CVE-2023-49103

The CVE-2023-49103 vulnerability affects ownCloud graphapi in versions 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The issue stems from a third‑party GetPhpInfo.php that returns a phpinfo() output, exposing the PHP environment and webserver variables (potentially including admin passwords, mail cr...

CVE-2022-24729

CVE-2022-24729 affects CKEditor4 prior to 4.18.0, where the dialog plugin has a vulnerability in the input validator regex that can cause a severe performance drop, leading to browser tab freeze (ReDoS). The issue is documented with a confirmed remediation: upgrade to CKEditor4 4.18.0 or newer. C...

CVE-2024-1597

The pgjdbc PostgreSQL JDBC Driver contains a critical SQL injection vulnerability when the non-default connection property PreferQueryMode=SIMPLE is enabled. The flaw allows an attacker to bypass parameterized query protections by constructing a matching string payload, provided a numeric placeho...

CVE-2023-5870

Summary (CVE-2023-5870) : PostgreSQL vulnerability where the pg_cancel_backend role can signal background workers (including the autovacuum launcher and logical replication launcher). The underlying issue is that signaling is possible for non-core extensions with less-resilient background workers...

CVE-2022-28771

SAP Business One License service API (version 10.0) is affected by a vulnerability caused by a missing authentication check. The issue allows an unauthenticated, remote attacker to send malicious HTTP requests over the network, potentially breaking the whole application and making it inaccessible...

CVE-2020-10756

CVE-2020-10756 is a concrete vulnerability in the QEMU SLiRP networking (libslirp) implementation. The issue is an out-of-bounds read in icmp6_send_echoreply() when replying to ICMP echo requests, enabling a guest to leak host memory and cause information disclosure. Affected component/version: l...

CVE-2020-5398

CVE-2020-5398 (Spring Framework) affects Spring Framework versions: 5.0.x before 5.0.16, 5.1.x before 5.1.13, and 5.2.x before 5.2.3. The vulnerability is a reflected file download (RFD) attack triggered when an application sets a Content-Disposition header whose filename is derived from user inp...

CVE-2019-15917

CVE-2019-15917 concerns a use-after-free in the Linux kernel before 5.0.5. The bug occurs when hci_uart_register_dev() fails in hci_uart_set_proto() within drivers/bluetooth/hci_ldisc.c, potentially after a local Bluetooth UART device setup. Affected: Linux kernel versions prior to 5.0.5. Impact ...

CVE-2025-52367

PivotX CMS version 3.0.0 RC 3 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within the title and subtitle fields during page creation. The root cause is a lack of input sanitization in the savePage($page) function in modules/pages_flat.php, where data is stored via saveSerialize() and...

CVE-2025-53864

CVE-2025-53864 is described as a denial of service vulnerability in Nimbus JOSE + JWT where a deeply nested JSON object in a JWT claim set can trigger uncontrolled recursion. IBM security notices cite affected product lines and versions, for example IBM API Connect (OnPrem) v12.1.0.0 and Jazz Fou...

CVE-2020-36024

CVE-2020-36024 affects freedesktop poppler, specifically version 20.12.1, where a NULL pointer dereference in FoFiType1C::convertToType1 can be exploited via a crafted PDF to trigger denial of service. The connected sources (MiracleLinux, Unity Linux, Debian, Rocky Linux, etc.) cite this vulnerab...

CVE-2023-21971

CVE-2023-21971 concerns Oracle MySQL Connectors, specifically the Connector/J component. Affected are 8.0.32 and earlier versions. The vulnerability, described as difficult to exploit, allows a high-privilege attacker with network access via multiple protocols to compromise MySQL Connectors. Impa...

CVE-2022-23125

Netatalk CVE-2022-23125 is a remote, unauthenticated code execution flaw in the copyapplfile function where len validation for user data can overflow a fixed-size stack buffer. Affected product: Netatalk (AFP) 3.1.x. Root context: multiple sources confirm root-level impact and disclosure of this ...

CVE-2020-29594

CVE-2020-29594 affects Rocket.Chat (varying branches: before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, 3.9.x before 3.9.1) and is caused by mishandling of SAML login. The connected HackerOne report documents an unauthenticated bypass via the addSamlProvide...

CVE-2007-5090

CVE-2007-5090 : IBM Rational ClearQuest contains an unspecified vulnerability that, when using Microsoft SQL Server or IBM DB2, could allow a local attacker to manipulate data. The connected IBM/DB2 bulletin confirms exposure in CQ and notes a low (1.2) CVSS base score with local access; no mitig...

CVE-2026-69414

Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates once Microsoft and others publish concrete information about CVE-2026-69414.

CVE-2025-55315

CVE-2025-55315 describes an HTTP request/response smuggling flaw in ASP.NET Core caused by inconsistent interpretation of HTTP requests. Affected ASP.NET Core versions include 2.3, 8.0, and 9.0, with high impact to confidentiality and integrity and network-based exploitation. Multiple public expl...

CVE-2025-34027

Summary of CVE-2025-34027: Versa Concerto SD-WAN exposes an authentication bypass in the Traefik reverse proxy configuration, enabling unauthorized access to administrative endpoints. In addition, the Spack upload endpoint can trigger a TOCTOU race with path loading manipulation to achieve remote...

CVE-2025-21971

Summary (CVE-2025-21971): In the Linux kernel, an issue in net_sched can cause incorrect parent backlog statistics when a Qdisc class is created with classid TC_H_ROOT (0xFFFFFFFF). The traversal in qdisc_tree_reduce_backlog() terminates at TC_H_ROOT instead of the actual root, which can lead to ...

CVE-2023-34399

The Mercedes-Benz NTG6 head-unit and MBUX multimedia systems are vulnerable to an integer overflow in the Boost library . This issue occurs when processing values (specifically cid ) during the import or export of profile settings via USB . An attacker can exploit this vulnerability to trigger a ...

CVE-2023-36762

CVE-2023-36762 is a Microsoft Word remote code execution vulnerability. The available documents confirm an impact on Word and related Word components, with an exploit path requiring user interaction and local access (CVSS 3.1: AV=L, AC=L, PR=None, UI=Required, C/H/I/H/A=L). Public details note po...

CVE-2023-20569

CVE-2023-20569 concerns a side-channel vulnerability in some AMD CPUs where an attacker may influence the return-address predictor, enabling speculative execution at attacker-controlled addresses and potential information disclosure. The vulnerability is discussed across multiple connected source...

CVE-2023-37580

CVE-2023-37580 – Zimbra Collaboration Suite (ZCS) XSS : The Nuclei template confirms a Cross-Site Scripting vulnerability in ZCS 8.x before 8.8.15 Patch 41, specifically in the Zimbra Classic Web Client. Impact described in the connected doc: successful exploitation could execute arbitrary script...

CVE-2023-26818

CVE-2023-26818 affects Telegram versions 9.3.1–9.4.0. The issue is a macOS/ DYLD_INSERT_LIBRARIES–related access control flaw that can allow an attacker to read restricted files, microphone, or video recordings. Connected sources confirm the presence of the vulnerability in Telegram and describe ...

CVE-2022-22995

Netatalk (Apple Filing Protocol server) is affected by CVE-2022-22995. The vulnerability arises from a flaw in the interaction between SMB and AFP primitives in default configurations, enabling arbitrary file writes and potentially remote code execution. Demonstrations and advisories reference an...

CVE-2020-9802

A logic issue in the WebKit engine allows a remote attacker to achieve arbitrary code execution by processing maliciously crafted web content. This vulnerability affects multiple products, including iOS , iPadOS , tvOS , watchOS , Safari , iTunes for Windows , and iCloud for Windows . Specific co...

CVE-2023-34048

CVE-2023-34048 affects VMware vCenter Server and Cloud Foundation via an out-of-bounds write in the DCERPC implementation that can lead to remote code execution when a attacker with network access sends a crafted request. The vulnerability is rated CVSS v3.1 base score 9.8 (CRITICAL) with network...

CVE-2023-39192

CVE-2023-39192 : A flaw in the Linux kernel Netfilter xt_u32 module allows a local privileged attacker to trigger an out-of-bounds read by crafting improper values in the xt_u32 structure. The root cause is missing validation of fields in xt_u32, leading to crash or information disclosure. Impact...

CVE-2021-36374

CVE-2021-36374 affects Apache Ant and causes denial of service via memory allocation when parsing specially crafted ZIP-based archives (and derived formats such as JARs and certain Office files). The vulnerability stems from how Ant reads these archives, enabling large memory use and out-of-memor...

CVE-2019-10746

CVE-2019-10746 affects the nodejs mixin-deep module (versions before 1.3.2 and 2.0.0) and is due to prototype pollution: an attacker can use a constructor payload to add or modify properties on Object.prototype. Inffected ecosystems include applications reporting this vulnerability via Nessus/Mir...

CVE-2008-0075

CVE-2008-0075 is an IIS remote code execution vulnerability in Microsoft Internet Information Services 5.1–6.0, caused by a buffer overflow when handling HTML-encoded ASP pages. An attacker could pass crafted input to ASP pages to execute arbitrary code on the target, with the Worker Process Iden...

CVE-2025-25875

A SQL injection vulnerability exists in ITSourcecode Simple ChatBox version 1.0 and earlier versions. The flaw originates from unknown code within the /message.php file, which could allow an attacker to obtain sensitive data . Remediation involves updating to the latest version, using strong/uniq...

CVE-2022-3924

CVE-2022-3924 is a vulnerability in ISC BIND where stale-answer-client-timeout (enabled with a positive value) can cause a race between returning a stale answer and an early SERVFAIL, potentially triggering an assertion failure and DoS. Affected are BIND 9.16.12–9.16.36, 9.18.0–9.18.10, 9.19.0–9....

CVE-2020-9547

CVE-2020-9547 involves jackson-databind 2.x before 2.9.10.4 where deserialization gadget typing interaction (related to ibatis-sqlmap) enables likely remote code execution. Connected IBM advisories enumerate multiple CBEs in jackson-databind and show affected IBM products; remediation guidance ge...

CVE-2019-17133

CVE-2019-17133 affects Linux kernel up to 5.3.2, where cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c fails to reject an oversized SSID IE, causing a Buffer Overflow. The available connected docs confirm the vulnerability and its impact but do not provide a specific patched version or reme...

CVE-2016-1546

CVE-2016-1546 affects Apache HTTP Server 2.4.17/2.4.18 with mod_http2 enabled, where there is no limit on the number of simultaneous stream workers for a single HTTP/2 connection. This can allow remote attackers to cause a denial of service (stream-processing outage) via modified flow-control win...

CVE-2010-4007

Oracle Mojarra is affected by CVE-2010-4007 due to an encrypted View State without a Message Authentication Code (MAC), enabling a padding oracle attack to modify the View State remotely. This weakness is reiterated across multiple sources (NVD, Red Hat advisory, and other feeds) and is tied to M...

CVE-2026-68821

The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...

CVE-2024-9465

Summary: CVE-2024-9465 is an unauthenticated SQL injection in Palo Alto Networks Expedition that can disclose database contents (password hashes, usernames, device configurations, API keys) and allow creation/read of arbitrary files via the CHECKPOINT.php endpoint. Multiple connected sources corr...

CVE-2024-7971

CVE-2024-7971 is a Type Confusion in Google Chrome’s V8 engine that allows remote heap corruption via a crafted HTML page. Affected software is Google Chrome (and Chromium-based browsers) prior to version 128.0.6613.84. The root cause is a V8 type confusion issue, enabling exploitation when proce...

CVE-2021-46950

The CVE-2021-46950 entry concerns a Linux kernel data corruption issue in md/raid1(bitmaps): when ending a failed write request, bitmap bits could be cleared, causing corruption. The vulnerability arises in the failure handling path of raid1_end_write_request, where the I/O might be retried (R1BI...

CVE-2023-4194

CVE-2023-4194 affects the Linux kernel TUN/TAP network devices. A type confusion in initialization of tun/tap sockets could let a local user bypass network filters and access resources. The description notes patches for CVE-2023-1076 were incomplete; upstream commits (tun_chr_open/tun_open and re...

CVE-2023-33010

CVE-2023-33010 is a high-severity (CVSS 3.1: 9.8) buffer overflow in the ID processing function of Zyxel firewalls (ATP, USG FLEX, USG, ZyWALL/VPN) that can be exploited without authentication to cause DoS and remote code execution. Affected firmware ranges include Zyxel ATP 4.32–5.36 Patch 1, US...

CVE-2023-25193

CVE-2023-25193 affects HarfBuzz up to 6.0.0, where hb-ot-layout-gsubgpos.hh can trigger O(n^2) growth by consecutive marks when looking back for base glyphs during mark attachment. Public references in the provided documents confirm the vulnerability and its association with HarfBuzz, but no expl...

CVE-2022-26381

CVE-2022-26381 describes a use-after-free risk caused by forcing a text reflow in an SVG object, potentially exploitable as a crash. Affected products include Mozilla Firefox (less than 98) and Firefox ESR (less than 91.7) and Mozilla Thunderbird (less than 91.7). External documents (Astra Linux,...

CVE-2022-28739

CVE-2022-28739 describes a buffer over-read during String-to-Float conversion in Ruby. Affected are Ruby versions: 2.6 and earlier, 2.7.x prior to 2.7.6, 3.x prior to 3.0.4, and 3.1.x prior to 3.1.2. The flaw affects conversion paths such as Kernel#Float and String#to_f and can lead to memory saf...

CVE-2020-14550

CVE-2020-14550 affects the MySQL Client (C API) in Oracle MySQL. Affected are 5.6.48 and earlier, 5.7.30 and earlier, and 8.0.20 and earlier. The vulnerability allows a low-privilege, network-accessible attacker via multiple protocols to cause a hang or a frequent, crashable DoS of the MySQL Clie...

CVE-2020-10730

CVE-2020-10730 affects the Samba AD DC LDAP Server (ASQ, VLV, and paged_results) with a NULL pointer dereference/use-after-free in affected builds prior to 4.10.17, 4.11.11, and 4.12.4. The root cause is in handling certain LDAP controls in the AD DC LDAP server, with the issue also present in th...

CVE-2019-2602

CVE-2019-2602 affects Oracle Java SE and Java SE Embedded Libraries component. Affected: Java SE 7u211, 8u202, 11.0.2, 12; Java SE Embedded 8u201. Root cause per the entry: vulnerability in Libraries that allows an unauthenticated, network-based attacker to cause a hang or frequent crashes (compl...

CVE-2018-8034

CVE-2018-8034 concerns missing host name verification over TLS in the WebSocket client of Apache Tomcat. The issue affects multiple Tomcat branches and versions (7.0.35–7.0.88, 8.0.0.RC1–8.0.52, 8.5.0–8.5.31, 9.0.0.M1–9.0.9). Impact: an attacker on the local network could bypass host name verific...