CVE-2018-7490

CVE-2018-7490 affects the uWSGI PHP plugin before 2.0.17, where the PHP-DOCROOT validation fails, enabling directory traversal via the --php-docroot option and potentially exposing sensitive files outside the web root. Evidence in connected docs shows Debian security advisories fixing to versions...

CVE-2021-43304

CVE-2021-43304 describes a heap-buffer overflow in ClickHouse’s LZ4 compression codec when parsing a malicious query. The root cause is the LZ4::decompressImpl loop, where the arbitrary copy operation wildCopy(op, ip, copy_end) can exceed the destination buffer’s bounds. This vulnerability is lin...

CVE-2022-47519

CVE-2022-47519 affects the Linux kernel prior to 6.0.11 due to missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in the WILC1000 driver (drivers/net/wireless/microchip/wilc1000/cfg80211.c). This can trigger an out-of-bounds write when parsing the channel list attribute from Wi‑Fi management f...

CVE-2023-52612

CVE-2023-52612 is a Linux kernel vulnerability in crypto: scomp where the req->dst buffer could overflow when copying from scomp_scratch->dst. The description specifies that the dst buffer size must be checked before copying to prevent overflow. Connected documents (Astra Linux security bul...

CVE-2024-26835

CVE-2024-26835 affects the Linux kernel nf_tables (netfilter). When memory pressure causes hook registration to fail, a table can be marked active with no registered hooks, and on table/base chain deletion nf_tables may unregister hooks again, causing a core warn. The connected documents confirm ...

CVE-2014-0437

CVE-2014-0437 is an unspecified vulnerability in the MySQL Server component (affecting Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier) that allows remote authenticated users to affect availability via unknown vectors (related to the Optimizer). Connected advisories no...

CVE-2014-1477

CVE-2014-1477 affects Mozilla Firefox before 27.0 (and related ESR/Thunderbird/SeaMonkey versions) where the browser engine contains multiple unspecified vulnerabilities that could lead to memory corruption, application crashes, or possibly arbitrary code execution via unknown vectors. Exploitati...

CVE-2014-1532

CVE-2014-1532 is a use-after-free in Mozilla Firefox’s host-resolution path. Affected products include Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26, where the vulnerability resides in libxul.so's nsHostResolver::ConditionallyRefreshRecord. ...

CVE-2014-3610

CVE-2014-3610 is a Linux kernel KVM WRMSR emulation flaw present up to and including 3.17.2. The issue arises when guest writes a non-canonical value to a model-specific register, causing the host to crash (DoS). It is tied to wrmsr_interception (arch/x86/kvm/svm.c) and handle_wrmsr (arch/x86/kvm...

CVE-2015-0433

The CVE-2015-0433 entry concerns an unspecified vulnerability in Oracle MySQL Server (affected versions: 5.5.41 and earlier; 5.6.22 and earlier) that could allow remote authenticated users to affect availability via InnoDB : DML. Connected advisories from Debian, CentOS, Gentoo, and IBM/Tivoli sh...

CVE-2015-3148

CVE-2015-3148 affects curl and libcurl (versions 7.10.6 through 7.41.0). The issue is improper reuse of authenticated Negotiate connections, which could allow a remote attacker to perform requests as another user by manipulating a connection during a request. The connected sources corroborate the...

CVE-2015-3209

CVE-2015-3209 : Heap-based buffer overflow in the QEMU PCNET network device allows remote code execution via crafted packet sequences (TXSTATUS_STARTPACKET then TXSTATUS_DEVICEOWNS). This is a QEMU vulnerability discussed in multiple advisories (notably Arista/Security Advisory 0013 and F5/Multi-...

CVE-2015-5143

The CVE-2015-5143 entry affects Django’s session backends in versions prior to 1.4.21, 1.5.x–1.6.x, 1.7.x prior to 1.7.9, and 1.8.x prior to 1.8.3. The root cause is that a new empty record was created in the session storage each time a request with an unknown session key was received, enabling r...

CVE-2016-0641

CVE-2016-0641 affects multiple MySQL/MariaDB lineages with a MyISAM-related vulnerability that can impact confidentiality and availability when untrusted local users access certain database components. Affected: Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, 5.7.10 and earlier; MariaDB befo...

CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2017-7824

The CVE-2017-7824 issue is a buffer overflow in ANGLE used for WebGL rendering in Thunderbird before 52.4. It results from an incorrect value passed during checks in the ANGLE library, leading to a potentially exploitable crash. Affected products include Thunderbird

CVE-2018-16646

CVE-2018-16646 affects Poppler, where in version 0.68.0 the Parser::getObj() function in Parser.cc may trigger infinite recursion via a crafted file, enabling remote DoS. Public disclosures in connected advisories confirm the issue and link it to Poppler-based components. Remediation actions acro...

CVE-2018-18338

CVE-2018-18338 affects Chromium/Google Chrome’s canvas renderer. Arch Linux ASA-201812-2 documents a heap-based buffer overflow in the Canva component before 71.0.3578.80, enabling arbitrary code execution on a remote attacker. The fix is to upgrade to Chromium 71.0.3578.80-1 (or newer).

CVE-2018-19535

Exiv2 0.26 and earlier are affected by CVE-2018-19535 due to a heap-based buffer over-read in PngChunk::readRawProfile (pngchunk_int.cpp), which can cause a denial of service (application crash) via a crafted PNG file. Connected documents corroborate the CVE entry and list Exiv2-related DoS/crash...

CVE-2019-14776

CVE-2019-14776 is a heap-based buffer over-read in DemuxInit() of demux/asf/asf.c in VideoLAN VLC media player

CVE-2020-27674

CVE-2020-27674 is a Xen hypervisor local privilege escalation affecting Xen 4.14.x and earlier where x86 PV guests can gain guest OS privileges by modifying kernel memory contents due to mishandled invalidation of TLB entries in an INVLPG-like attack. The issue enables a local attacker to escalat...

CVE-2021-39921

CVE-2021-39921 affects Wireshark’s Modbus dissector. A NULL pointer dereference in the Modbus parser can cause a denial of service via crafted packets or captures. Affected range includes Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17. Public advisories from Debian and ALT Linux indicate fixes in Wiresha...

CVE-2021-39922

CVE-2021-39922 is a buffer overflow in the C12.22 dissector of Wireshark, affecting versions 3.4.0–3.4.9 and 3.2.0–3.2.17, leading to a denial of service via crafted captures or packet injection. The vulnerability is localized to the C12.22 dissector component; exploit details are not provided in...

CVE-2021-39928

Wireshark vulnerability CVE-2021-39928 is a NULL pointer dereference in the IEEE 802.11 dissector that may allow a denial of service via crafted captures or packet injection. Affected ranges include Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17. Public advisories indicate fixes are available: Debian Bul...

CVE-2023-34241

CVE-2023-34241 (CUPS) affects OpenPrinting CUPS prior to 2.4.6. A use-after-free occurs in cupsdAcceptClient when logging data after a connection closes due to the function httpClose(con->http) freeing the pointer; cupsdLogClient then passes that freed pointer to httpGetHostname. This can happ...

CVE-2023-6512

The CVE-2023-6512 issue affects Google Chrome’s Web Browser UI, where an inappropriate implementation in the UI could allow a remote attacker to spoof the contents of an iframe dialog context menu via a crafted HTML page. Affected product/versions include Chrome prior to 120.0.6099.62. The underl...

CVE-2024-26766

CVE-2024-26766 is a Linux kernel vulnerability in the IB/hfi1 SDMA path. The issue was an off-by-one error in sdma.h tx->num_descs that, after a prior fix, could cause the descs array to overflow for certain 6-descriptor SDMA sends requiring padding in the 7th descriptor. This overflow could c...

CVE-2024-46852

CVE-2024-46852 — Linux kernel CMA heap off-by-one fix : The issue occurred when a mapping larger than the buffer size could be created via mremap, allowing an overflow bypass in dma_buf_mmap_internal. The CMA heap fault handler incorrectly bound the fault offset by 1 when validating the end of th...

CVE-2024-46859

CVE-2024-46859 is a Linux kernel vulnerability affecting the panasonic-laptop code. The issue arises from unvalidated SINF array indices (0–SINF_CUR_BRIGHT, 0x0d), risking out-of-bounds accesses on devices with fewer SINF entries (e.g., CF-18 has ~10). The fix adds a minimum SINF array size check...

CVE-2024-47730

The CVE-2024-47730 entry concerns the Linux kernel vulnerability crypto: hisilicon/qm - inject error before stopping queue. The issue arises when the accelerator core reports memory errors; the driver injects a qm error to close the master ooo before stopping the queue, preventing access to memor...

CVE-2024-50063

CVE-2024-50063 concerns the Linux kernel BPF tail calls where a program attached to one kernel hook tail-calling another with a different prototype could bypass ctx-parameter verification and return-value constraints. The issue arises when progs attached to func1 and func2 have different paramete...

CVE-2011-3374

CVE-2011-3374 : Apt-key in apt (all versions) does not correctly validate GPG keys with the master keyring, enabling a potential man-in-the-middle attack. The IBM/X-Force bulletin for CVE-2011-3374 (linked in the connected docs) confirms the vulnerability and lists CWE-347 (Improper Verification ...

CVE-2014-9636

The CVE affects the unzip utility (core unzip code) with a vulnerability in test_compr_eb() where an extra field has an uncompressed size smaller than the compressed field size in a STORED- method ZIP entry, leading to an out-of-bounds read/write and possible denial of service or crash. Numerous ...

CVE-2015-1547

The LibTIFF vulnerability CVE-2015-1547 affects the NeXTDecode function in tif_next.c of LibTIFF, allowing remote attackers to cause a denial of service via a crafted TIFF image. Connected advisories reference DoS/memory corruption risks and note affected products (e.g., BIG-IP TIFF image process...

CVE-2017-1000116

Mercurial prior to 4.3 is affected by CVE-2017-1000116 due to inadequate sanitization of SSH hostnames, enabling possible shell-injection via crafted ssh URLs. This is a network‑based, high‑impact issue (per CVSS), with references noting fixes in Mercurial 4.3.1/4.3.2 (see release notes in the re...

CVE-2017-14166

CVE-2017-14166 affects libarchive and causes a denial of service via a heap-based buffer over-read in the atol8 handling inside archive_read_support_format_xar.c when processing crafted XAR files. This is evidenced across multiple advisories (IBM App Connect Enterprise/Bulletin, IBM MQ/Operator b...

CVE-2017-5579

CVE-2017-5579 entry rejected/not used; this CVE ID is not active.

CVE-2018-18025

CVE-2018-18025 affects ImageMagick and describes a heap-based buffer over-read in the EncodeImage function of pict.c, enabling denial of service via a crafted SVG. Connected advisories confirm the issue and provide fixes via package updates. For Debian 8 (Jessie), the fix is in 8:6.8.9.9-5+deb8u1...

CVE-2018-18718

CVE-2018-18718 affects gThumb up to 3.6.2; a double-free in add_themes_from_dir (dlg-contact-sheet.c) frees the same buffer twice, enabling memory corruption. Patches exist in downstream advisories (e.g., Mageia/MGASA-2019-0039, openSUSE/SU-2019:0022-1, OSV entries) and updated gthumb packages (e...

CVE-2018-6057

CVE-2018-6057 affects Google Chrome/Chromium prior to 65.0.3325.146, due to improper permissions handling of shared memory (ashmem). The issue permitted a renderer-compromised page to bypass inter-process read-only guarantees. Public documents confirm the vulnerability and list Chrome/Chromium 65...

CVE-2018-9422

CVE-2018-9422 concerns a use-after-free in get_futex_key() in futex.c, causing a local privilege escalation on Android/kernel environments. The vulnerability is triggered due to improper locking in futex.c and can be exploited with no user interaction. Connected sources (Unity Linux Nessus plugin...

CVE-2019-9903

CVE-2019-9903 is a Poppler vulnerability affecting PDFDoc::markObject in PDFDoc.cc (Poppler 0.74.0). The issue causes stack consumption via a crafted PDF, exploitable when processing with pdfunite. Connected advisories reference the same root cause and list multiple vendor updates fixing this fam...

CVE-2020-16294

The CVE-2020-16294 vulnerability is a buffer overflow in Ghostscript v9.50 affecting epsc_print_page() in devices/gdevepsc.c, exploitable via a crafted PDF to cause a denial of service. The issue is fixed in Ghostscript v9.51; remediation is to upgrade to at least 9.51. The connected sources (e.g...

CVE-2021-37961

CVE-2021-37961 is a use-after-free vulnerability in Google Chrome/Chromium’s Tab Strip that could allow remote code execution via a crafted HTML page (heap corruption). Public references indicate this CVE is part of Chromium security fixes; Debian notes a fix in later Chromium versions (bullseye:...

CVE-2021-39925

CVE-2021-39925 is a Wireshark vulnerability: a buffer overflow in the Bluetooth SDP dissector can lead to denial of service via crafted captures or packet injection. It affects Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17. Connected advisories indicate fixes in later Wireshark packages (e.g., Debian/AL...

CVE-2021-43303

CVE-2021-43303 affects ring (embedded pjproject). A buffer overflow in the PJSUA API when calling pjsua_call_dump is caused by an attacker-controlled buffer argument; if the output buffer is smaller than 128 characters, it can overflow despite maxlen. Debian and Ubuntu advisories (DLA-3887, USN-6...

CVE-2021-44143

The CVE-2021-44143 issue affects isync (mbsync) in versions prior to 1.4.4 (1.4.0–1.4.3). An unchecked condition in processing a crafted IMAP message lacking headers (starts with an empty line) can provoke a heap overflow, potentially enabling remote code execution on the client. Remediation: upg...

CVE-2022-23468

CVE-2022-23468 affects xrdp before version 0.9.21. The issue is a buffer overflow in xrdp_login_wnd_create(); there are no known workarounds. Upgrading to 0.9.21 or newer is recommended per multiple advisories (e.g., Debian, Alpine, Fedora) and is consistent with the provided CVSS metrics (CRITIC...

CVE-2022-26505

CVE-2022-26505 affects ReadyMedia (MiniDLNA) prior to 1.3.1. A DNS rebinding flaw lets a remote web server exfiltrate media files. Public advisories (Debian, Gentoo GLSA, openSUSE, Ubuntu USN) show affected versions range up to 1.3.1 and note updates/patches (e.g., Debian DLA-2973 fixes in 1.1.6+...

CVE-2023-6509

CVE-2023-6509 describes a Use-After-Free vulnerability in Chrome/Chromium's Side Panel Search, where handling of specific UI interactions could lead to heap corruption. Affected product: Google Chrome/Chromium browsers (Chromium-based). Root cause: use-after-free in the Side Panel Search componen...