CVE-2023-5345

CVE-2023-5345 : A use-after-free in the Linux kernel kernel’s fs/smb/client component can enable local privilege escalation. Specifically, an error in smb3_fs_context_parse_param frees ctx->password but does not set it to NULL, risking a double-free scenario. The issue is documented in the CVE...

CVE-2023-26049

Jetty cookie parsing vulnerability CVE-2023-26049 affects Jetty’s cookie handling where a cookie VALUE starting with a double quote can cause the parser to read past semicolons, effectively merging multiple cookies into one. This can enable cookie smuggling (e.g., exfiltrating HttpOnly cookies li...

CVE-2023-23752

CVE-2023-23752 affects Joomla! 4.0.0–4.2.7, where an improper access check on webservice endpoints allows unauthenticated access, enabling information disclosure. Exploit PoCs in public repos demonstrate unauthenticated disclosure against Joomla! 4.2.8 in some cases. Root cause: insufficient auth...

CVE-2022-31034

CVE-2022-31034 affects Argo CD (GitOps tool for Kubernetes). All versions starting with v0.11.0 are vulnerable due to insufficiently random values in OAuth2/OIDC login parameters, using a non-cryptographically secure PRNG seeded with a predictable/time-based value, reducing entropy in login flows...

CVE-2020-15349

BinaryNights ForkLift 3.x prior to 3.4 is affected by a local privilege escalation due to a privileged helper tool exposing an XPC interface that permits file operations (copy, move, delete) across processes as root and to change permissions. Impact is local privilege escalation with full root-le...

CVE-2019-14615

The CVE-2019-14615 issue concerns the Linux kernel i915 Intel graphics driver: insufficiently cleared data structures on context switches could leak information to a local attacker. Public notes indicate that the Ubuntu 18.04 kernel fix for CVE-2019-14615 was incomplete in certain kernel versions...

CVE-2019-2628

CVE-2019-2628 affects MySQL Server (InnoDB) with affected versions 5.7.25 and prior, and 8.0.15 and prior. An attacker with network access via multiple protocols can exploit this easily to cause a hang or frequent crash of MySQL Server (DoS). Connected sources confirm the vulnerability in multipl...

CVE-2004-1943

CVE-2004-1943 describes a PHP remote file inclusion in album_portal.php for phpBB modified by Przemo 1.8. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a crafted phpbb_root_path parameter. The details come from NVD/CVE records; no additional exploit, mitigat...

CVE-2025-11932

CVE-2025-11932 describes a timing side-channel in TLS 1.3 PSK binder verification, where a non-constant-time check could leak information about the PSK binder. The connected Nessus/OSV/DEBIAN listings corroborate a vulnerability in wolfSSL-related TLS/PSK processing and reference a changelog noti...

CVE-2023-36742

Microsoft Visual Studio Code is affected by CVE-2023-36742 through vulnerable pre-1.82.1 builds. Connected documents describe a remote code execution scenario in VS Code where a user must open a malicious project; a crafted dependencies entry in package.json causes npm to execute scripts locally,...

CVE-2023-34598

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) vulnerability that allows an attacker to include the content of several files from the installation folder in the server's response. The root cause involves the lack of proper validation on the "q" parameter , which can be manipulated t...

CVE-2022-31080

KubeEdge’s Websocket Client (Viaduct) in versions prior to 1.11.1, 1.10.2, and 1.9.4 is vulnerable to a DoS through memory exhaustion. The issue arises when a large response is read fully into memory, allowing an attacker to trigger a request that returns a large body and exhausts memory, potenti...

CVE-2022-31884

CVE-2022-31884 affects Marval MSM v14.19.0.12476 and is due to Improper Access Control. A low-privilege user can delete other users’ API Keys, including high-privilege and Administrator keys. The connected documents describe exploitation potential and real-world use; there is no publicly document...

CVE-2020-28007

Exim 4.x prior to 4.94.2 is affected by CVE-2020-28007, which allows local privilege escalation by exploiting a symlink/hard-link attack in the log directory where Exim runs as root and the directory is owned by a non-root user. The root-owned files can be overwritten from a local attacker, enabl...

CVE-2018-12207

CVE-2018-12207 describes an issue where improper invalidation of page-table updates by a privileged guest can cause a Denial of Service on the host on Intel processors. The vulnerability stems from how the guest VM handles translations in the MMU/TLB when paging structures change, potentially exp...

CVE-2019-3880

CVE-2019-3880 affects Samba where an RPC endpoint emulating Windows registry API can be abused by an unprivileged user to save a registry hive file outside the share, potentially creating a new file in the Samba share. Affected versions are pre-4.8.11, pre-4.9.6 and pre-4.10.2. Red Hat/CentOS and...

CVE-1999-0511

CVE-1999-0511 covers IP forwarding being enabled on a host that is not a router or firewall. Multiple connected sources confirm this condition and document remediation: disable IP forwarding (e.g., sysctl net.ipv4.ip_forward and related settings) and reboot where applicable. IBM bulletin notes a ...

CVE-2026-46595

The golang.org/x/crypto/ssh library is affected by an authorization bypass vulnerability. If an SSH server configuration uses a callback other than a public key , the system fails to perform source-address validation . This issue was previously addressed in CVE-2024-45337 but persists in specific...

CVE-2025-21765

CVE-2025-21765 is a Linux kernel IPv6 stack issue where ip6_default_advmss() reads the net structure without proper RCU protection, risking use-after-free scenarios. The vulnerability is fixed in updated kernels across Linux distributions (examples: ALAS2KERNEL advisories for AL2 kernels 5.10/5.1...

CVE-2024-56128

Apache Kafka's SCRAM authentication implementation fails to comply with RFC 5802 because it does not verify that the client's second-message nonce matches the server's first-message nonce. This flaw allows an attacker with plaintext access to the authentication exchange to intercept and potential...

CVE-2021-46935

CVE-2021-46935 : Linux kernel binder vulnerability where async_free_space accounting for empty parcels leaked up to 8 bytes per 8-byte-or-smaller async transaction. Root cause: after a patch fixing visibility (Android binder buffer moved out of user space), the free operation didn’t add back size...

CVE-2024-22243

CVE-2024-22243 involves Spring Framework's UriComponentsBuilder: when parsing an externally provided URL (e.g., from a query parameter) and performing host validation, it may allow an open redirect or SSRF if the URL is used after validation. The provided documents corroborate the vulnerability c...

CVE-2024-21893

Technical details about CVE-2024-21893 are not provided in the connected documents. The initial description notes an SSRF vulnerability in Ivanti products, but there are no product/version specifics or remediation details here. Monitor for updates.

CVE-2022-46146

CVE-2022-46146 affects Prometheus Exporter Toolkit prior to 0.7.2 and 0.8.2; attackers with access to the Prometheus web.yml and hashed passwords can poison the built-in authentication cache. A fix exists in 0.7.2 and 0.8.2. Attacker needs access to the hashed password to exploit. Upgrade to 0.7....

CVE-2021-3450

CVE-2021-3450 affects OpenSSL 1.1.1h–1.1.1j where a bug in the X509_V_FLAG_X509_STRICT path overwrote a prior CA-check result, bypassing the non-CA certificates prohibition unless a programmed purpose is used. When a purpose is configured, the certificate chain is still rejected; the issue is fix...

CVE-2016-1000027

CVE-2016-1000027 involves remote code execution in Pivotal Spring Framework when deserializing untrusted data. Connected sources specify impact up to Spring Framework 5.3.16 (RCE via Java deserialization) and note that the vendor discourages untrusted-deserialization usage. Remediation guidance i...

CVE-2019-16645

CVE-2019-16645 affects Embedthis GoAhead 2.5.0 (and potentially similar versions). The issue is an HTTP Host header-based host name leakage in certain pages (e.g., goform/login, config/log_off_page.htm) that causes links to be constructed using an attacker-controlled Host header, enabling phishin...

CVE-2018-12127

CVE-2018-12127 (MLPDS) describes a side-channel information disclosure via load-port data sampling in microarchitectures with speculative execution. The issue arises from leakage of data across privileged boundaries through speculative load-port behavior on some Intel CPUs. Public ARIs and adviso...

CVE-2013-4359

ProFTPD 1.3.4d and 1.3.5r3 are affected by an integer overflow in kbdint.c (mod_sftp) that can be triggered by a large response count in an authentication request, causing memory exhaustion and a DoS. The issue is confirmed across multiple advisories; remediation guidance in connected documents r...

CVE-2006-5494

CVE-2006-5494 / CVE-2006-6795 describe remote file inclusion flaws in the pandaBB module for PHP-Nuke and the My_eGallery 2.5.6 module for myPHPNuke, both allowing an attacker to execute arbitrary PHP code via a URL parameter. The core issue is PHP remote file inclusion in the gallery/displayCate...

CVE-2026-41089

CVE-2026-41089 is a Windows Netlogon RCE via a stack-based buffer overflow in CLDAP handling. Affected: Windows Server 2012 through 2025 domain controllers. Mechanism (per provided PoCs): unauthenticated remote is possible by sending crafted CLDAP UDP packets; a 528-byte stack buffer overflow occ...

CVE-2026-22732

CVE-2026-22732 affects Spring Security; multiple non-legacy branches are impacted where HTTP response headers for servlet applications may not be written. Affected versions include 5.7.0–5.7.21, 5.8.0–5.8.23, 6.3.0–6.3.14, 6.4.0–6.4.14, 6.5.0–6.5.8, and 7.0.0–7.0.3. The description indicates a he...

CVE-2025-11934

CVE-2025-11934 concerns wolfSSL’s TLS 1.3 CertificateVerify signature algorithm negotiation. The vulnerability stems from improper input validation that can downgrade the negotiated signature algorithm (e.g., client supports ECDSA P521 but server accepts and uses ECDSA P256), potentially weakenin...

CVE-2025-7775

CVE-2025-7775 is a memory overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway. The CVE affects deployments where the appliance is configured as a Gateway (VPN VServer, ICA Proxy, CVPN, RDP Proxy) or AAA VServer, and also affects LB virtual servers of type HTTP, SSL, or HTTP_QUIC ...

CVE-2024-52301

The Laravel web application framework is vulnerable to an environment manipulation flaw when the register_argc_argv PHP directive is enabled. An attacker can provide a specially crafted query string in a URL to inject arguments, allowing them to change the environment used by the framework during...

CVE-2023-6502

Summary of CVE-2023-6502: A DoS vulnerability in GitLab CE/EE triggered by processing a crafted wiki page. Affected: GitLab Community Edition and Enterprise Edition, across all versions prior to 16.10.6, 16.11 prior to 16.11.3, and 17.0 prior to 17.0.1. Root cause and exact technical details are ...

CVE-2023-38594

The CVE-2023-38594 issue is a WebKitGTK/WebKitGTK+ vulnerability: processing web content could lead to arbitrary code execution. Connected advisories confirm a fixed version across multiple distributions and products (e.g., WebKitGTK/WebKitGTK+), with fixes described as “improved checks” or relat...

CVE-2023-27992

CVE-2023-27992 affects Zyxel NAS326 (firmware before V5.21(AAZF.14)C0), NAS540 (before V5.21(AATB.11)C0), and NAS542 (before V5.21(ABAG.11)C0). It is a pre-authentication command-injection vulnerability allowing an unauthenticated attacker to remotely execute OS commands via crafted HTTP requests...

CVE-2023-1255

The CVE-2023-1255 vulnerability affects OpenSSL’s AES-XTS decryption on 64-bit ARM, where the implementation may read beyond the ciphertext buffer (for ciphertext sizes that are 4 mod 5 in 16-byte blocks), causing a crash and potential denial of service. Affected OpenSSL deployments may crash if ...

CVE-2022-38751

CVE-2022-38751 affects SnakeYAML (Java YAML parser). Issue: denial-of-service when parsing untrusted YAML, potentially via stack overflow. Public details in multiple advisories confirm affected packages and urge upgrade. Remediation per sources includes upgrading SnakeYAML to newer releases (e.g....

CVE-2022-0336

Samba AD DC CVE-2022-0336: SPN checks can be bypassed when re-adding a previously present SPN, enabling a write-enabled attacker to impersonate services or cause DoS by matching an existing SPN. Some advisories note no patch for certain releases (e.g., Samba 4.12.5-7), while others indicate an up...

CVE-2022-29453

The CVE-2022-29453 entry concerns the WordPress plugin API KEY for Google Maps (versions

CVE-2018-10547

CVE-2018-10547: Reflected XSS on PHAR 403/404 error pages due to an incomplete fix for CVE-2018-5712. Affected PHP versions are: 5.6 before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. Exploitation involves request data for a .phar file leading to XSS on error pages. ...

CVE-2012-4557

CVE-2012-4557 affects the Apache HTTP Server, specifically the mod_proxy_ajp module in versions 2.2.12–2.2.21. The vulnerability causes a worker node to enter an error state when a long request-processing time is detected, enabling remote attackers to trigger a denial of service via an expensive ...

CVE-2021-46918

CVE-2021-46918 is a Linux kernel vulnerability in the IDXDMA/DMAR DMA engine where MSIX permission entries were not cleared on device shutdown. The issue arose because MSIX entries were left enabled and pasid entries remained programmed when the device shut down, potentially enabling persistence ...

CVE-2023-31130

CVE-2023-31130 affects the c-ares asynchronous DNS library. The vulnerability is a buffer underflow/underwrite in ares_inet_net_pton() for IPv6 addresses such as 0::00:00:00/2. Affected versions are prior to the fix, with the issue addressed in c-ares 1.19.1. Multiple advisories reference upgrade...

CVE-2023-23392

CVE-2023-23392 is a remotely exploitable security flaw in the Windows HTTP Protocol Stack that enables remote code execution when HTTP/3 with buffered I/O is enabled. Multiple connected sources confirm affected products as Windows 11 and Windows Server 2022, with successful exploitation possible ...

CVE-2022-22742

CVE-2022-22742 is confirmed in connected records as an out-of-bounds memory access in Firefox/Thunderbird when inserting text in edit mode. Affected products include Firefox ESR < 91.5, Firefox < 96, and Thunderbird

CVE-2022-22739

CVE-2022-22739 describes a vulnerability where malicious websites could lure users into launching a program to handle an external URL protocol. Public references in the provided documents indicate affected products are Mozilla Firefox (Firefox ESR < 91.5, Firefox < 96) and Thunderbird (

CVE-2022-46768

CVE-2022-46768 describes an arbitrary file read vulnerability in the Zabbix Web Service Report Generation component that listens on port 10053. The issue arises because the service does not validate URL parameters before reading files, enabling potential exposure of sensitive data. The CVSS 3.1 b...