CVE-2021-39922

CVE-2021-39922 is a buffer overflow in the C12.22 dissector of Wireshark, affecting versions 3.4.0–3.4.9 and 3.2.0–3.2.17, leading to a denial of service via crafted captures or packet injection. The vulnerability is localized to the C12.22 dissector component; exploit details are not provided in...

CVE-2021-41136

Summary: CVE-2021-41136 affects Puma HTTP/1.1 server for Ruby/Rack. When used with a proxy that forwards HTTP header values containing LF, an attacker could smuggle a request through the proxy, potentially causing the proxy to send a response to a different client. This behavior has been observed...

CVE-2021-43303

CVE-2021-43303 affects ring (embedded pjproject). A buffer overflow in the PJSUA API when calling pjsua_call_dump is caused by an attacker-controlled buffer argument; if the output buffer is smaller than 128 characters, it can overflow despite maxlen. Debian and Ubuntu advisories (DLA-3887, USN-6...

CVE-2022-29501

CVE-2022-29501 affects SchedMD Slurm 21.08.x through 20.11.x. Root cause: Incorrect Access Control allowing an unprivileged user to exploit PMI2/PMIx RPC handling to perform privilege escalation and potentially code execution. Exploitation details are not provided in the supplied documents. Confi...

CVE-2023-1823

CVE-2023-1823 concerns Google Chrome's FedCM: an improper FedCM implementation allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product/component: Chrome/Chromium FedCM integration. Root cause: Inappropriate implementation in FedCM. Impact: navigation r...

CVE-2023-6205

The connected sources corroborate CVE-2023-6205: a use-after-free involving MessagePort Entangled leads to an exploitable crash in Firefox and Thunderbird. Affected products include Firefox versions prior to 120 and Thunderbird prior to 115.5.0 (and ESR 115.5.0 lineage). The root cause is use-aft...

CVE-2024-26766

CVE-2024-26766 is a Linux kernel vulnerability in the IB/hfi1 SDMA path. The issue was an off-by-one error in sdma.h tx->num_descs that, after a prior fix, could cause the descs array to overflow for certain 6-descriptor SDMA sends requiring padding in the 7th descriptor. This overflow could c...

CVE-2024-50063

CVE-2024-50063 concerns the Linux kernel BPF tail calls where a program attached to one kernel hook tail-calling another with a different prototype could bypass ctx-parameter verification and return-value constraints. The issue arises when progs attached to func1 and func2 have different paramete...

CVE-2010-2063

Summary of CVE-2010-2063 : Samba’s SMB1 packet chaining implementation in the chain_reply function (process.c) contains a buffer overflow vulnerability in Samba 3.0.x before 3.3.13. This allows remote attackers to cause memory corruption, daemon crashes, and potentially execute arbitrary code via...

CVE-2014-9636

The CVE affects the unzip utility (core unzip code) with a vulnerability in test_compr_eb() where an extra field has an uncompressed size smaller than the compressed field size in a STORED- method ZIP entry, leading to an out-of-bounds read/write and possible denial of service or crash. Numerous ...

CVE-2015-1547

The LibTIFF vulnerability CVE-2015-1547 affects the NeXTDecode function in tif_next.c of LibTIFF, allowing remote attackers to cause a denial of service via a crafted TIFF image. Connected advisories reference DoS/memory corruption risks and note affected products (e.g., BIG-IP TIFF image process...

CVE-2017-6928

Drupal core 7.x before 7.57 with the private file system is vulnerable to an access bypass where one module grants access to a file while another denies it, due to a conflicting access check. This is mitigated by unusual site configurations but not guaranteed. The issue is addressed in Drupal 7.5...

CVE-2017-7830

CVE-2017-7830 involves a cross-origin information disclosure through the Resource Timing API that could reveal navigations loaded in iframes, constituting a same-origin policy violation. Public documentation in Debian and CVE databases tie this to WebKit-related handling in Safari/WebKit componen...

CVE-2018-14361

CVE-2018-14361 affects NeoMutt (prior to 2018-07-16). Root cause: nntp.c proceeds even if memory allocation fails for messages data. Impact is described as high-severity in CVSS vectors; exploitation details are not provided in the documents. Remediation: patch/update NeoMutt/related packages as ...

CVE-2018-16646

CVE-2018-16646 affects Poppler, where in version 0.68.0 the Parser::getObj() function in Parser.cc may trigger infinite recursion via a crafted file, enabling remote DoS. Public disclosures in connected advisories confirm the issue and link it to Poppler-based components. Remediation actions acro...

CVE-2018-18718

CVE-2018-18718 affects gThumb up to 3.6.2; a double-free in add_themes_from_dir (dlg-contact-sheet.c) frees the same buffer twice, enabling memory corruption. Patches exist in downstream advisories (e.g., Mageia/MGASA-2019-0039, openSUSE/SU-2019:0022-1, OSV entries) and updated gthumb packages (e...

CVE-2019-11006

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by CVE-2019-11006 due to a heap-based buffer over-read in ReadMIFFImage (coders/miff.c). This can cause denial of service or information disclosure via crafted MIFF content, with CVSSv3 details indicating Critical impact (HIGH confidentiality/av...

CVE-2019-18420

CVE-2019-18420 affects the Xen hypervisor (x86 PV guests). A bug in VCPUOP_initialise handling, where hypercall_create_continuation() uses a printf-like format string and BUG() for bad characters, can crash the hypervisor if a guest causes a long continuation, enabling Denial of Service. Vulnerab...

CVE-2020-16294

The CVE-2020-16294 vulnerability is a buffer overflow in Ghostscript v9.50 affecting epsc_print_page() in devices/gdevepsc.c, exploitable via a crafted PDF to cause a denial of service. The issue is fixed in Ghostscript v9.51; remediation is to upgrade to at least 9.51. The connected sources (e.g...

CVE-2020-22016

CVE-2020-22016 is a heap-based Buffer Overflow in FFmpeg 4.2, specifically in libavcodec/get_bits.h during MOV writing, which can lead to memory corruption. The initial description and connected documents confirm FFmpeg 4.2 as affected and the .mov writing path as the trigger. The provided materi...

CVE-2020-27674

CVE-2020-27674 is a Xen hypervisor local privilege escalation affecting Xen 4.14.x and earlier where x86 PV guests can gain guest OS privileges by modifying kernel memory contents due to mishandled invalidation of TLB entries in an INVLPG-like attack. The issue enables a local attacker to escalat...

CVE-2021-31439

CVE-2021-31439 affects Netatalk components used by Synology DiskStation Manager. The flaw arises in the processing of DSI structures where the length of user-supplied data is not properly validated before copying to a heap-based buffer, enabling network-adjacent attackers to execute arbitrary cod...

CVE-2021-37706

CVE-2021-37706 affects the pjproject/PJSIP stack embedded in various products. If an incoming STUN message contains an ERROR-CODE attribute, the code path does not check the header length before a subtraction, enabling an integer underflow that could let a malicious actor remotely execute code vi...

CVE-2021-37961

CVE-2021-37961 is a use-after-free vulnerability in Google Chrome/Chromium’s Tab Strip that could allow remote code execution via a crafted HTML page (heap corruption). Public references indicate this CVE is part of Chromium security fixes; Debian notes a fix in later Chromium versions (bullseye:...

CVE-2021-39925

CVE-2021-39925 is a Wireshark vulnerability: a buffer overflow in the Bluetooth SDP dissector can lead to denial of service via crafted captures or packet injection. It affects Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17. Connected advisories indicate fixes in later Wireshark packages (e.g., Debian/AL...

CVE-2021-39928

Wireshark vulnerability CVE-2021-39928 is a NULL pointer dereference in the IEEE 802.11 dissector that may allow a denial of service via crafted captures or packet injection. Affected ranges include Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17. Public advisories indicate fixes are available: Debian Bul...

CVE-2021-39929

CVE-2021-39929 affects the Bluetooth DHT dissector in Wireshark, causing Denial of Service via packet injections or crafted capture files for Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17 due to uncontrolled recursion. Remediation is upgrading Wireshark to a fixed version (e.g., 3.4.10+ per Debian/Alt L...

CVE-2022-0583

Wireshark CVE-2022-0583 is a crash in the PVFS protocol dissector that can cause a denial of service via crafted captures or packet injection in Wireshark versions 3.6.0–3.6.1 and 3.4.0–3.4.11. The issue has been addressed in multiple vendor advisories with fixes in newer packages (e.g., Debian 3...

CVE-2022-27635

CVE-2022-27635 affects Intel PROSet/Wireless WiFi and Killer WiFi software. The root cause is improper access control, which may allow a privileged local user to escalate privileges. Public entries in connected documents confirm impacts as local escalation with high confidentiality/integrity/avai...

CVE-2023-1821

CVE-2023-1821: A low-severity vulnerability in Google Chrome’s WebShare (Chromium) stems from an improper WebShare implementation, potentially allowing a remote attacker to hide the Omnibox (URL bar) contents via a crafted HTML page. Affected products are Google Chrome/Chromium-based browsers pri...

CVE-2023-4356

CVE-2023-4356 describes a use-after-free in Audio for Google Chrome prior to 116.0.5845.96, enabling a remote attacker who induces user UI interaction to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, FreeBSD, Gentoo, Fedora, etc.) align on affected produc...

CVE-2023-4365

CVE-2023-4365 is a Chrome/Chromium vulnerability due to an inappropriate implementation in Fullscreen. Root cause: Fullscreen handling allows a crafted HTML page to obfuscate the security UI. Affects Google Chrome/Chromium (and related Edge in some docs) prior to version 116.0.5845.96. Impact per...

CVE-2024-26820

CVE-2024-26820 affects the Linux kernel hv_netvsc driver. The issue occurs when the hv_netvsc module is unloaded and reloaded: the NET_DEVICE_REGISTER handler can fail to register a VF because the VF registration call arrives before netvsc_probe finishes, since register_netdevice_notifier() is re...

CVE-2024-46859

CVE-2024-46859 is a Linux kernel vulnerability affecting the panasonic-laptop code. The issue arises from unvalidated SINF array indices (0–SINF_CUR_BRIGHT, 0x0d), risking out-of-bounds accesses on devices with fewer SINF entries (e.g., CF-18 has ~10). The fix adds a minimum SINF array size check...

CVE-2024-49966

CVE-2024-49966 in the Linux kernel (OCFS2) fixes a bug where an active delayed work could remain when freeing oinfo after an error in global quota read, triggering a warning. The patch cancels the dqi_sync_work before freeing oinfo and changes the read_file_info error path to return a status inst...

CVE-2025-37741

CVE-2025-37741 affects the Linux kernel JFS, where a race/locking path can lead to a deadlock in diFree when nlink is incorrectly derived as 0. Root cause: during inode handling for iag creation, a corrupted metapage can cause dinode’s nlink to be copied as 0, triggering diFree and a deadlock seq...

CVE-2025-37757

In CVE-2025-37757, the Linux kernel leak was in tipc_link_xmit where an overloaded backlog transmit queue could cause -ENOBUFS but leave skb lists uncleared, leading to memory leaks during skb allocations. The fix purges the skb list before tipc_link_xmit() returns.

CVE-2025-37798

CVE-2025-37798 affects the Linux kernel networking code. The fix removes the qlen check in fq_codel_dequeue() and codel_qdisc_dequeue() after making sch->qlen_notify() callbacks idempotent. The description indicates the vulnerability related to backlog/queue length handling in qdisc code (code...

CVE-2025-37992

CVE-2025-37992 affects the Linux kernel net_sched subsystem. Affected: qdiscs (codel, fq, fq_codel, fq_pie, hhf, pie). Root cause: during qdisc ->change(), trimming only the main queue could leave packets on the gso_skb list, risking NULL pointer dereference when sch->limit is compared to s...

CVE-2012-0867

CVE-2012-0867 affects PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3. The vulnerability truncates the SSL certificate common name to 32 characters when verifying hostnames, enabling remote attackers to spoof connections if the hostname is exactly 32 characters. This is...

CVE-2014-2412

CVE-2014-2412: Unspecified vulnerability in Oracle Java SE (5.0u61, 6u71, 7u51, 8; Embedded 7u51) affecting the AWT component. Root cause and exploit details are not provided in the initial description, but the issue impacts confidentiality, integrity, and availability. Connected IBM bulletins re...

CVE-2014-3610

CVE-2014-3610 is a Linux kernel KVM WRMSR emulation flaw present up to and including 3.17.2. The issue arises when guest writes a non-canonical value to a model-specific register, causing the host to crash (DoS). It is tied to wrmsr_interception (arch/x86/kvm/svm.c) and handle_wrmsr (arch/x86/kvm...

CVE-2015-0433

The CVE-2015-0433 entry concerns an unspecified vulnerability in Oracle MySQL Server (affected versions: 5.5.41 and earlier; 5.6.22 and earlier) that could allow remote authenticated users to affect availability via InnoDB : DML. Connected advisories from Debian, CentOS, Gentoo, and IBM/Tivoli sh...

CVE-2016-2143

CVE-2016-2143 affects the Linux kernel, specifically the fork implementation on s390 platforms. The issue occurs when four page-table levels are used, which can allow a local unprivileged user to crash the system (DoS) or potentially cause other unspecified impacts via crafted applications, relat...

CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2017-1000116

Mercurial prior to 4.3 is affected by CVE-2017-1000116 due to inadequate sanitization of SSH hostnames, enabling possible shell-injection via crafted ssh URLs. This is a network‑based, high‑impact issue (per CVSS), with references noting fixes in Mercurial 4.3.1/4.3.2 (see release notes in the re...

CVE-2017-16533

CVE-2017-16533 affects the Linux kernel’s usbhid_parse() in drivers/hid/usbhid/hid-core.c up to and including version 4.13.7; a crafted USB device can cause an out-of-bounds read, leading to local denial of service or a crash. Affected component: HID USB host controller driver (usbhid). Root caus...

CVE-2017-5612

WordPress before 4.7.2 is affected by CVE-2017-5612: an XSS in wp-admin/includes/class-wp-posts-list-table.php in the posts list table allows remote attackers to inject arbitrary web script or HTML via a crafted excerpt. Affected component is the posts list table logic; root cause is inadequate v...

CVE-2018-11040

CVE-2018-11040 affects Spring Framework: 5.0.x before 5.0.7 and 4.3.x before 4.3.18 (and older unsupported versions). The issue arises because JSONP support can be enabled via JSONP parameters when MappingJackson2JsonView is configured, allowing cross-domain requests through AbstractJsonpResponse...

CVE-2018-18338

CVE-2018-18338 affects Chromium/Google Chrome’s canvas renderer. Arch Linux ASA-201812-2 documents a heap-based buffer overflow in the Canva component before 71.0.3578.80, enabling arbitrary code execution on a remote attacker. The fix is to upgrade to Chromium 71.0.3578.80-1 (or newer).