CVE-2019-19728

CVE-2019-19728 affects Slurm (SchedMD Slurm, slurm-llnl) where versions before 18.08.9 and 19.x before 19.05.5 allow a user’s srun --uid to execute with incorrect privileges, enabling privilege escalation. The vulnerability stems from improper privilege handling in srun when using the --uid optio...

CVE-2019-11505

CVE-2019-11505 affects GraphicsMagick 1.3.8 through 1.4 snapshot-20190403 Q8. A heap-based buffer overflow in WritePDBImage (coders/pdb.c), related to MagickBitStreamMSBWrite (magick/bit_stream.c), can cause denial of service and may have other impact via a crafted image. Affected versions and fi...

CVE-2019-3498

CVE-2019-3498 affects Django in the function django.views.defaults.page_not_found() where output can be spoofed on a 404 page due to improper neutralization of elements. Affected versions are Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5. Remediation is to upgrade to t...

CVE-2020-11058

CVE-2020-11058 : In FreeRDP, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read. This affects FreeRDP versions older than 2.0.0 and can cause a manipulated client/server to trigger an invalid data read, potentially disconnecting the session. The i...

CVE-2020-16300

Ghostscript 9.50 contains a buffer overflow in tiff12_print_page() (devices/gdevtfnx.c) that can be triggered by a crafted PDF file, allowing a remote attacker to cause denial of service. The issue is fixed in Ghostscript 9.51. Affected product: Artifex Ghostscript. Root cause: a buffer overflow ...

CVE-2020-16308

CVE-2020-16308 affects Artifex Software Ghostscript v9.50, with a vulnerability in p_print_image() in devices/gdevcdj.c that could allow a remote attacker to cause a denial-of-service via a crafted PDF file. The issue is mitigated by upgrading to Ghostscript v9.51, which contains the fix. Referen...

CVE-2020-22054

CVE-2020-22054 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in av_dict_set in dict.c. The issue is consistently reported across multiple advisories (Debian, Debian LTS, openSUSE/openSUSE-SU, SUSE, Ubuntu) tied to FFmpeg 4.2. Exploitation details are not provided in t...

CVE-2020-8162

CVE-2020-8162 affects Rails ActiveStorage’s S3 direct-upload functionality. The issue arises from client-side enforcement that bypasses server-side upload-size limits by changing the Content-Length of the direct upload URL. Impacted products/versions include Rails < 5.2.4.2 and Rails

CVE-2021-26929

CVE-2021-26929 affects Horde Groupware Webmail Edition up to 5.2.22 (Horde_Text_Filter before 2.3.7). The vulnerability is an XSS in which a attacker can send a plain text email containing JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, due to bespoke use ...

CVE-2021-34334

CVE-2021-34334 affects Exiv2 (image metadata tool/library). A crafted image file can trigger an infinite loop when reading metadata, potentially causing a denial of service if a user runs Exiv2 on the crafted file. Public reports across multiple vendors/sources confirm the issue and indicate the ...

CVE-2021-37996

CVE-2021-37996: Insufficient validation of untrusted input in the Downloads component of the Chromium-based Google Chrome engine before version 95.0.4638.54. This vulnerability allows a remote attacker to bypass navigation restrictions via a malicious file. The connected advisories (e.g., ASA-202...

CVE-2022-1925

CVE-2022-1925 affects the GStreamer gst-plugins-good package, specifically the mkv demuxer path. The issue is a heap overflow arising from the matroska demuxing flow: the matroskaparse element lacks size checks in gst_matroska_decompress_data, while the matroskademux path imposes chunk-size restr...

CVE-2023-1816

CVE-2023-1816 affects Google Chrome/Chromium’s Picture-in-Picture feature, with root cause described as an incorrect security UI. It allows a remote attacker to potentially perform navigation spoofing through a crafted HTML page. Affected versions are Chrome/Chromium prior to 112.0.5615.49; remed...

CVE-2023-32762

Qt Network in Qt 5.15.14 and earlier, and in Qt 6.x before 6.2.9 (including 6.3.x–6.5.x before 6.5.1), incorrectly parses the Strict-Transport-Security header when its case does not exactly match. This can allow establishing unencrypted connections despite server requests to prohibit SSL/TLS down...

CVE-2023-37202

CVE-2023-37202 affects Firefox (including ESR) and Thunderbird. The issue is caused by cross-compartment wrappers wrapping a scripted proxy, which could store objects from other compartments in the main compartment, resulting in a use-after-free. Affected versions are Firefox <115, Firefox ESR...

CVE-2023-6857

CVE-2023-6857 describes a race condition when resolving symlinks in Firefox on Unix-based OSes, where the buffer passed to readlink may be too small. Affects Firefox and Thunderbird components (Firefox ESR <115.6, Firefox <121, Thunderbird

CVE-2025-37758

CVE-2025-37758 affects the Linux kernel’s ata_pxa driver. The root cause was a potential NULL pointer dereference in pxa_ata_probe() when devm_ioremap() returns NULL. The fix adds a NULL check after devm_ioremap() to prevent dereferencing NULL.

CVE-2010-4180

OpenSSL vulnerability CVE-2010-4180 affects OpenSSL versions before 0.9.8q and 1.0.x before 1.0.0c when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled. The flaw allows remote attackers to modify the ciphersuite in the session cache, enabling a downgrade to an unintended cipher by sniffing net...

CVE-2010-4494

CVE-2010-4494 is a double-free vulnerability in libxml2 (notably 2.7.8 and related versions) used by Chrome and other products. The issue affects libxml2’s handling of XPath/XML entities and could allow a remote attacker to crash or potentially execute code via crafted XML input. Public advisorie...

CVE-2014-8182

CVE-2014-8182 concerns OpenLDAP 2.4 slapd when processing DNS SRV messages. An off-by-one error can cause a crash if the dnssrv backend is used, allowing a remote attacker to crash the service with crafted DNS responses. The available connected sources confirm the affected software (OpenLDAP 2.4/...

CVE-2015-7497

CVE-2015-7497 affects libxml2 prior to 2.9.3, due to a heap-based buffer overflow in dict.c (xmlDictComputeFastQKey). Exploitation leads to a denial of service via crafted XML data. The vulnerability is part of multiple libxml2 issues disclosed in 2015; affected products are libraries linked agai...

CVE-2015-7513

The CVE-2015-7513 vulnerability affects arch/x86/kvm/x86.c in the Linux kernel prior to 4.4, where PIT counter values are not reset during guest state restoration. This can allow guest OS users to trigger a denial-of-service (divide-by-zero) and host crash via a zero PIT value, related to kvm_vm_...

CVE-2016-0666

CVE-2016-0666 is an unspecified local-privilege/vulnerability in MySQL/MariaDB affecting multiple branches (MySQL 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier; MariaDB before 5.5.49, and some 10.x lines). The connected advisories confirm that this family of issues can impact availab...

CVE-2016-4449

CVE-2016-4449 is an XML External Entity (XXE) vulnerability in libxml2’s parser.c (xmlStringLenDecodeEntities) affecting libxml2 up to version 2.9.4. ALT Linux advisory entries show a confirmed fix in libxml2 version 2.9.4.0.12.e905-alt1 (and related package updates), indicating that patches were...

CVE-2017-14461

CVE-2017-14461 affects Dovecot when a specially crafted email delivered over SMTP to a server is parsed by Dovecot, triggering an out-of-bounds read that can disclose sensitive information or cause a denial of service. The issue stems from improper handling of certain emails and has been addresse...

CVE-2017-5401

CVE-2017-5401 is a memory corruption crash triggered by ErrorResult handling in Firefox/Thunderbird. Affected versions are Firefox < 52 and ESR < 45.8, Thunderbird < 52 and Thunderbird

CVE-2017-7519

CVE-2017-7519 : In Ceph, a format-string flaw affects the libradosstriper input parser, which could crash a user-facing application or service and impact availability. The vulnerability details in the provided sources identify the issue but do not present exploit vectors or roots beyond the input...

CVE-2018-15126

CVE-2018-15126 relates to LibVNCServer: heap use-after-free in the server code of the File Transfer extension, which can lead to remote code execution. The root cause is a heap-use-after-free in the file transfer path, enabling an attacker with network access to trigger code execution on a vulner...

CVE-2018-17962

CVE-2018-17962 is a QEMU vulnerability: a buffer overflow in pcnet_receive() in hw/net/pcnet.c caused by an incorrect integer data type. The Initial Description confirms the flaw; connected Nessus advisories reference this CVE among other QEMU issues. The provided documents do not include the fix...

CVE-2018-18245

CVE-2018-18245 : Nagios Core 4.4.2 is vulnerable to a cross-site scripting (XSS) in the alert summary reports of plugin results, demonstrated by a SCRIPT element delivered via a modified check_load plugin to NRPE. The issue stems from user-facing output in the alert summary report, enabling injec...

CVE-2018-18606

CVE-2018-18606 affects GNU Binutils (libbfd). The issue is a NULL pointer dereference in _bfd_add_merge_section during merging of sections with large alignments, enabling DoS via crafted ELF. Multiple vendors document this under Binutils remediation; confirmed fixes involve upgrading Binutils to ...

CVE-2018-20020

CVE-2018-20020 refers to a heap out-of-bounds write in LibVNCServer/LibVNCClient within VNC client code. Public sources indicate the issue occurs in LibVNC before the commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d, which can lead to remote code execution. The CVE is listed in multiple vendor adv...

CVE-2020-16289

CVE-2020-16289 describes a buffer overflow in Ghostscript 9.50, specifically in cif_print_page() within devices/gdevcif.c, which could allow a remote attacker to cause a denial of service by processing a crafted PDF. The issue is fixed in Ghostscript 9.51. Affected product: Artifex Software Ghost...

CVE-2020-16295

Ghostscript v9.50 contains a null pointer dereference in clj_media_size() (devices/gdevclj.c) that allows remote attackers to cause a denial of service via crafted PDF files. The issue affects Artifex Ghostscript 9.50 and is fixed in version 9.51. Mitigation: upgrade to 9.51 or newer. The CVE is ...

CVE-2020-16302

Ghostscript 9.50 contains a buffer overflow in jetp3852_print_page() (devices/gdev3852.c) that could let a remote attacker escalate privileges via a crafted PDF. The issue is fixed in Ghostscript 9.51. Connected sources (CVE-2020-16302) corroborate the flaw and its remediation across distribution...

CVE-2020-1950

CVE-2020-1950 affects Apache Tika, specifically the PSDParser. The issue arises when processing crafted or corrupt PSD files, which can lead to excessive memory usage and potential denial of service in Tika versions 1.0–1.23. Connected advisories (USN/Ubuntu and related security notes) confirm th...

CVE-2020-27818

CVE-2020-27818 affects pngcheck via the check_chunk_name() function in pngcheck-2.4.0. A crafted file could cause a temporary denial of service, with impact to availability. Publicly documented fixes exist in Debian (pngcheck 2.3.0-7+deb9u1 for Debian 9), OpenSUSE OSV-2020/OSV-2024 entries mentio...

CVE-2020-29484

The CVE-2020-29484 issue affects Xen up through 4.14.x. When a Xenstore watch fires, the payload of the watch event can exceed 4096 bytes due to a large registration tag, enabling a malicious guest to trigger events with oversized payloads and cause a NULL pointer dereference in xenstored. This l...

CVE-2021-37621

CVE-2021-37621 affects Exiv2 up to v0.27.4; an infinite loop is triggered when printing the ICC profile (requires -p C), potentially causing denial of service. The issue is fixed in v0.27.5; upgrading Exiv2 to 0.27.5+ is recommended per provided advisories.

CVE-2021-37970

CVE-2021-37970: Use-after-free in the File System API of Google Chrome (Chromium) prior to 94.0.4606.54 can allow a remote attacker to potentially cause heap corruption via a crafted HTML page. Multiple vendor advisories note this as a Chrome/Chromium vulnerability with remediation via updates. P...

CVE-2021-37987

CVE-2021-37987 affects Chromium’s Network APIs component, prior to 95.0.4638.54. The vulnerability is a use-after-free/heap issue that could allow a remote attacker to trigger heap corruption via crafted HTML. Affected product/version: Chromium browser engine before 95.0.4638.54. Source entries (...

CVE-2021-3805

CVE-2021-3805 concerns the Node.js library object-path , vulnerable to a prototype pollution flaw. The Root Cause cited in multiple sources is improper modification of Object.prototype attributes, specifically via the del() function when using inherited props (includeInheritedProps). Several conn...

CVE-2022-1270

CVE-2022-1270 affects GraphicsMagick and involves a heap buffer overflow when parsing MIFF images. The issue is triggered by processing crafted MIFF files, with potential consequences including denial of service and, per Debian advisory wording, possible arbitrary code execution on affected syste...

CVE-2022-2126

CVE-2022-2126 describes an Out-of-bounds Read in the Vim project (vim/vim) prior to version 8.2. The available sources explicitly state the vulnerability type and affected product/version, but do not provide details on root cause, impact specifics beyond the out-of-bounds read, or a published fix...

CVE-2022-23098

ConnMan (DNS proxy) vulnerability CVE-2022-23098: The TCP server reply path can loop infinitely when no data is received, causing a denial of service. Affected through ConnMan 1.40. Remediation: upgrade to fixed releases per advisories (e.g., Debian bullseye 1.36-2.2+deb11u1, Debian DLA-3144-1 1....

CVE-2022-24349

CVE-2022-24349: In Zabbix, an authenticated user can create a hosts group with a stored XSS payload that becomes available to other users. When users search groups (and similar vectors described in the Debian/SUSE advisories), the XSS payload can execute in the victim’s browser, enabling actions ...

CVE-2023-1812

Summary: CVE-2023-1812 affects Google Chrome/Chromium. Vulnerability: Out-of-bounds memory access in DOM Bindings, exploitable via a crafted HTML page, enabling remote attacker impact as described in Chrome/Chromium advisories. Affected versions: prior to 112.0.5615.49. Remediation: upgrade to 11...

CVE-2023-2465

CVE-2023-2465 affects Google Chrome / Chromium. The issue is an inappropriate CORS implementation that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected component: Chromium-based browsers (Chrome/Chromium); root cause is flawed CORS handling leading to data...

CVE-2023-3338

CVE-2023-3338: A null pointer dereference in the Linux kernel DECnet protocol could allow remote crash of the system. Connected advisories confirm this affects Linux kernel DECnet with mitigation via status updates and removal of the DECnet protocol in the kernel; Debian/IBM entries note remediat...

CVE-2023-4364

CVE-2023-4364 describes an insecure implementation in Chrome’s Permission Prompts prior to 116.0.5845.96, allowing a crafted HTML page to obfuscate security UI. The issue affects Google Chrome (Chromium) and stems from an inappropriate implementation in Permission Prompts, with a Medium severity ...