CVE-2023-34598

Gibbon v25.0.0 is affected by a Local File Inclusion (LFI) vulnerability that allows the server to include content from files within the installation folder in responses. Root cause: unsafely including local files via request handling. Impact: potential exposure of sensitive files; risk escalatio...

CVE-2020-13936

CVE-2020-13936 affects Apache Velocity, where modifying Velocity templates can bypass the sandbox and allow remote code execution with the container’s privileges. Engine versions affected include up to 2.2; IBM and related advisories flag this as a Velocity sandbox bypass leading to arbitrary cod...

CVE-2016-1000027

CVE-2016-1000027 involves remote code execution in Pivotal Spring Framework when deserializing untrusted data. Connected sources specify impact up to Spring Framework 5.3.16 (RCE via Java deserialization) and note that the vendor discourages untrusted-deserialization usage. Remediation guidance i...

CVE-2018-20346

CVE-2018-20346 affects SQLite when the FTS3 extension is enabled. SQLite before 3.25.3 exhibits an integer overflow (and resulting buffer overflow) for FTS3 queries after crafted changes to FTS3 shadow tables, enabling remote attackers to execute arbitrary SQL statements and potentially take cont...

CVE-2025-10158

CVE-2025-10158 affects rsync across multiple distros. The issue is a potential out-of-bounds read on a heap buffer triggered by a negative array index when a malicious client acts as the receiver of an rsync transfer. Exploitation requires at least read access to the remote rsync module. Publicly...

CVE-2024-24790

Summary: CVE-2024-24790 concerns the behavior of the Go networking IsPrivate/IsLoopback (and related) methods when given IPv4-mapped IPv6 addresses. The connected advisories/entries confirm a mismatch where these addresses could be treated as non-private, non-loopback in Go’s net/ip logic, potent...

CVE-2024-21893

Technical details about CVE-2024-21893 are not provided in the connected documents. The initial description notes an SSRF vulnerability in Ivanti products, but there are no product/version specifics or remediation details here. Monitor for updates.

CVE-2023-31130

CVE-2023-31130 affects the c-ares asynchronous DNS library. The vulnerability is a buffer underflow/underwrite in ares_inet_net_pton() for IPv6 addresses such as 0::00:00:00/2. Affected versions are prior to the fix, with the issue addressed in c-ares 1.19.1. Multiple advisories reference upgrade...

CVE-2022-21426

CVE-2022-21426 affects Oracle Java SE and GraalVM Enterprise Edition, with vulnerable components in Java SE (JAXP, Libraries, Serialization) and GraalVM CE surface. Public advisories list affected versions including Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18 and GraalVM CE: 20.3.5, 21.3.1,...

CVE-2020-15522

CVE-2020-15522 affects Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2/1.0.2.1, and BC-FNA before 1.0.1.1. The issue is a timing side-channel in the EC math library that can reveal information about a private key when an attacker observes timing across multiple d...

CVE-2021-3450

CVE-2021-3450 affects OpenSSL 1.1.1h–1.1.1j where a bug in the X509_V_FLAG_X509_STRICT path overwrote a prior CA-check result, bypassing the non-CA certificates prohibition unless a programmed purpose is used. When a purpose is configured, the certificate chain is still rejected; the issue is fix...

CVE-2017-16995

CVE-2017-16995 is a sign-extension defect in the Linux kernel's eBPF verifier (kernel/bpf/verifier.c) that can be triggered via BPF syscall, allowing a local user to escalate privileges or affect memory/behavior. Public writeups and Arch security advisories indicate the issue affects kernels prio...

CVE-2015-8096

CVE-2015-8096 affects Google Picasa 3.9.140.239 and 3.9.140.248, with a heap-based buffer overflow exploitable via Phase One tag 0x412 that enables remote code execution. OpenVAS entries corroborate a buffer overflow condition across Windows and macOS builds; CNVD/NVD entries align on the same ve...

CVE-2025-11931

The set of connected documents confirms this CVE affects wolfSSL’s XChaCha20-Poly1305 code, specifically the wc_XChaCha20Poly1305_Decrypt() function. The root cause is an integer underflow that can lead to out-of-bounds access when decrypting, and this path is taken from direct application calls ...

CVE-2018-9447

CVE-2018-9447 affects Android devices (Pixel/Nexus context) via a vulnerability in EmergencyCallbackModeExitDialog.java where a missing null check in onCreate can crash emergency callback mode, enabling local denial of service without extra privileges. Descriptions across multiple sources confirm...

CVE-2021-46918

CVE-2021-46918 is a Linux kernel vulnerability in the IDXDMA/DMAR DMA engine where MSIX permission entries were not cleared on device shutdown. The issue arose because MSIX entries were left enabled and pasid entries remained programmed when the device shut down, potentially enabling persistence ...

CVE-2023-45857

CVE-2023-45857 - Axios XSRF token exposure : The issue in Axios 1.5.1 causes the confidential XSRF-TOKEN stored in cookies to be included in the HTTP header X-XSRF-TOKEN for every request, potentially allowing an attacker to view sensitive information. The public metrics indicate a CVSS v3.1 base...

CVE-2023-38594

The CVE-2023-38594 issue is a WebKitGTK/WebKitGTK+ vulnerability: processing web content could lead to arbitrary code execution. Connected advisories confirm a fixed version across multiple distributions and products (e.g., WebKitGTK/WebKitGTK+), with fixes described as “improved checks” or relat...

CVE-2023-38133

CVE-2023-38133 affects WebKit/WebKitGTK components and is documented across multiple advisories. The issue involves processing web content that may disclose sensitive information. Fixes are implemented in Apple platforms (iOS 15.7.8 / 16.6, iPadOS 15.7.8 / 16.6, tvOS 16.6, watchOS 9.6, macOS Vent...

CVE-2023-29402

CVE-2023-29402 affects the golang package; the root cause is the go command generating unexpected code at build time when using cgo, occurring especially with untrusted modules whose directories contain newline characters in their names. The impact is outlined as potential unexpected behavior in ...

CVE-2023-26049

Jetty cookie parsing vulnerability CVE-2023-26049 affects Jetty’s cookie handling where a cookie VALUE starting with a double quote can cause the parser to read past semicolons, effectively merging multiple cookies into one. This can enable cookie smuggling (e.g., exfiltrating HttpOnly cookies li...

CVE-2022-22739

CVE-2022-22739 describes a vulnerability where malicious websites could lure users into launching a program to handle an external URL protocol. Public references in the provided documents indicate affected products are Mozilla Firefox (Firefox ESR < 91.5, Firefox < 96) and Thunderbird (

CVE-2022-2047

CVE-2022-2047 affects Eclipse Jetty: vulnerable in Jetty 9.4.0–9.4.46, 10.0.0–10.0.9, and 11.0.0–11.0.9. The HttpURI class misparses the authority segment of an HTTP URI, treating certain invalid inputs as a hostname, which can cause failures in a proxy scenario. Connected documents provide exact...

CVE-2022-31035

CVE-2022-31035 affects Argo CD, a Kubernetes GitOps tool. All versions starting with v1.0.0 are vulnerable to an XSS issue that lets an attacker inject a javascript: link in the UI; when clicked by a victim, the script can run with the victim’s permissions (potentially admin) and perform UI/API a...

CVE-2022-30034

Flower, the web UI for the Celery Python RPC framework, is affected by CVE-2022-30034 via an OAuth authentication bypass. All versions as of 2022-05-02 are vulnerable, potentially allowing an attacker to access the Flower API, discover and invoke arbitrary Celery RPC calls, or cause a denial of s...

CVE-2020-28007

Exim 4.x prior to 4.94.2 is affected by CVE-2020-28007, which allows local privilege escalation by exploiting a symlink/hard-link attack in the log directory where Exim runs as root and the directory is owned by a non-root user. The root-owned files can be overwritten from a local attacker, enabl...

CVE-2018-20815

CVE-2018-20815 affects QEMU (illustrated by RHSA-2019:1723/1743 and Oracle Linux advisories). Description in the CVE: in QEMU 3.1.0, load_device_tree calls the deprecated load_image function, which has a buffer overflow risk. Connected documents substantiate device_tree.c heap/buffer overflow con...

CVE-2015-4599

CVE-2015-4599 affects PHP’s SoapFault::__toString in ext/soap/soap.c. The issue arises from a type confusion when processing unexpected data types, enabling remote attackers to obtain sensitive information, trigger a denial of service (application crash), or possibly execute arbitrary code. Affec...

CVE-2025-21391

CVE-2025-21391 (Windows Storage Elevation of Privilege) describes a local privilege escalation in Windows Storage. The vulnerability allows an attacker with low privileges and no user interaction to elevate to SYSTEM by exploiting a link-following flaw in Windows Storage (root cause described as ...

CVE-2024-22243

CVE-2024-22243 involves Spring Framework's UriComponentsBuilder: when parsing an externally provided URL (e.g., from a query parameter) and performing host validation, it may allow an open redirect or SSRF if the URL is used after validation. The provided documents corroborate the vulnerability c...

CVE-2023-4813

CVE-2023-4813 is a glibc flaw where gaih_inet may use freed memory, causing an application crash. It is exploitable when getaddrinfo is called and NSS/hosts database uses SUCCESS=continue or SUCCESS=merge. Public documentation confirms the issue and tracks it alongside other CVEs (e.g., CVE-2023-...

CVE-2023-38611

CVE-2023-38611 affects WebKitGTK/WebKitGTK+ in WebKitGTK’s handling of web content. The vulnerability stems from memory handling issues that could allow arbitrary code execution when processing web content. Debian, Fedora, Gentoo, AlmaLinux advisories and the CVE pages indicate updates to WebKitG...

CVE-2019-20807

CVE-2019-20807 affects Vim prior to 8.1.0881, where a user can bypass the rvim restricted mode and run arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, Lua). Affected product: Vim (Unix/Linux environments). Root cause: restricted-mode bypass enabling execution of external comma...

CVE-2018-20843

The CVE-2018-20843 issue affects libexpat (Expat) prior to 2.2.7, where XML inputs with many colons can cause high RAM/CPU usage and enable DoS. Related CVE-2019-15903 describes a heap-based buffer over-read when crafted XML triggers early parsing state switches. Public advisories confirm that an...

CVE-2018-0886

CVE-2018-0886 denotes a CredSSP remote code execution vulnerability in Windows authentication flows (Credential Security Support Provider protocol). The core issue is how CredSSP validates requests during authentication, enabling potential code execution via an RDP-related interaction. Public adv...

CVE-2026-54121

CVE-2026-54121 affects Active Directory Certificate Services (AD CS). Root cause: improper authorization allowing an authorized attacker to elevate privileges over the network. Impact: elevation of privilege with high CVSS (8.8) per Microsoft-assigned metrics. Remediation: Microsoft has released ...

CVE-2024-7971

CVE-2024-7971 is a Type Confusion in Google Chrome’s V8 engine that allows remote heap corruption via a crafted HTML page. Affected software is Google Chrome (and Chromium-based browsers) prior to version 128.0.6613.84. The root cause is a V8 type confusion issue, enabling exploitation when proce...

CVE-2023-42917

CVE-2023-42917 is a memory corruption vulnerability in Apple WebKit that may allow arbitrary code execution when processing web content. It is fixed in iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2. The CVE entry notes that exploitation may have occurred on iOS versions before...

CVE-2023-36742

Microsoft Visual Studio Code is affected by CVE-2023-36742 through vulnerable pre-1.82.1 builds. Connected documents describe a remote code execution scenario in VS Code where a user must open a malicious project; a crafted dependencies entry in package.json causes npm to execute scripts locally,...

CVE-2022-29912

The CVE-2022-29912 issue concerns the handling of SameSite cookies in reader mode. Affected products include Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox

CVE-2022-22742

CVE-2022-22742 is confirmed in connected records as an out-of-bounds memory access in Firefox/Thunderbird when inserting text in edit mode. Affected products include Firefox ESR < 91.5, Firefox < 96, and Thunderbird

CVE-2022-46146

CVE-2022-46146 affects Prometheus Exporter Toolkit prior to 0.7.2 and 0.8.2; attackers with access to the Prometheus web.yml and hashed passwords can poison the built-in authentication cache. A fix exists in 0.7.2 and 0.8.2. Attacker needs access to the hashed password to exploit. Upgrade to 0.7....

CVE-2020-8927

CVE-2020-8927 is a buffer overflow in the Brotli library prior to 1.0.8 triggered by oversized one-shot decompression requests (copying chunks > 2 GiB), which can crash a target process. Affected: Brotli up to 1.0.7/older builds used by various ecosystems. Root cause: unsafe handling of input ...

CVE-2020-12651

CVE-2020-12651 affects VanDyke Software SecureCRT versions prior to 8.7.2. The issue is a memory corruption vulnerability triggered by an invalid banner-driven CSI sequence, where a line number passed to CSI functions can exceed INT_MAX, leading to integer overflow and potential arbitrary code ex...

CVE-2018-1000807

CVE-2018-1000807 concerns Python-pyOpenSSL before 17.5.0, with a CWE-416 Use-After-Free in X509 object handling that can lead to denial of service or remote code execution. The vulnerability is reported as fixed in 17.5.0. Connected sources (SUSE-SU-2024:1626-1; SUSE-SU-2024:3749-1; OSV entries) ...

CVE-2018-14041

CVE-2018-14041 affects Bootstrap: XSS in the data-target attribute of scrollspy for Bootstrap versions before 4.1.2. The root cause is unvalidated input in data-target, enabling HTML/JS injection. Remediation is to upgrade to Bootstrap 4.1.2 or later (as referenced by Bootstrap’s security note). ...

CVE-2018-1115

CVE-2018-1115 affects PostgreSQL deployments using the adminpack extension, where pg_catalog.pg_logfile_rotate() does not enforce the same ACLs as pg_rotate_logfile. This could allow an attacker who can connect to a database with adminpack loaded to trigger log rotation, bypassing intended access...

CVE-2017-7546

CVE-2017-7546 affects PostgreSQL versions prior to 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4, due to an incorrect authentication flaw that allows remote attackers to gain access to accounts with an empty password. Upstream fixed versions are 9.2.22, 9.3.18, 9.4.13, 9.5.8, and 9.6.4; vendor advisori...

CVE-2006-5052

OpenSSH before 4.4 on some platforms is vulnerable to a remote attacker determining the validity of usernames via a GSSAPI authentication abort. The issue affects portable OpenSSH versions prior to 4.4 and is discussed in multiple advisories (e.g., RHSA-2007:0703, RHSA-2007:0540, and related OSS/...

CVE-2025-21765

CVE-2025-21765 is a Linux kernel IPv6 stack issue where ip6_default_advmss() reads the net structure without proper RCU protection, risking use-after-free scenarios. The vulnerability is fixed in updated kernels across Linux distributions (examples: ALAS2KERNEL advisories for AL2 kernels 5.10/5.1...