked to improper sanitization of CSS values in HTML templates. The issue can allow injection of unexpected HTML when templates process untrusted input due to how CSS values are han...

CVE-2023-21971

CVE-2023-21971 concerns Oracle MySQL Connectors, specifically the Connector/J component. Affected are 8.0.32 and earlier versions. The vulnerability, described as difficult to exploit, allows a high-privilege attacker with network access via multiple protocols to compromise MySQL Connectors. Impa...

CVE-2022-38749

CVE-2022-38749 affects SnakeYAML, a Java YAML parser. Affects parsing untrusted YAML inputs, where crafted content can trigger a Denial of Service via stack overflow. Public sources and advisories reference DoS risk and recommend upgrading SnakeYAML (examples show versions like 1.33+ as fixes in ...

CVE-2019-14615

The CVE-2019-14615 issue concerns the Linux kernel i915 Intel graphics driver: insufficiently cleared data structures on context switches could leak information to a local attacker. Public notes indicate that the Ubuntu 18.04 kernel fix for CVE-2019-14615 was incomplete in certain kernel versions...

CVE-2019-13345

CVE-2019-13345 : XSS in the cachemgr.cgi web module of Squid through 4.7, exploitable via the user_name or auth parameter. Connected advisories confirm multiple distributions issue fixes and recommended upgrades (e.g., Debian DSA-4507, CentOS/RHEL advisories, ALAS-2 entries). The exposure is limi...

CVE-2016-1546

CVE-2016-1546 affects Apache HTTP Server 2.4.17/2.4.18 with mod_http2 enabled, where there is no limit on the number of simultaneous stream workers for a single HTTP/2 connection. This can allow remote attackers to cause a denial of service (stream-processing outage) via modified flow-control win...

CVE-2021-46945

CVE-2021-46945 concerns the Linux kernel ext4 filesystem. The vulnerability causes a kernel panic when the filesystem is mounted with errors=panic, prior to a specific commit. After the patch 014c9caa29d3, remounting a filesystem with abort no longer panics, and the behavior is restored to what i...

CVE-2023-25725

HAProxy URL: CVE-2023-25725 affects HAProxy with HTTP/1 header parsing issues that may allow bypassing access control via request smuggling. The root cause is that the HTTP header parsers can accept empty header field names, potentially truncating the header list and causing headers to disappear ...

CVE-2022-26381

CVE-2022-26381 describes a use-after-free risk caused by forcing a text reflow in an SVG object, potentially exploitable as a crash. Affected products include Mozilla Firefox (less than 98) and Firefox ESR (less than 91.7) and Mozilla Thunderbird (less than 91.7). External documents (Astra Linux,...

CVE-2022-0336

Samba AD DC CVE-2022-0336: SPN checks can be bypassed when re-adding a previously present SPN, enabling a write-enabled attacker to impersonate services or cause DoS by matching an existing SPN. Some advisories note no patch for certain releases (e.g., Samba 4.12.5-7), while others indicate an up...

CVE-2022-31884

CVE-2022-31884 affects Marval MSM v14.19.0.12476 and is due to Improper Access Control. A low-privilege user can delete other users’ API Keys, including high-privilege and Administrator keys. The connected documents describe exploitation potential and real-world use; there is no publicly document...

CVE-2014-3693

CVE-2014-3693 affects LibreOffice Impress Remote in LibreOffice 4.x, where a use-after-free in the socket manager allows a remote attacker to crash the process or potentially execute arbitrary code via a crafted request to TCP port 1599. The issue affects LibreOffice 4.x before 4.2.7 and 4.3.x be...

CVE-2025-0237

CVE-2025-0237 concerns the WebChannel API: the sending principal was accepted without validation, enabling potential privilege escalation. Affected products include Firefox (all releases before 134; including ESR

CVE-2023-6549

CVE-2023-6549 : A memory-buffer boundary violation in Citrix NetScaler ADC and NetScaler Gateway allows unauthenticated denial of service and an out-of-bounds memory read when the appliance is configured as a gateway or AAA virtual server. Affected versions include NetScaler ADC/Gateway 14.1 befo...

CVE-2023-39192

CVE-2023-39192 : A flaw in the Linux kernel Netfilter xt_u32 module allows a local privileged attacker to trigger an out-of-bounds read by crafting improper values in the xt_u32 structure. The root cause is missing validation of fields in xt_u32, leading to crash or information disclosure. Impact...

CVE-2023-39410

CVE-2023-39410 describes a memory exhaustion risk when deserializing untrusted data in the Apache Avro Java SDK. Affected: Avro Java SDK up to 1.11.2. Root cause: deserialization can consume memory beyond allowed constraints, leading to out-of-memory DoS. A fix is available in Apache Avro 1.11.3....

CVE-2023-36762

CVE-2023-36762 is a Microsoft Word remote code execution vulnerability. The available documents confirm an impact on Word and related Word components, with an exploit path requiring user interaction and local access (CVSS 3.1: AV=L, AC=L, PR=None, UI=Required, C/H/I/H/A=L). Public details note po...

CVE-2022-48565

CVE-2022-48565 is an XXE issue in Python’s plistlib that occurs up to Python 3.9.1, where entity declarations in XML plist files could lead to vulnerabilities. The root cause is plistlib not rejecting entity declarations in XML plist files. Public advisories confirm remediation by updating Python...

CVE-2022-31034

CVE-2022-31034 affects Argo CD (GitOps tool for Kubernetes). All versions starting with v0.11.0 are vulnerable due to insufficiently random values in OAuth2/OIDC login parameters, using a non-cryptographically secure PRNG seeded with a predictable/time-based value, reducing entropy in login flows...

CVE-2019-11936

CVE-2019-11936 affects HHVM: various APC functions accept keys containing null bytes, causing input truncation. Affected versions include HHVM before 3.30.12, 4.0.0–4.8.5, 4.9.0–4.23.1, and 4.24.0–4.28.1. The Connected documents corroborate the same affected version ranges and input-truncation be...

CVE-2019-13990

CVE-2019-13990 affects Terracotta Quartz Scheduler within Atlassian Jira Service Management Data Center/Server and related Oracle Fusion Middleware deployments, via XXE in the Terracotta Quartz Scheduler component when parsing a job description. The root cause is an XML External Entity condition ...

CVE-2019-2739

CVE-2019-2739 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Affected versions are 5.6.44 and earlier, 5.7.26 and earlier, and 8.0.16 and earlier. An attacker with logon to the infrastructure where MySQL Server executes and with high privileges ca...

CVE-2019-3880

CVE-2019-3880 affects Samba where an RPC endpoint emulating Windows registry API can be abused by an unprivileged user to save a registry hive file outside the share, potentially creating a new file in the Samba share. Affected versions are pre-4.8.11, pre-4.9.6 and pre-4.10.2. Red Hat/CentOS and...

CVE-2025-21971

Summary (CVE-2025-21971): In the Linux kernel, an issue in net_sched can cause incorrect parent backlog statistics when a Qdisc class is created with classid TC_H_ROOT (0xFFFFFFFF). The traversal in qdisc_tree_reduce_backlog() terminates at TC_H_ROOT instead of the actual root, which can lead to ...

CVE-2024-38202

CVE-2024-38202 describes an elevation of privilege in Windows Update that could allow a user with basic privileges to reintroduce mitigated vulnerabilities or bypass some VBS protections. The vulnerability requires an attacker to coax an Administrator or delegated user into performing a system re...

CVE-2023-21835

CVE-2023-21835 affects Oracle Java SE and GraalVM Enterprise Edition (JSSE/DTLS handshake). An unauthenticated network attacker can exploit DTLS to cause a partial denial of service on affected Java runtimes. Affected: Oracle Java SE 11.0.17, 17.0.5, 19.0.1 and Oracle GraalVM EE 20.3.8, 21.3.4, 2...