CVE-2025-54236

CVE-2025-54236 affects Adobe Commerce and Magento Open Source: Improper Input Validation could allow an attacker to take over customer sessions (high confidentiality/integrity impact) with network-level, no-interaction exploit. Affected: Adobe Commerce 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12,...

CVE-2023-6350

CVE-2023-6350 is a use-after-free in libavif used by Google Chrome/Chromium before version 119.0.6045.199, potentially enabling remote heap corruption via a crafted avif file. Affected software stacks include Chromium-based browsers (Chrome/Chromium) and related Electron builds, with multiple sec...

CVE-2023-41991

CVE-2023-41991 is an Apple certificate validation issue that could allow a malicious app to bypass signature validation. It affects iOS, iPadOS, macOS, and watchOS; root cause is improper certificate validation in the trust chain. Impact: potential privilege escalation or bypass of app integrity ...

CVE-2023-29402

CVE-2023-29402 affects the golang package; the root cause is the go command generating unexpected code at build time when using cgo, occurring especially with untrusted modules whose directories contain newline characters in their names. The impact is outlined as potential unexpected behavior in ...

CVE-2022-29845

Summary: CVE-2022-29845 affects Progress Ipswitch WhatsUp Gold versions 21.1.0–21.1.1 and 22.0.0. An authenticated user can trigger an API transaction to read the contents of a local file. The Red Hat and CVE CN/CZ records corroborate this issue with the same description. The Metasploit entry sho...

CVE-2022-24769

CVE-2022-24769 affects Moby (Docker Engine) before 20.10.14. The bug starts containers with non-empty inheritable Linux process capabilities, enabling programs with inheritable file capabilities to elevate to the container’s permitted set during execve, potentially impacting containers using Linu...

CVE-2021-33194

The CVE affects golang.org/x/net (likely the net/html component) prior to the commit 37e1c6afe023, where crafted input to ParseFragment can trigger an infinite loop and cause a denial of service. Exploitation details are not provided in the linked documents. Remediation/patched versions are not s...

CVE-2020-8927

CVE-2020-8927 is a buffer overflow in the Brotli library prior to 1.0.8 triggered by oversized one-shot decompression requests (copying chunks > 2 GiB), which can crash a target process. Affected: Brotli up to 1.0.7/older builds used by various ecosystems. Root cause: unsafe handling of input ...

CVE-2020-12651

CVE-2020-12651 affects VanDyke Software SecureCRT versions prior to 8.7.2. The issue is a memory corruption vulnerability triggered by an invalid banner-driven CSI sequence, where a line number passed to CSI functions can exceed INT_MAX, leading to integer overflow and potential arbitrary code ex...

CVE-2020-8648

CVE-2020-8648 is a use-after-free in the Linux kernel’s n_tty_receive_buf_common function (drivers/tty/n_tty.c), affecting kernel builds up to 5.5.2. It is a local vulnerability; exploitation could crash the kernel (DoS), with CVSS notes indicating local access and high impact on availability. Co...

CVE-2018-20815

CVE-2018-20815 affects QEMU (illustrated by RHSA-2019:1723/1743 and Oracle Linux advisories). Description in the CVE: in QEMU 3.1.0, load_device_tree calls the deprecated load_image function, which has a buffer overflow risk. Connected documents substantiate device_tree.c heap/buffer overflow con...

CVE-2006-5052

OpenSSH before 4.4 on some platforms is vulnerable to a remote attacker determining the validity of usernames via a GSSAPI authentication abort. The issue affects portable OpenSSH versions prior to 4.4 and is discussed in multiple advisories (e.g., RHSA-2007:0703, RHSA-2007:0540, and related OSS/...

CVE-2024-40711

CVE-2024-40711 is a deserialization vulnerability in Veeam Backup & Replication that allows unauthenticated remote code execution. The CVE is supported by multiple sources and exploit activity: PoCs and reported in the wild (AVLEONOV) with references to ransomware groups; CISA KEV and CISA Known ...

CVE-2023-38611

CVE-2023-38611 affects WebKitGTK/WebKitGTK+ in WebKitGTK’s handling of web content. The vulnerability stems from memory handling issues that could allow arbitrary code execution when processing web content. Debian, Fedora, Gentoo, AlmaLinux advisories and the CVE pages indicate updates to WebKitG...

CVE-2022-23122

CVE-2022-23122 affects Netatalk, with the flaw in setfilparams allowing an unauthenticated attacker to trigger a stack-based buffer overflow and execute code as root. This is a remote code execution with high impact on confidentiality, integrity, and availability. The issue stems from insufficien...

CVE-2022-22745

CVE-2022-22745 describes a cross-origin information leak via SecurityPolicyViolation events for frame-ancestors violations. Public documents associate this with Firefox ESR versions earlier than 91.5, Firefox versions earlier than 96, and Thunderbird versions earlier than 91.5. The connected advi...

CVE-2019-9515

CVE-2019-9515 concerns an HTTP/2 settings flood that can cause memory/CPU exhaustion. Arista’s security advisory (Security Advisory 0043) states the vulnerability is in Go’s gRPC HTTP/2 usage and can affect TerminAttr, OpenConfig, CVP, and certain Wi‑Fi OpenConfig-enabled components when enabled....

CVE-2019-11091

CVE-2019-11091 describes Microarchitectural Data Sampling Uncacheable Memory (MDSUM): uncacheable memory on some Intel microprocessors with speculative execution may leak information via a side channel. Public advisories (ALAS2-2019-1274, ALAS-2019-1260, DEBIAN DSA-4602-1/DSA-4564-1) confirm the ...

CVE-2018-14041

CVE-2018-14041 affects Bootstrap: XSS in the data-target attribute of scrollspy for Bootstrap versions before 4.1.2. The root cause is unvalidated input in data-target, enabling HTML/JS injection. Remediation is to upgrade to Bootstrap 4.1.2 or later (as referenced by Bootstrap’s security note). ...

CVE-2013-0424

CVE-2013-0424 is an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 up to Update 11, 6 up to Update 38, 5.0 up to Update 38, and 1.4.2_40 and earlier, plus OpenJDK 7. The issue relates to RMI and could allow remote attackers to affect integrity...

CVE-2026-64531

CVE-2026-64531 describes a Linux kernel issue in net/openvswitch: generated flow actions stored as nlattrs can exceed the 16-bit nla_len, allowing an oversized container to be closed with a truncated length. The fix preserves large total-action streams but rejects nested action containers that do...

CVE-2023-44981

CVE-2023-44981 (Apache ZooKeeper) : Authorization bypass through a user-controlled SASL ID when quorum peer authentication is enabled (quorum.auth.enableSasl=true). If the instance part of the SASL ID is missing (e.g., [email protected]), authorization checks are skipped, allowing an arbitrary endp...

CVE-2022-29846

Progress WhatsUp Gold (versions 16.1–21.1.1 and 22.0.0) is affected by a vulnerability that allows an unauthenticated attacker to obtain the product installation serial number. The publicly provided documents confirm affected versions and the disclosure impact, but do not specify the root cause d...

CVE-2026-53914

CVE-2026-53914 affects JetBrains Kotlin prior to 2.4.20, where unsafe deserialization in the build cache metadata allows code execution. The NVD notes a high-severity, network-vector vulnerability with critical impact to confidentiality, integrity, and availability; local context in CVSS from CNA...

CVE-2024-42327

CVE-2024-42327 is an authenticated SQL injection in Zabbix via the user.get path (CUser.addRelatedObjects) exploitable by non-admin/API-access users. Public PoCs show time-based SQLi leakage of user data and, in some variants, admin API tokens and RCE sequences, enabling privilege escalation to Z...

CVE-2024-4704

CVE-2024-4704 corresponds to an unauthenticated open redirect in the Contact Form 7 WordPress plugin prior to version 5.9.5. The vulnerability allows an attacker to craft a false URL that redirects users to a URL of the attacker’s choosing. Public sources note the affected software as Contact For...

CVE-2022-22668

CVE-2022-22668 affects Apple's platforms, describing a logic issue that could allow a malicious app to leak sensitive user information. According to the primary description, the vulnerability is fixed in iOS 15.4, iPadOS 15.4, and macOS Monterey 12.3, indicating a platform-wide fix in these versi...

CVE-2022-22738

The CVE-2022-22738 entry concerns a heap-buffer-overflow caused by applying a CSS filter, potentially exploitable via memory corruption. Affected products are Mozilla Firefox/Thunderbird: Firefox ESR < 91.5, Firefox < 96, and Thunderbird

CVE-2022-33329

Robustel R1510 OS command injection (CVE-2022-33329) exists in the web server ajax endpoints, including /ajax/set_sys_time/. The root cause is unsafe handling of user-controlled parameters (via functions like sysprintf and system), enabling arbitrary command execution on the device. Talos documen...

CVE-2021-3672

CVE-2021-3672 affects the c-ares library. A missing input validation check for host names returned by DNS can lead to domain hijacking, impacting confidentiality, integrity, and availability. Connected documents confirm this across multiple vendors/distributions (Astra Linux, AlmaLinux, Red Hat a...

CVE-2021-22947

CVE-2021-22947 affects curl when connecting to IMAP/POP3 servers using STARTTLS: multiple responses are cached before TLS, and after upgrading to TLS curl may trust pre‑TLS data, enabling a MITM injection of data. Affected releases range from curl 7.20.0 up to 7.78.0; exploitation details are not...

CVE-2020-36242

The CVE refers to the Python cryptography package prior to 3.3.2. The issue arises from certain sequences of update() calls when symmetrically encrypting very large (multi-GB) payloads, which can trigger an integer overflow and buffer overflow, as demonstrated by the Fernet class. This affects cr...

CVE-2020-9546

CVE-2020-9546 affects FasterXML jackson-databind 2.x before 2.9.10.4, where serialization gadgets and typing interactions involving org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig can lead to deserialization issues. The IBM/Cloudera bulletin references the same CVE and lists a high impact...

CVE-2018-1000807

CVE-2018-1000807 concerns Python-pyOpenSSL before 17.5.0, with a CWE-416 Use-After-Free in X509 object handling that can lead to denial of service or remote code execution. The vulnerability is reported as fixed in 17.5.0. Connected sources (SUSE-SU-2024:1626-1; SUSE-SU-2024:3749-1; OSV entries) ...

CVE-2016-9840

CVE-2016-9840 affects zlib 1.2.8 in inftrees.c where improper pointer arithmetic can lead to out-of-bounds memory handling. Connected advisories show related issues in the same zlib code path (CVE-2016-9841, CVE-2016-9842, CVE-2016-9843) and describe potential crash or arbitrary-code outcomes in ...

CVE-2026-56290

CVE-2026-56290 affects Joomla Page Builder CK (com_pagebuilderck). The root cause is an unauthenticated file upload path via browse.ajaxAddPicture that accepts a user-controlled destination with only trivial sanitization and no authentication gate, enabling an attacker to upload PHP/executable fi...

CVE-2025-41115

CVE-2025-41115 affects Grafana Enterprise/Cloud SCIM provisioning in Grafana 12.x+ when enableSCIM is true and user_sync_enabled is enabled. A vulnerability in user identity handling allows a malicious SCIM client to provision a user with a numeric externalId, potentially overriding internal user...

CVE-2023-51766

Exim before 4.97.1 is vulnerable to SMTP smuggling in specific PIPELINING/CHUNKING configurations, enabling a remote attacker to inject messages with a spoofed MAIL FROM and bypass SPF. The root cause cited across multiple sources is that Exim handles end-of-data sequences using . in ways that so...

CVE-2023-3899

CVE-2023-3899 affects subscription-manager. The vulnerability stems from the D-Bus interface com.redhat.RHSM1 exposing many methods to all users, allowing a low-privileged local user to tamper with registration state via Config.SetAll(). This enables arbitrary directives to /etc/rhsm/rhsm.conf, l...

CVE-2022-22526

CVE-2022-22526 affects Carlo Gavazzi UWP3.0 and CPY Car Park Server (v2.8.3). The root cause is a missing authentication mechanism that allows full access via the API, enabling unauthorized control or data access. Public sources in connected documents describe an access control error leading to r...

CVE-2022-29081

CVE-2022-29081 affects Zoho ManageEngine products: Access Manager Plus (before 4302), Password Manager Pro (before 12007), and PAM360 (before 5401). The issue is an access-control bypass on certain REST API endpoints (SSOutAction, SSLAction, LicenseMgr, GetProductDetails, GetDashboard, FetchEvent...

CVE-2021-22222

Wireshark is affected by CVE-2021-22222 due to an infinite loop in the DVB-S2-BB dissector, impacting 3.4.0 through 3.4.5 and enabling a denial-of-service via crafted captures or packet injection. The issue originates in the DVB-S2-BB parser; exploiting it causes the Wireshark process to hang, co...

CVE-2020-2814

CVE-2020-2814 affects Oracle MySQL Server (InnoDB) with affected versions 5.6.47 and prior, 5.7.28 and prior, and 8.0.18 and prior. Bulletins in connected advisories describe an easily exploitable, network-accessible vulnerability enabling a high-privilege attacker to cause a hang or frequent cra...

CVE-2019-5436

CVE-2019-5436 affects curl/libcurl with a heap buffer overflow in the TFTP receiving code (tftp_receive_packet). Exploitation can lead to DoS or arbitrary code execution. Upstream fix released in curl 7.65.0; advisories from CentOS, Arch Linux, Debian, and others document the vulnerability and re...

CVE-2018-1336

CVE-2018-1336 applies to Apache Tomcat . It is caused by an overflow in the UTF-8 decoder when handling supplementary characters, which can trigger an infinite loop and cause a Denial of Service. Affected software ranges include Tomcat 9.0.0.M9–9.0.7, 8.5.0–8.5.30, 8.0.0.RC1–8.0.51, and 7.0.28–7....

CVE-2015-0240

The CVE-2015-0240 issue affects the Samba smbd Netlogon code and allows remote code execution via crafted Netlogon packets using the ServerPasswordSet RPC. Affected Samba versions: 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5, due to an uninit...

CVE-2004-1464

Cisco IOS Denial-of-Service vulnerability CVE-2004-1464 affects Cisco IOS 12.2(15) and earlier. A specially crafted TCP connection to the Telnet or reverse Telnet port can cause the device to refuse VTY connections, resulting in DoS. Affected component: Telnet service on IOS; root cause is the cr...

CVE-2022-28958

CVE-2022-28958 maps to a D-Link DIR816L remote code execution vulnerability. CNVD/CNNVD describe an RCE in DIR816L_FW206b01 due to improper filtering of the value parameter in shareport.php, allowing arbitrary code execution on affected devices. No specific affected versions or patch details are ...

CVE-2026-64564

CVE-2026-64564 concerns a Linux kernel SCTP DEL-IP processing bug. The vulnerability arises because sctp_process_asconf() caches the ASCONF transport in asconf->transport (tied to chunk->transport) and that transport can be different from the packet source address when looked up via __sctp_...

CVE-2023-4068

CVE-2023-4068: Type Confusion in V8 affects Chromium/Google Chrome; vulnerable component is V8, leading to remote arbitrary read/write via crafted HTML pages. Root cause: type confusion. Impact per sources: high; exploit details not provided. Remediation: upgrade Chromium/Chrome to 115.0.5790.170...