CVE-2025-0411

CVE-2025-0411 — 7-Zip MoTW bypass : Multiple connected documents confirm a local-vector vulnerability where double-nested archives fail to propagate the Mark-of-the-Web to extracted files, allowing a crafted archive to execute arbitrary code in the user’s context after interaction (opening/extrac...

CVE-2022-28735

The CVE-2022-28735 entry describes a vulnerability in GRUB2 where the shim_lock verifier allows loading non-kernel files on shim-powered secure boot systems, potentially breaking the secure boot trust-chain by loading unverified code or modules. Connected advisories (e.g., CBLMARINER entries for ...

CVE-2022-3736

CVE-2022-3736 affects ISC BIND 9 resolvers. When stale-answer-cache is enabled and stale-answer-timeout is >0, receiving an RRSIG query can cause named to crash. Affected versions include 9.16.12–9.16.36, 9.18.0–9.18.10, 9.19.0–9.19.8 (and associated S1 builds). Patches exist: remediation is t...

CVE-2021-33045

CVE-2021-33045 is an authentication bypass vulnerability in Dahua IP cameras/IPc devices during login. The initial description confirms an identity authentication bypass by constructing malicious data packets. Connected PoC data detail concrete technical aspects: the campaign uses reverse-enginee...

CVE-2020-9547

CVE-2020-9547 involves jackson-databind 2.x before 2.9.10.4 where deserialization gadget typing interaction (related to ibatis-sqlmap) enables likely remote code execution. Connected IBM advisories enumerate multiple CBEs in jackson-databind and show affected IBM products; remediation guidance ge...

CVE-2019-16645

CVE-2019-16645 affects Embedthis GoAhead 2.5.0 (and potentially similar versions). The issue is an HTTP Host header-based host name leakage in certain pages (e.g., goform/login, config/log_off_page.htm) that causes links to be constructed using an attacker-controlled Host header, enabling phishin...

CVE-2018-18311

CVE-2018-18311 is a Perl vulnerability describing a buffer overflow caused by crafted regular expressions and an integer/offset issue in Perl’s environment setup (Perl before 5.26.3 and 5.28.x before 5.28.1). Connected advisories show multiple distributions releasing patches and updates to Perl p...

CVE-2018-3282

CVE-2018-3282 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Affected versions include 5.5.61 and earlier, 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier, with an attack surface that enables a network-accessing, high-privileged attacker...

CVE-2025-0108

CVE-2025-0108 affects Palo Alto Networks PAN-OS and targets the management web interface, where an unauthenticated attacker can bypass authentication and invoke certain PHP scripts. Public exploit/PoC tooling exists (GitHub repos) and activity has been observed, including reports of active exploi...

CVE-2024-5258

CVE-2024-5258 is an authorization bypass in GitLab. The vulnerability affects GitLab releases: 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1, where an authenticated attacker could exploit a crafted naming convention to bypass pipeline authorization logic. The issue impacts th...

CVE-2022-3358

Summary: CVE-2022-3358 affects OpenSSL 3.0.0–3.0.5 and occurs when legacy custom ciphers are passed via EVP_CIPHER_meth_new() with NID_undef. The initialization functions EVP_EncryptInit_ex2()/EVP_DecryptInit_ex2()/EVP_CipherInit_ex2() may resolve to the NULL cipher from providers, causing plaint...

CVE-2025-64446

CVE-2025-64446 is a high-severity relative path traversal in Fortinet FortiWeb that enables unauthenticated administrative command execution via crafted HTTP/HTTPS requests. Affected FortiWeb branches and patched versions are explicitly documented: 8.0.0–8.0.1 (fix in 8.0.2+), 7.6.0–7.6.4 (fix in...

CVE-2023-32049

CVE-2023-32049 is a Windows SmartScreen Security Feature Bypass vulnerability. The issue allows an attacker to bypass the Open File - Security Warning prompt by convincing a user to click a specially crafted URL, enabling potential code execution on the affected system. Public sources indicate ac...

CVE-2022-20929

CVE-2022-20929 concerns Cisco Enterprise NFV Infrastructure Software (NFVIS) where upgrade signature verification is insufficient. The issue allows an unauthenticated, local attacker to supply an unauthentic upgrade file for upload, potentially leading to full system compromise. Affected componen...

CVE-2023-0414

Wireshark CVE-2023-0414 describes a crash in the EAP dissector in Wireshark 4.0.0–4.0.2, allowing denial of service via packet injection or crafted capture files. Connected sources confirm this exact CVE and list it among other Wireshark issues; advisories and vendor notes indicate remediation by...

CVE-2022-22740

CVE-2022-22740 is confirmed in connected documents as a use-after-free caused by freeing network request objects too early, potentially enabling a crash. Affected products: Firefox ESR < 91.5, Firefox < 96, and Thunderbird

CVE-2022-29353

Affected software: Graphql-upload v13.0.0 (Node.js middleware). Vulnerable component: file upload module; root cause: arbitrary file upload via crafted filename enables code execution. Impact: remote code execution with high/critical severity indicators (network vector, no authentication; confide...

CVE-2020-14789

CVE-2020-14789 affects Oracle MySQL Server (component: Server: FTS). Vulnerability details in connected advisories show it impacts MySQL 5.7.31 and prior and 8.0.21 and prior, with an attacker having network access via multiple protocols and high privileges able to cause a hang or crash (DoS) of ...

CVE-2019-9458

CVE-2019-9458 is a Linux kernel video driver use-after-free caused by a race condition, leading to local privilege escalation without user interaction. Multiple connected advisories confirm the issue exists in the Android/Linux kernel/video driver stack and note kernel fixes are needed; no public...

CVE-2013-2070

The CVE concerns nginx proxying behavior and chunked transfer handling. Affected product: nginx with the proxy module/http parsing paths noted in CVE-2013-2070 (versions 1.1.4–1.2.8 and 1.3.0–1.4.0) when proxy_pass is used to untrusted upstream HTTP servers. Root cause: crafted proxy responses ca...

CVE-2025-21765

CVE-2025-21765 is a Linux kernel IPv6 stack issue where ip6_default_advmss() reads the net structure without proper RCU protection, risking use-after-free scenarios. The vulnerability is fixed in updated kernels across Linux distributions (examples: ALAS2KERNEL advisories for AL2 kernels 5.10/5.1...

CVE-2024-57075

CVE-2024-57075 affects eazy-logger v4.0.1: prototype pollution in the lib.Logger function can load a crafted payload to modify Object.prototype, enabling denial of service (DoS). Public docs include a PoC that injects into the global prototype chain (e.g., via proto ), with outcomes ranging from ...

CVE-2023-51766

Exim before 4.97.1 is vulnerable to SMTP smuggling in specific PIPELINING/CHUNKING configurations, enabling a remote attacker to inject messages with a spoofed MAIL FROM and bypass SPF. The root cause cited across multiple sources is that Exim handles end-of-data sequences using . in ways that so...

CVE-2023-39192

CVE-2023-39192 : A flaw in the Linux kernel Netfilter xt_u32 module allows a local privileged attacker to trigger an out-of-bounds read by crafting improper values in the xt_u32 structure. The root cause is missing validation of fields in xt_u32, leading to crash or information disclosure. Impact...

CVE-2023-38595

CVE-2023-38595 is a WebKitGTK+ related vulnerability: processing web content may lead to arbitrary code execution. Connected advisories show affected packages as WebKitGTK/WebKitGTK+ (webkitgtk or webkitgtk4) across Linux distributions. Fixed versions vary by distro: Debian lists fixes in webkit2...

CVE-2018-12127

CVE-2018-12127 (MLPDS) describes a side-channel information disclosure via load-port data sampling in microarchitectures with speculative execution. The issue arises from leakage of data across privileged boundaries through speculative load-port behavior on some Intel CPUs. Public ARIs and adviso...

CVE-2017-5982

CVE-2017-5982 : Kodi Chorus2 add-on for Kodi (Chorus2 2.4.2) is affected by a directory traversal vulnerability. An unauthenticated remote attacker can read arbitrary files by supplying a crafted image path containing encoded traversal sequences (for example, image/image%3A//..%252fetc%252fpasswd...

CVE-2016-1286

CVE-2016-1286 affects ISC BIND 9.x (before 9.9.8-P4 and 9.10.x before 9.10.3-P4). A remote attacker can trigger a denial of service by sending a crafted DNS signature for a DNAME record, leading to an assertion failure in resolver.c or db.c and a named process crash. The issue is documented with ...

CVE-2015-5317

CVE-2015-5317 affects Jenkins CloudBees Jenkins Fingerprints pages. Affected products: Jenkins before 1.638 and LTS before 1.625.2. The vulnerability is an information disclosure in the Fingerprints UI that allows remote attackers to obtain sensitive job and build names via a direct request. The ...

CVE-1999-0236

The CVE-1999-0236 entry describes a vulnerability in the ScriptAlias directory handling in NCSA and Apache httpd that allowed attackers to read CGI programs. Affected software is the Apache httpd family utilizing ScriptAlias configuration; the underlying issue is directory handling enabling discl...

CVE-2018-9405

CVE-2018-9405 describes a potential out-of-bounds write in BnDmAgent::onTransact (dm_agent.cpp) due to a missing bounds check, enabling local privilege escalation to System level without user interaction. Affected context shown in multiple sources (Android Pixel/Nexus bulletin references and vend...

CVE-2023-28433

MinIO on Windows is affected by a privilege-escalation issue where the product fails to filter the backslash () character, enabling an attacker with low privileges (e.g., a limited PutObject key) to place objects across buckets and create an admin user. The concrete root cause is path separator h...

CVE-2022-30617

The CVE-2022-30617 issue affects Strapi where an authenticated admin-panel user can read private data (e.g., emails, password reset tokens) for other admin users via related content in the JSON response. This leakage occurs across relationships (e.g., content created/updated by another user) and ...

CVE-2022-29474

Summary of CVE-2022-29474 (F5 BIG-IP iControl SOAP directory traversal) Vulnerability: A directory traversal in iControl SOAP allows an authenticated user with at least guest privileges to read wsdl files from the BIG-IP filesystem. Affected products/versions (as cited by multiple sources): BIG-I...

CVE-2020-14776

CVE-2020-14776 affects MySQL (InnoDB) with vulnerable ranges of 5.7.31 and earlier, and 8.0.21 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or a complete DoS of MySQL Server. Connected documents confirm thi...

CVE-2019-17569

CVE-2019-17569: In Apache Tomcat, a regression from refactoring in 9.0.28–9.0.30, 8.5.48–8.5.50, and 7.0.98–7.0.99 caused invalid Transfer-Encoding header handling, enabling HTTP Request Smuggling behind a misconfigured reverse proxy. Connected advisories show mitigations: Amazon Linux 2 ALAS2TOM...

CVE-2019-7093

CVE-2019-7093 affects Adobe Creative Cloud Desktop Application installer (Windows) versions 4.7.0.400 and earlier, due to insecure DLL loading (DLL hijacking) in the installer. Exploitation could lead to privilege escalation. Remediation: update to 4.8.0.410 or newer per APSB19-11. If details var...

CVE-2025-13193

Affects libvirt-based virtualization. CVE-2025-13193 causes external inactive snapshots for shut-down VMs to be world-readable, enabling information disclosure by unprivileged users. Public sources (Unity Linux UTSA-2025-993329; openSUSE openSUSE-SU-2025-20100-1; SUSE SUSE-SU-2026:0279-1) describ...

CVE-2024-35255

CVE-2024-35255 is an elevation-of-privilege vulnerability described as a race-condition issue in Azure Identity Libraries and Microsoft Authentication Library. IBM’s security bulletin for IBM Cloud Pak for AIOps lists CVE-2024-35255 with a base score of 5.5 (CVSS 3.0) and CWE-362, affecting IBM R...

CVE-2021-46954

CVE-2021-46954 affects the Linux kernel net/sched IPv4 path. When act_mirred attempts to fragment IPv4 packets that were previously reassembled by act_ct, sch_frag used a temporary dst_entry, which was later treated as an rtable pointer in the fragment/MTU flow. This caused a stack out-of-bounds ...

CVE-2023-43788

CVE-2023-43788 affects libXpm. The vulnerability stems from a boundary condition in XpmCreateXpmImageFromBuffer(), enabling a local attacker to trigger an out-of-bounds read and read memory contents. Connected advisories confirm the issue across multiple distributions (e.g., AlmaLinux and related...

CVE-2022-48564

CVE-2022-48564 affects Python up to 3.9.1: read_ints in plistlib.py is vulnerable to a DoS via CPU/RAM exhaustion when processing malformed binary Apple Property List files. The impact is denial of service; exploitation details are not provided in the documents. Remediation is to apply the approp...

CVE-2023-28370

CVE-2023-28370 is an open redirect vulnerability in Tornado up to version 6.3.1 (and earlier) that can allow a remote unauthenticated user to redirect a victim to an arbitrary site via a crafted URL. Connected sources specify affected package Python-tornado and Tornado’s StaticFileHandler in cert...

CVE-2023-21967

CVE-2023-21967 affects Oracle Java SE and GraalVM Enterprise Edition (JSSE, Swing, Hotspot, Libraries) with multiple vulnerable versions including Java 8u361, 11.0.18, 17.0.6, 20 and GraalVM 20.3.9/21.3.5/22.3.1. Root cause is unresolved issues in the Java components allowing unauthenticated netw...

CVE-2022-20964

Cisco Identity Services Engine (ISE) web-based management interface vulnerability CVE-2022-20964 allows an authenticated, remote attacker to inject arbitrary OS commands due to improper input validation. Exploitation would run commands with the web services user’s privileges. The primary CVE reco...

CVE-2022-29916

CVE-2022-29916 is an information-disclosure issue where Firefox behaves differently when loading CSS resources with CSS variables, potentially allowing history probing. Affected products in public advisories include Thunderbird and Firefox variants (Thunderbird < 91.9, Firefox/ ESR < 91.9, ...

CVE-2019-1551

CVE-2019-1551 refers to an overflow bug in the x64_64 Montgomery squaring procedure used in OpenSSL during exponentiation with 512-bit moduli. OpenSSL notes no impact to EC, while DH512 attacks are only just feasible under certain conditions. Public disclosures and advisories confirm the issue an...

CVE-2021-46942

CVE-2021-46942 relates to the Linux kernel io_uring shared sqpoll cancellation hang. The root cause is an incorrect accounting of inflight requests when cancelling sqpoll contexts that share a sqpoll, caused by per-task counters that can count more requests than are present in the io_uring contex...

CVE-2022-42948

CVE-2022-42948 affects Cobalt Strike 4.7.1, due to improper escaping of HTML in Swing components, enabling remote code execution in the Cobalt Strike UI when crafted HTML is injected. The NVD indicates a critical CVSS v3.1 score (9.8) with network attack vector and no privileges/user interaction ...

CVE-2021-33164

CVE-2021-33164 is an Intel NUC BIOS/firmware vulnerability described as improper access control in BIOS firmware for certain Intel NUCs prior to INWHL357.0046, potentially allowing a locally privileged user to escalate privileges. The Red Hat advisory and Intel security advisory confirm the affec...