CVE-2011-1440

CVE-2011-1440 affects Google Chrome prior to 11.0.696.57. The vulnerability is a use-after-free in handling the ruby element and CSS token sequences in the rendering pipeline (WebKit-based). Exploitation is remote and could cause a denial of service or possibly other unspecified impact. The avail...

CVE-2014-9585

CVE-2014-9585 affects Linux kernels up to 3.18.2. The vdso_addr code in arch/x86/vdso/vma.c can misselect vDSO memory, enabling local users to bypass ASLR by guessing a PMD-end location. Exploitation details and patches/fixes are not provided in the connected documents; monitor advisories for rem...

CVE-2015-7852

CVE-2015-7852 is an off-by-one vulnerability in ntpq’s cookedprint() which can allow a crafted mode 6 packet to cause a buffer overflow and crash ntpd. Public references (Debian DSA-3388-1, CentOS advisories) confirm ntpq/cookedprint as the vulnerable component and describe a DoS via remote craft...

CVE-2016-2381

CVE-2016-2381 describes a Perl taint protection bypass in child processes caused by duplicate environment variables in envp. This context-dependent issue could allow an attacker to bypass taint checks, potentially enabling unintended behavior or exposure in vulnerable Perl workflows. Public refer...

CVE-2016-7568

CVE-2016-7568 is a vulnerability in the GD Graphics Library (libgd/libgd2) ≤ 2.2.3, used by PHP up to 7.0.11. The flaw is an integer overflow in the gdImageWebpCtx function (gd_webp.c) that can cause a heap-based buffer overflow, enabling a remote attacker to trigger a denial of service and possi...

CVE-2017-10086

CVE-2017-10086 affects Oracle Java SE (JavaFX) in Java 7u141 and 8u131. Descriptions indicate an easily exploitable, network-accessible vulnerability that can be exploited with no authentication and user interaction, potentially leading to takeover of Java SE. The connected documents cite this CV...

CVE-2017-8831

The CVE-2017-8831 issue affects the Linux kernel, specifically the saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c, with impact up to kernel version 4.11.5. It is a local, potentially privilege-escalating vulnerability described as a “double fetch” vulnerability caused by re-r...

CVE-2017-9066

CVE-2017-9066 affects WordPress prior to 4.7.5. The issue is insufficient redirect validation in the WordPress HTTP class WP_Http::request(), enabling SSRF via crafted redirects. Impact is described as HIGH for integrity/availability in CVSS terms, with exploitation possible over network and no u...

CVE-2018-11506

CVE-2018-11506 affects the Linux kernel’s sr_do_ioctl (drivers/scsi/sr_ioctl.c) through version 4.16.12. The issue arises because sense buffers at the CDROM layer and SCSI layer use different sizes, enabling a local attacker to trigger a stack-based buffer overflow via CDROMREADMODE2 ioctl, poten...

CVE-2018-5735

CVE-2017-3137 describes a denial-of-service in BIND caused by processing CNAME/DNAME responses in an unusual order, which can make named exit with an assertion failure. The CVE is evidenced by multiple advisories and vendor backports/disclosures (Arch Linux ASA-201704-11, CentOS/CESA entries 1095...

CVE-2019-14498

CVE-2019-14498 affects VLC media player 3.0.7.1 and earlier, with a divide-by-zero vulnerability in the demux/caf.c Control function that can trigger a fault via crafted CAF files. The issue resides in the CAF demuxer code path and is associated with a numeric/division-by-zero condition. Multiple...

CVE-2020-6062

CVE-2020-6062 affects coturn’s web server POST handling, where a crafted HTTP POST request can trigger a server crash and denial of service. The connected advisories confirm the same issue across multiple distributions and show the root cause as improper handling of POST requests. Affected produc...

CVE-2021-20275

CVE-2021-20275 (privoxy) is a DoS vulnerability in Privoxy before version 3.0.32 caused by an invalid read of size two in chunked_body_is_complete(). Exploitation can lead to denial of service. Public advisories across distributions (e.g., openSUSE/SUSE, various Linux vendors) patch this issue by...

CVE-2021-26120

Smarty PHP template engine prior to version 3.1.39 is affected by CVE-2021-26120, which can enable code injection via an unexpected {function name= substring}. The issue is addressed in updates to Smarty3 (e.g., upgrading to 3.1.39+ or package updates in Fedora/Debian/Mageia). Remediation is to u...

CVE-2021-33582

CVE-2021-33582 affects Cyrus IMAPD; a bad string-hashing algorithm in internal hash tables can cause a CPU-denial-of-service by directing many inputs to a single bucket. Affected releases include Cyrus IMAPD prior to 3.4.2, 3.2.8, and 3.0.16, with fixes implemented in those versions. Public advis...

CVE-2021-43299

CVE-2021-43299 is a stack-based buffer overflow in the PJSUA API (embedded pjproject within ring) triggered by an attacker-controlled filename passed to pjsua_player_create. The overflow occurs when the filename is copied into a fixed-size stack buffer without size validation. Public documents in...

CVE-2022-3352

CVE-2022-3352 is a Use After Free in vim/vim prior to 9.0.0614. Exploitation could crash or, in some cases, lead to code execution. Root cause noted as memory handling issue when freeing/using buffers; patch fixes by upgrading to vim 9.0.0614 or newer. Affected products include Vim across multipl...

CVE-2023-2134

CVE-2023-2134 affects Google Chrome/Chromium prior to 112.0.5615.137, due to an out-of-bounds memory access in the Service Worker API that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rated High severity with network attack vector and user...

CVE-2023-4359

CVE-2023-4359 affects Google Chrome on iOS before 116.0.5845.96 due to an inappropriate implementation in the App Launcher. The issue could allow a remote attacker to spoof elements of the security UI through a crafted HTML page. Public advisories/updates indicate that Chromium-based browsers (Ch...

CVE-2024-30204

CVE-2024-30204 (Emacs) affects Emacs before 29.3, where LaTeX preview is enabled by default for e‑mail attachments, potentially enabling denial of service. Connected advisories from multiple vendors confirm the issue and recommend upgrading Emacs to a version including the fix (≥29.3). In practic...

CVE-2010-3702

The CVE-2010-3702 issue affects the Xpdf PDF parser (Gfx::getPos) in Xpdf

CVE-2014-0412

The connected documents confirm CVE-2014-0412 affects the MySQL Server component of Oracle MySQL, specifically versions 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier. The root cause is described as an unspecified vulnerability related to InnoDB, allowing remote authenticated user...

CVE-2014-0453

CVE-2014-0453 is an IBM/Oracle Java vulnerability affecting IBM Runtime Environment Java Technology Edition (and IBM Java SDK/JRE bundles used in IBM products such as QRadar, Rational, and WebSphere-related tools). The vulnerability is described as an unspecified issue in the Security component w...

CVE-2014-0457

CVE-2014-0457 is an unspecified vulnerability in Oracle Java SE components (5.0u61, 6u71, 7u51, 8; JRockit R27.8.1 and R28.3.1; Java SE Embedded 7u51) and related to the Libraries component, enabling remote attackers to impact confidentiality, integrity, and availability via unknown vectors. The ...

CVE-2014-3122

CVE-2014-3122 affects the Linux kernel local memory-management path. The advisory centers on the try_to_unmap_cluster function in mm/rmap.c, where the code path did not consistently lock pages, enabling a local user to trigger a memory-usage pattern that can force removal of page-table mappings a...

CVE-2015-3143

The connected documents provide concrete details for CVE-2015-3143: in curl and libcurl, versions 7.10.6 through 7.41.0 failed to properly re-use NTLM connections, enabling a remote attacker to connect as another user via an unauthenticated request (NTLM/Negotiate authentication interaction). Thi...

CVE-2015-3339

CVE-2015-3339 affects the Linux kernel (before 3.19.6) and stems from a race condition between chown and execve when changing the owner of a setuid binary to root. An unprivileged local user could exploit the window where ownership is updated but the setuid bit is not yet stripped to gain root pr...

CVE-2016-2819

CVE-2016-2819 is a heap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2, enabling remote code execution via foreign-context HTML5 fragments (e.g., fragments within an SVG element). Connected sources confirm PoCs/exploits exist (e.g., ASM.JS JIT-Spray variants...

CVE-2017-2519

CVE-2017-2519 is a SQLite vulnerability where an insufficient size of the reference count on Table objects could lead to denial of service or arbitrary code execution via a crafted SQL statement. Public records in the provided documents show affected products across multiple vendors: Apple (iOS 1...

CVE-2017-5446

Technical details about CVE-2017-5446 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories to confirm affected products, impact, and fixes.

CVE-2017-5448

CVE-2017-5448 is an out-of-bounds write in ClearKeyDecryptor (Gecko Media Plugin sandbox). The issue allows writing arbitrary memory data, potentially causing a crash or remote code execution. Affected products include Firefox/Firefox ESR prior to patched versions; upstream advisories show fixes ...

CVE-2018-16802

Artifex Ghostscript prior to 9.25 is affected by CVE-2018-16802: incorrect “restoration of privilege” checking when stack overflows during exception handling could allow code execution via crafted PostScript using the pipe operator. This stems from an incomplete fix for CVE-2018-16509. The issue ...

CVE-2018-19968

CVE-2018-19968 affects phpMyAdmin prior to 4.8.4. An attacker can leak the contents of a local file due to an error in the transformation feature. Exploitation requires access to the phpMyAdmin Configuration Storage tables (which can be created by the attacker in any database they can access) and...

CVE-2018-20022

CVE-2018-20022 affects LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 in the VNC client code. The root cause is an improper initialization weakness (CWE-665) that allows an attacker to read stack memory, enabling information disclosure. When combined with another vulnerability, this can b...

CVE-2018-20175

CVE-2018-20175 affects rdesktop up to and including v1.8.3. The vulnerability stems from several Integer Signedness errors in mcs.c that cause Out-of-Bounds Reads, leading to Denial of Service (segfault). Connected advisories confirm the issue across multiple distributions and indicate fixes in l...

CVE-2018-5733

CVE-2018-5733 involves an overflow in the DHCP server’s reference counting when processing client requests, potentially allowing a malicious DHCP client sending large traffic to crash dhcpd. Affected ISC DHCP versions: 4.1.0 through 4.1-ESV-R15, 4.2.0 through 4.2.8, 4.3.0 through 4.3.6, and 4.4.0...

CVE-2018-8791

CVE-2018-8791 affects the rdesktop RDP client (versions up to and including 1.8.3). The vulnerability is an out-of-bounds read in the function rdpdr_process(), leading to information leakage when connecting to a malicious server. Several advisory sources confirm the issue and note that upstream f...

CVE-2018-8792

CVE-2018-8792 affects rdesktop up to version 1.8.3. The flaw is an out-of-bounds read in cssp_read_tsrequest(), leading to a Denial of Service (segfault). Public advisories indicate upgrading to 1.8.4 or later as the fix. Exploitation details are not described in the provided documents; no in-the...

CVE-2020-11082

In Kaminari, versions prior to 1.2.1 are affected by a vulnerability that could allow an attacker to inject arbitrary code into pages with pagination links. This issue has been fixed in version 1.2.1, per multiple connected advisories (e.g., Debian DSA/DSA-2763-1 and related Nessus/OpenVAS entrie...

CVE-2020-14001

The vulnerability CVE-2020-14001 affects the kramdown Ruby gem prior to 2.3.0, where the template option is processed by default in Kramdown documents. This can allow unintended read access (e.g., template="/etc/passwd") or unintended embedded Ruby code execution (e.g., template="string://<%= ...

CVE-2020-22025

CVE-2020-22025 is a heap-based buffer overflow in FFmpeg’s gaussian_blur implementation (libavfilter/vf_edgedetect.c) that can lead to memory corruption. Public advisories describe FFmpeg components affected (e.g., libavfilter, libavcodec) and advise upgrading FFmpeg to fixed versions. Debian DSA...

CVE-2020-25603

CVE-2020-25603 affects Xen up to 4.14.x, where missing memory barriers in event-channel access/allocation allow lockless manipulation of event-channel state. A malicious guest could crash the hypervisor, causing a Denial of Service, with potential information leaks or privilege escalation. Public...

CVE-2020-27670

CVE-2020-27670 affects the Xen hypervisor (through 4.14.x) where an AMD IOMMU page-table entry can be half-updated. This may allow a local x86 guest to cause data corruption, data leaks, or possibly privilege escalation. The vulnerability targets the IOMMU paging path and is described as a local ...

CVE-2021-28694

CVE-2021-28694 is described in the Citrix Hypervisor security update as a host denial-of-service issue triggered when a guest VM uses PCI passthrough with ACPI-declared memory regions that are identity-mapped. The vulnerability arises because such regions may bypass normal translation checks, pot...

CVE-2021-37989

CVE-2021-37989 is an issue in the Blink component of Google Chrome prior to 95.0.4638.54 . The problem is an inappropriate implementation that allows a remote attacker to abuse the Content Security Policy via a crafted HTML page. Impact is described as potential policy abuse with craftable conten...

CVE-2021-43302

The CVE-2021-43302 issue is documented in connected advisories as a vulnerability in Ring (which includes an embedded copy of pjproject). The flaw allows an attacker-controlled filename argument to be copied into a fixed-size stack buffer in the PJSUA API (pjsua_recorder_create), potentially caus...

CVE-2022-1720

CVE-2022-1720: Buffer over-read in vim/vim, specifically in grab_file_name, affects Vim prior to 8.2.4956. The Astra Linux bulletin and other connected sources confirm the same vulnerability description, noting it can crash Vim, modify memory, and potentially enable remote code execution. The pub...

CVE-2022-1898

CVE-2022-1898 refers to a Use After Free in Vim when handling vim/vim code paths, with the description stating the issue occurs in Vim prior to version 8.2. Connected documents corroborate the vulnerability in Vim and list advisories where Vim was fixed (e.g., Astra Linux bulletin and Cloud Found...

CVE-2022-20796

CVE-2022-20796 affects ClamAV scanning library versions 0.103.4/0.103.5/0.104.1/0.104.2, where an authenticated, local attacker could cause a denial-of-service on affected devices. Connected advisories confirm the issue across multiple distributions and indicate remediation by upgrading to later ...

CVE-2023-0330

CVE-2023-0330 affects qemu via the lsi53c895a DMA-MMIO reentrancy, potentially causing memory corruption such as stack overflow or use-after-free. Public advisories (including Debian LTS and Amazon ALAS) indicate a fix with updated qemu packages; apply the vendor-provided update to mitigate. If d...