CVE-2024-40720

CHANGING Information Technology TCBServiSign Windows Version - Improper Input Validation

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to execute arbitrary commands.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Changinginformationtechnology Changingtec

Products

Tcbservisign Tcb Servisign

CVE-2024-23483

Local Privilege Escalation via lack of input validation

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Zscaler

Products

Client Connector

CVE-2024-7005

chromium-browser: Insufficient validation of untrusted input in Safe Browsing

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Google

Products

Chrome

CVE-2024-26821

kernel: fs: relax mount_setattr() permission checks

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.1 Medium EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2024-26827

kernel: i2c: qcom-geni: Correct I2C TRE sequence

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2024-26628

kernel: drm/amdkfd: Fix lock dependency warning

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 6.0 Medium EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2021-46907

kernel: KVM: internal.ndata could be updated by the user process at anytime

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 7.1 High EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2021-46946

kernel: ext4: fix check to prevent false positive report of incorrect used inodes

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2021-3532

ansible: async_file sensitive information disclosure

This CVE is marked as INVALID and not a bug

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2021-3487

binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2022-23816

hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVSS 3.1 · 5.6 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Rhel Eus Rhel Extras Rt and 1 more

CVE-2022-1214

axios: Exposure of Sensitive Information to an Unauthorized Actor

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2021-44907

qs: Insufficient sanitization of property in the gs.parse function

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2020-24979

bison: Buffer overflow in src/symtab.c via crafted input file redefining the EOF token can lead to DoS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2020-14151

libjpeg: read_*_pixel functions in rdtarga.c in cjpeg mishandles EOF

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11813. Reason: This candidate is a duplicate of CVE-2018-11813. Notes: All CVE users should reference [ID] instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 0.0 Low EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2019-15601

curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.1 · 3.3 Low EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2019-14561

edk2: improper input validation leads to memory corruption when loading PE sections

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.

CVSS 3.0 · 0.0 Low EPSS n/a KEV · Not listed

Vendors

Tianocore

Products

Edk2

CVE-2018-3736

nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-3739. Reason: This candidate is a duplicate of CVE-2018-3739. Notes: All CVE users should reference CVE-2018-3739 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 8.6 High EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2018-14032

hdf5: heap-based buffer over-read in the function H5O_fill_new_decode in H5Ofill.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2017-17457

libsndfile: SEGV on unknown address in the function d2ulaw_array()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 3.3 Low EPSS n/a KEV · Not listed

Vendors

—

Products

—