CVE-2023-1821

CVE-2023-1821: A low-severity vulnerability in Google Chrome’s WebShare (Chromium) stems from an improper WebShare implementation, potentially allowing a remote attacker to hide the Omnibox (URL bar) contents via a crafted HTML page. Affected products are Google Chrome/Chromium-based browsers pri...

CVE-2023-1823

CVE-2023-1823 concerns Google Chrome's FedCM: an improper FedCM implementation allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product/component: Chrome/Chromium FedCM integration. Root cause: Inappropriate implementation in FedCM. Impact: navigation r...

CVE-2023-34241

CVE-2023-34241 (CUPS) affects OpenPrinting CUPS prior to 2.4.6. A use-after-free occurs in cupsdAcceptClient when logging data after a connection closes due to the function httpClose(con->http) freeing the pointer; cupsdLogClient then passes that freed pointer to httpGetHostname. This can happ...

CVE-2024-50063

CVE-2024-50063 concerns the Linux kernel BPF tail calls where a program attached to one kernel hook tail-calling another with a different prototype could bypass ctx-parameter verification and return-value constraints. The issue arises when progs attached to func1 and func2 have different paramete...

CVE-2025-37758

CVE-2025-37758 affects the Linux kernel’s ata_pxa driver. The root cause was a potential NULL pointer dereference in pxa_ata_probe() when devm_ioremap() returns NULL. The fix adds a NULL check after devm_ioremap() to prevent dereferencing NULL.

CVE-2008-3529

No additional technical details about CVE-2008-3529 are present in the provided documents. Public details appear in the Initial Description, but no connected documents confirm affected products/versions/root cause/fixes. Monitor for updates.

CVE-2014-1514

CVE-2014-1514 affects Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25. The issue arises from not validating the length of the destination array before a copy operation in TypedArrayObject, allowing remote attackers to execute arbitrary...

CVE-2015-8806

CVE-2015-8806 — libxml2 heap-buffer overread in dict.c . A remote attacker can crash an affected application by sending a crafted HTML document containing an unexpected character immediately after the "

CVE-2016-1762

CVE-2016-1762 (and related libxml2 flaws) affects the GNOME libxml2 library where crafted XML input can cause denial of service or code execution. The primary cited issue is a heap-based buffer over-read in xmlNextChar prior to libxml2 2.9.4. Public advisories list multiple CVEs (e.g., 2016-1833/...

CVE-2017-1000422

CVE-2017-1000422 affects GNOME gdk-pixbuf: specifically gif_get_lzw integer overflow in gdk-pixbuf 2.36.8 and older, causing memory corruption and potential remote code execution. Connected advisories corroborate the same issue and indicate multiple downstream vendor patches. Most documented reme...

CVE-2017-5435

CVE-2017-5435 is a use-after-free in Firefox/Thunderbird during editor design-mode transaction processing, causing a potentially exploitable crash. Public details place affected products as Firefox/Firefox ESR and Thunderbird prior to certain fixed versions (e.g., Thunderbird < 52.1, Firefox E...

CVE-2017-5448

CVE-2017-5448 is an out-of-bounds write in ClearKeyDecryptor (Gecko Media Plugin sandbox). The issue allows writing arbitrary memory data, potentially causing a crash or remote code execution. Affected products include Firefox/Firefox ESR prior to patched versions; upstream advisories show fixes ...

CVE-2017-9064

CVE-2017-9064 affects WordPress prior to 4.7.5. The vulnerability is a CSRF in the filesystem credentials dialog where updating credentials does not require a nonce, enabling unauthorized credential changes. The issue is validated by the description in the initial document; no exploitation status...

CVE-2018-13300

Summary: CVE-2018-13300 affects FFmpeg 3.2 and 4.0.1. The vulnerability arises from an improper argument passed to avpriv_request_sample in handle_eac3 (libavformat/movenc.c), which may cause an out-of-bounds read while converting a crafted AVI file to MPEG4, leading to denial of service and pote...

CVE-2018-20022

CVE-2018-20022 affects LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 in the VNC client code. The root cause is an improper initialization weakness (CWE-665) that allows an attacker to read stack memory, enabling information disclosure. When combined with another vulnerability, this can b...

CVE-2019-11505

CVE-2019-11505 affects GraphicsMagick 1.3.8 through 1.4 snapshot-20190403 Q8. A heap-based buffer overflow in WritePDBImage (coders/pdb.c), related to MagickBitStreamMSBWrite (magick/bit_stream.c), can cause denial of service and may have other impact via a crafted image. Affected versions and fi...

CVE-2019-3498

CVE-2019-3498 affects Django in the function django.views.defaults.page_not_found() where output can be spoofed on a 404 page due to improper neutralization of elements. Affected versions are Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5. Remediation is to upgrade to t...

CVE-2020-16308

CVE-2020-16308 affects Artifex Software Ghostscript v9.50, with a vulnerability in p_print_image() in devices/gdevcdj.c that could allow a remote attacker to cause a denial-of-service via a crafted PDF file. The issue is mitigated by upgrading to Ghostscript v9.51, which contains the fix. Referen...

CVE-2020-22054

CVE-2020-22054 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in av_dict_set in dict.c. The issue is consistently reported across multiple advisories (Debian, Debian LTS, openSUSE/openSUSE-SU, SUSE, Ubuntu) tied to FFmpeg 4.2. Exploitation details are not provided in t...

CVE-2020-28368

CVE-2020-28368 concerns Xen up to 4.14.x where a power/energy monitor side-channel (Platypus) could leak sensitive data (e.g., AES keys) from outside the guest. The root cause is an access-control weakness on the power/energy monitoring interfaces exposed to guests. The documented impact is infor...

CVE-2021-33582

CVE-2021-33582 affects Cyrus IMAPD; a bad string-hashing algorithm in internal hash tables can cause a CPU-denial-of-service by directing many inputs to a single bucket. Affected releases include Cyrus IMAPD prior to 3.4.2, 3.2.8, and 3.0.16, with fixes implemented in those versions. Public advis...

CVE-2021-4185

CVE-2021-4185 affects Wireshark’s RTMPT dissector and enables denial of service via crafted captures or packet injection by triggering an infinite loop. Public details confirm vulnerable versions include Wireshark 3.6.0 and 3.4.0–3.4.10. Advisories note remediation through updates; for example, D...

CVE-2022-2126

CVE-2022-2126 describes an Out-of-bounds Read in the Vim project (vim/vim) prior to version 8.2. The available sources explicitly state the vulnerability type and affected product/version, but do not provide details on root cause, impact specifics beyond the out-of-bounds read, or a published fix...

CVE-2022-23123

Netatalk vulnerability CVE-2022-23123 (and related CVEs) affects AFP service where getdirparams improperly validates user data, causing an out-of-bounds read that can enable remote code execution as root. No authentication is required. Public advisories identify the issue and link it to ZDI-15830...

CVE-2022-23468

CVE-2022-23468 affects xrdp before version 0.9.21. The issue is a buffer overflow in xrdp_login_wnd_create(); there are no known workarounds. Upgrading to 0.9.21 or newer is recommended per multiple advisories (e.g., Debian, Alpine, Fedora) and is consistent with the provided CVSS metrics (CRITIC...

CVE-2022-31003

Sofia-SIP vulnerability CVE-2022-31003: before version 1.13.8, parsing each line of a SDP message with rest = record + 2 can access memory behind a NUL and cause an out-of-bounds write, potentially crashing or enabling remote code execution. Affected component is the Sofia-SIP SIP User-Agent libr...

CVE-2024-26763

CVE-2024-26763 is a Linux kernel vulnerability in dm-crypt related to authenticated encryption. The issue arises when data is modified during encryption, which could produce an invalid tag. The fix copies the data into a clone bio and encrypts there, avoiding in-place modification and potential d...

CVE-2024-27414

CVE-2024-27414: In the Linux kernel, the IFLA_BRIDGE_FLAGS writing-back error logic was fixed. The root cause was an adjusted loop in rtnl_bridge_setlink that checked IFLA_BRIDGE_MODE length but removed a break, causing the flags write path to use a possibly invalid NLA at the end of processing. ...

CVE-2012-1970

CVE-2012-1970 affects Mozilla Firefox before 15.0, Thunderbird before 15.0, ESR 10.x before 10.0.7, and SeaMonkey before 2.12. The issue stems from multiple unspecified vulnerabilities in the browser engine that can allow remote attackers to cause memory corruption and application crashes or pote...

CVE-2014-1477

CVE-2014-1477 affects Mozilla Firefox before 27.0 (and related ESR/Thunderbird/SeaMonkey versions) where the browser engine contains multiple unspecified vulnerabilities that could lead to memory corruption, application crashes, or possibly arbitrary code execution via unknown vectors. Exploitati...

CVE-2015-1547

The LibTIFF vulnerability CVE-2015-1547 affects the NeXTDecode function in tif_next.c of LibTIFF, allowing remote attackers to cause a denial of service via a crafted TIFF image. Connected advisories reference DoS/memory corruption risks and note affected products (e.g., BIG-IP TIFF image process...

CVE-2015-2573

CVE-2015-2573 is an unspecified vulnerability in Oracle MySQL Server (affecting 5.5.41 and earlier; 5.6.22 and earlier) that could allow remote authenticated users to affect availability via DDL-related vectors. The connected documents confirm this CVE appears in multiple security advisories acro...

CVE-2015-2620

MiracleLinux 4 (AXSA:2015-464:01) lists CVE-2015-2620 among fixes for mysql55-mysql-5.5.45-1.0.1.AXS4. The advisory notes that updated packages upgrade MySQL to version 5. The description indicates an unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier affec...

CVE-2015-7513

The CVE-2015-7513 vulnerability affects arch/x86/kvm/x86.c in the Linux kernel prior to 4.4, where PIT counter values are not reset during guest state restoration. This can allow guest OS users to trigger a denial-of-service (divide-by-zero) and host crash via a zero PIT value, related to kvm_vm_...

CVE-2016-1000345

CVE-2016-1000345 (padding oracle in Bouncy Castle JCE Provider DHIES/ECIES CBC) affects BC 1.55 and earlier; in environments with observable timings, decryption padding failures can be inferred via timing analyses. The IBM/BC-focused bulletin confirms this CVE among multiple BC-related issues and...

CVE-2016-10196

CVE-2016-10196 : A stack-based buffer overflow in libevent’s evutil_parse_sockaddr_port (evutil.c) before 2.1.6-beta allows a crafted long string in ip_as_string to cause a denial-of-service (segmentation fault). Affected software is libevent prior to 2.1.6-beta; the description notes the fix in ...

CVE-2017-5410

CVE-2017-5410 is a memory corruption bug during JavaScript garbage collection (incremental sweeping) that affects Firefox and Thunderbird prior to version 52. Upgrading to Firefox/Thunderbird 52.0 or later (as reflected in multiple advisories) is the remediation. Exploitation details are not prov...

CVE-2017-6014

Wireshark (version 2.2.4 and earlier) is affected by CVE-2017-6014 in the STANAG 4607 dissector. A crafted capture with a null packet size field can cause the offset to not advance, leading to an infinite loop and rapid memory exhaustion. Debian security advisory DSA-3811-1 notes fixes in Wiresha...

CVE-2017-7487

The CVE-2017-7487 issue is in the Linux kernel net/ipx/af_ipx.c ipxitf_ioctl: reference count mishandling causes a use-after-free via a failed SIOCGIFADDR on an IPX interface, enabling local denial of service. Evidence in connected Nessus advisories confirms the vulnerability and that it affects ...

CVE-2017-7823

The CVE-2017-7823 entry describes a CSP sandbox issue where the sandbox did not create a unique origin, causing documents to behave as if allow-same-origin were always specified and enabling potential XSS. Affected products are Mozilla Thunderbird < 52.4, Firefox < 56, and Firefox ESR

CVE-2018-18245

CVE-2018-18245 : Nagios Core 4.4.2 is vulnerable to a cross-site scripting (XSS) in the alert summary reports of plugin results, demonstrated by a SCRIPT element delivered via a modified check_load plugin to NRPE. The issue stems from user-facing output in the alert summary report, enabling injec...

CVE-2018-19107

Exiv2 0.26 contains a vulnerability in Exiv2::IptcParser::decode (iptc.cpp) triggered when processing crafted PSD images via PSD reader (psdimage.cpp), causing a heap-based buffer over-read due to an integer overflow. This CVE-2018-19107 entry is corroborated by multiple advisories listing Exiv2 ...

CVE-2018-20020

CVE-2018-20020 refers to a heap out-of-bounds write in LibVNCServer/LibVNCClient within VNC client code. Public sources indicate the issue occurs in LibVNC before the commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d, which can lead to remote code execution. The CVE is listed in multiple vendor adv...

CVE-2018-20750

CVE-2018-20750 : LibVNC up to 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The description notes that the fix for CVE-2018-15127 was incomplete, indicating an insufficiently addressed heap-write issue in the server component. Multiple advisories and lists ...

CVE-2018-5187

CVE-2018-5187 corresponds to memory safety bugs reported in Firefox 60/Firefox ESR 60 and affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox

CVE-2018-6116

CVE-2018-6116 concerns a null pointer dereference in WebAssembly within Google Chrome before 66.0.3359.117, enabling a remote attacker to potentially trigger out-of-bounds memory access via a crafted HTML page. Connected advisories confirm the vulnerability as part of Chrome/WebAssembly issues an...

CVE-2018-7490

CVE-2018-7490 affects the uWSGI PHP plugin before 2.0.17, where the PHP-DOCROOT validation fails, enabling directory traversal via the --php-docroot option and potentially exposing sensitive files outside the web root. Evidence in connected docs shows Debian security advisories fixing to versions...

CVE-2019-14498

CVE-2019-14498 affects VLC media player 3.0.7.1 and earlier, with a divide-by-zero vulnerability in the demux/caf.c Control function that can trigger a fault via crafted CAF files. The issue resides in the CAF demuxer code path and is associated with a numeric/division-by-zero condition. Multiple...

CVE-2019-18425

CVE-2019-18425 affects Xen across 3.2+ and enables privilege escalation in 32-bit PV guests due to missing descriptor table limit checks in x86 PV emulation. The vulnerability is limited to 32-bit PV guest user mode; HVM/PVH/64-bit PV guests and ARM are not affected. Exploitation would let a gues...

CVE-2020-16294

The CVE-2020-16294 vulnerability is a buffer overflow in Ghostscript v9.50 affecting epsc_print_page() in devices/gdevepsc.c, exploitable via a crafted PDF to cause a denial of service. The issue is fixed in Ghostscript v9.51; remediation is to upgrade to at least 9.51. The connected sources (e.g...