CVE-2016-7440

The CVE-2016-7440 issue affects the wolfSSL (formerly CyaSSL) C library’s AES Encryption/Decryption implementation prior to 3.9.10. The vulnerability enables local users to potentially discover AES keys by exploiting cache-bank timing differences during AES operations. The available connected doc...

CVE-2019-16223

WordPress Core prior to 5.2.3 is vulnerable to an XSS in post previews when accessed by authenticated users. The root cause involves wp_kses_bad_protocol_once() URL sanitization, which in affected versions can be bypassed via crafted input, enabling arbitrary script execution in the user’s browse...

CVE-2019-9892

CVE-2019-9892 affects Open Ticket Request System (OTRS) versions 5.x (up to 5.0.34), 6.x (up to 6.0.17), and 7.x (up to 7.0.6). An agent with appropriate permissions can import a specially crafted Report Statistics XML, triggering an XML External Entity (XXE) processing flaw that may cause the sy...

CVE-2020-16306

Ghostscript v9.50 is affected by a NULL pointer dereference in devices/gdevtsep.c that allows remote denial-of-service via a crafted PostScript file. The issue is fixed in Ghostscript 9.51. Affected products and impact are described in CVE-2020-16306 entries across multiple advisories (e.g., Debi...

CVE-2020-16589

OpenEXR 2.3.0 is affected by a head-based buffer overflow in writeTileData (ImfTiledOutputFile.cpp) that can cause a denial of service when processing crafted EXR files. This CVE is CVE-2020-16589. The vulnerability is documented in multiple sources within the connected documents (e.g., Astra Lin...

CVE-2020-22017

CVE-2020-22017 is a heap-based buffer overflow in FFmpeg 4.2 affecting ff_fill_rectangle in libavfilter/drawutils.c, leading to potential memory corruption. Public documents confirm the affected function/file and version; no specific patch/version remediation details are provided in the supplied ...

CVE-2021-37957

The CVE-2021-37957 entry concerns a Use-after-Free in WebGPU in Google Chrome before 94.0.4606.54, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected component: Chrome/WebGPU. Root cause: use-after-free in WebGPU code paths leading to heap corrupti...

CVE-2021-4058

CVE-2021-4058 describes a heap buffer overflow in ANGLE used by Google Chrome, prior to version 96.0.4664.93, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. The vulnerability affects Chrome’s ANGLE/WebGL/graphics handling path and has a high CVSS3.1 base s...

CVE-2021-43305

Summary : CVEs 2021-43304 and 2021-43305 describe heap/ buffer issues in ClickHouse’s LZ4 compression codec during parsing of crafted queries, due to unsafe copy bounds in LZ4::decompressImpl and the wildCopy function. The connected documents confirm a related set of advisories and mitigations ac...

CVE-2022-38648

CVE-2022-38648 is a Server-Side Request Forgery (SSRF) in Apache Batik (Apache XML Graphics Batik). Public docs confirm the issue affects Batik 1.14 and describes SSRF that can fetch external resources via Batik’s processing. Connected sources show fixes/mitigations across ecosystems: Debian LTS ...

CVE-2023-1821

CVE-2023-1821: A low-severity vulnerability in Google Chrome’s WebShare (Chromium) stems from an improper WebShare implementation, potentially allowing a remote attacker to hide the Omnibox (URL bar) contents via a crafted HTML page. Affected products are Google Chrome/Chromium-based browsers pri...

CVE-2023-1823

CVE-2023-1823 concerns Google Chrome's FedCM: an improper FedCM implementation allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product/component: Chrome/Chromium FedCM integration. Root cause: Inappropriate implementation in FedCM. Impact: navigation r...

CVE-2024-26820

CVE-2024-26820 affects the Linux kernel hv_netvsc driver. The issue occurs when the hv_netvsc module is unloaded and reloaded: the NET_DEVICE_REGISTER handler can fail to register a VF because the VF registration call arrives before netvsc_probe finishes, since register_netdevice_notifier() is re...

CVE-2024-49966

CVE-2024-49966 in the Linux kernel (OCFS2) fixes a bug where an active delayed work could remain when freeing oinfo after an error in global quota read, triggering a warning. The patch cancels the dqi_sync_work before freeing oinfo and changes the read_file_info error path to return a status inst...

CVE-2025-37829

CVE-2025-37829 affects the Linux kernel: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate(). The root cause is that cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in policy->cpus mask, and scpi_cpufreq_get_rate() does not handle this, causing a NULL pointer ...

CVE-2010-3450

CVE-2010-3450 is a vulnerability in OpenOffice.org 2.x/3.x up to 3.3 where a directory traversal flaw in handling of XSLT JAR filter descriptions and OpenOffice.org Extension (.oxt) files (and, in some listings, related JAR/ZIP entries) allows remote attackers to overwrite arbitrary files via a c...

CVE-2010-3451

CVE-2010-3451 is a use-after-free vulnerability in OpenOffice.org’s oowriter (OOo) 2.x and 3.x up to before 3.3. It allows remote attackers to crash the application or potentially execute arbitrary code via malformed tables in an RTF document. The issue arises from insecure parsing of RTF tables,...

CVE-2012-3990

CVE-2012-3990 is a use-after-free vulnerability in the IME State Manager implementation of Mozilla Firefox and related Mozilla products. Affected versions include Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before...

CVE-2013-0775

CVE-2013-0775 is a use-after-free vulnerability in Firefox’s image handling. Specifically, it concerns nsImageLoadingContent::OnStopContainer and affects Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16. ...

CVE-2014-0138

Technical details about CVE-2014-0138 are not provided in the supplied documents. The connected sources discuss related CVEs and curl issues, but do not specify affected products, versions, root cause, impact, or fixes for this CVE.

CVE-2014-1531

CVE-2014-1531 is a use-after-free vulnerability in Mozilla Firefox’s image handling. The flaw occurs in nsGenericHTMLElement::GetWidthHeightForImage during an image-resize operation and can be triggered via an imgLoader object, allowing remote attackers to cause heap memory corruption and potenti...

CVE-2014-2983

CVE-2014-2983 affects Drupal 6.x before 6.31 and 7.x before 7.27. The issue is an information disclosure where cached data from anonymous users is not properly isolated, potentially allowing remote anonymous users to access sensitive interim form input information in opportunistic scenarios via u...

CVE-2016-0546

CVE-2016-0546 is an unspecified vulnerability in Oracle MySQL Server components (Client) that, per vendor notes, could allow a local attacker to execute arbitrary code with elevated privileges due to a long name/buffer overflow in the mysqlshow utility. Affected: MySQL 5.5.46 and earlier, 5.6.27 ...

CVE-2016-2143

CVE-2016-2143 affects the Linux kernel, specifically the fork implementation on s390 platforms. The issue occurs when four page-table levels are used, which can allow a local unprivileged user to crash the system (DoS) or potentially cause other unspecified impacts via crafted applications, relat...

CVE-2017-6922

CVE-2017-6922 affects Drupal core 8.x < 8.3.4 and 7.x

CVE-2017-7375

CVE-2017-7375 describes a flaw in the libxml2 parser that allows remote XML entity inclusion when default parser flags are used (no substitution/validation/DTD loading). This XXE can cause access to local files or remote resources (HTTP/FTP) depending on context, potentially expanding the attacke...

CVE-2018-10540

CVE-2018-10540 affects WavPack up to version 5.1.0 (W64 input). The vulnerability arises from ParseWave64HeaderConfig not validating unknown chunk sizes before memory allocation, combined with a lack of integer-overflow protection in a bytes_to_copy calculation and the subsequent malloc, which ca...

CVE-2018-18359

CVE-2018-18359 affects chromium-browser/chromium before 71.0.3578.80. According to the Arch Linux ASA-201812-2 and Debian/Debian tracker entries, it is an information-disclosure vulnerability caused by an out-of-bounds read in the V8 JavaScript engine. Impact is that a remote attacker could acces...

CVE-2018-19492

CVE-2018-19492 affects Gnuplot 5.2.5 in the cairo.trm component, where a missing size check in cairotrm_options (triggered by the pngcairo terminal) permits a buffer overflow with an arbitrary amount of data. Reported impact includes potential denial of service or arbitrary code execution. The de...

CVE-2018-19970

Affected product: phpMyAdmin. Vulnerability: CVE-2018-19970 is a stored XSS in the navigation tree triggered by crafted database/table names in phpMyAdmin before version 4.8.4. Root cause: insufficient input handling in the navigation UI allows injecting script that can be executed in a user’s br...

CVE-2018-4117

CVE-2018-4117 is a cross-origin fetch vulnerability in WebKit that could allow a crafted web site to bypass Same Origin Policy and exfiltrate data. Public references indicate affected products include Apple’s iOS Safari, watchOS, iCloud for Windows, and iTunes on Windows, with WebKit underlies th...

CVE-2018-6073

CVE-2018-6073 is a WebGL heap-buffer overflow in Google Chrome before 65.0.3325.146 that allowed a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. The vulnerability is tied to the WebGL implementation in Chrome’s rendering stack. Debian security advisories list t...

CVE-2018-6574

Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before 1.10rc2 are vulnerable to remote command execution during source build via the go get workflow, by not blocking -fplugin/ -plugin usage in gcc/clang backends. A remote attacker hosting malicious repositories could trigger arb...

CVE-2019-14575

CVE-2019-14575 affects the EDK II firmware, describing a logic issue in DxeImageVerificationHandler() that may let an authenticated local user escalate privileges. The vulnerability is documented across multiple advisories (edk2 firmware references and related Nessus/Debian/DLA entries). The avai...

CVE-2021-28698

CVE-2021-28698 is described in CTX325319 as a Xen-related issue affecting Citrix Hypervisor where a malicious privileged code in a guest VM could cause host denial of service or host compromise, under conditions such as PCI passthrough with identity-mapped memory regions and multiple vCPUs. Citri...

CVE-2021-37958

CVE-2021-37958 affects Google Chrome/Chromium: Inappropriate implementation in Navigation on Windows before 94.0.4606.54 allows a remote attacker to inject scripts/HTML into a privileged page via a crafted HTML page. Connected sources reference Chrome/Chromium updates addressing this issue (e.g.,...

CVE-2021-37965

CVE-2021-37965 affects Google Chrome/Chromium’s Background Fetch API. The vulnerability stems from an inappropriate implementation, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The NVD records a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, no p...

CVE-2021-4057

CVE-2021-4057 is a use-after-free in Chromium’s file API prior to 96.0.4664.93. Multiple connected advisories describe it as allowing a remote attacker who gains renderer access to potentially trigger heap corruption. The vulnerability is among a set of Chromium issues fixed in version 96.0.4664....

CVE-2021-44648

CVE-2021-44648 affects GNOME gdk-pixbuf 2.42.6 with a heap-buffer overflow in the GIF lzw decoder when the minimum code size is 12. Connected advisories confirm the issue across multiple distributions and architectures. Exploitation details are not provided in the documents; the vulnerability can...

CVE-2022-23837

CVE-2022-23837 affects Sidekiq (api.rb): there is no limit on the number of days when requesting graph statistics, which can overload the system and render the Web UI unavailable. Concrete references in connected docs include Debian/DLA-4407-1 (ruby-sidekiq fix in 6.0.4+dfsg-2+deb11u1; also menti...

CVE-2022-26847

CVE-2022-26847 affects SPIP CMS: unauthenticated disclosure of information about editorial objects. Affected versions are SPIP 3.2.x before 3.2.14 and 4.x before 4.0.5. Root cause/reporting indicates information exposure without authentication. The vulnerability impacts information visibility rat...

CVE-2022-3886

CVE-2022-3886 is a use-after-free in Google Chrome’s Speech Recognition feature, prior to 107.0.5304.106, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. The Chrome update notes indicate this and other fixes in Stable Channel 107.x, with the CVE listed as ...

CVE-2022-3887

Use-after-free in Web Workers in Google Chrome prior to 107.0.5304.106 (CVE-2022-3887) allows remote heap corruption via crafted HTML. Affected: Google Chrome/Web Workers. Root cause: use-after-free in Web Workers (Chromium). Impact: High severity per Chrome/NVD. Remediation: Chrome Stable channe...

CVE-2023-1820

CVE-2023-1820 describes a heap buffer overflow in Google Chrome's Browser History (Chromium) before 112.0.5615.49. The issue allows a remote attacker to potentially corrupt the heap via a crafted HTML page when the user performs specific UI interactions. Affected product: Google Chrome/Chromium (...

CVE-2023-4356

CVE-2023-4356 describes a use-after-free in Audio for Google Chrome prior to 116.0.5845.96, enabling a remote attacker who induces user UI interaction to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, FreeBSD, Gentoo, Fedora, etc.) align on affected produc...

CVE-2023-6205

The connected sources corroborate CVE-2023-6205: a use-after-free involving MessagePort Entangled leads to an exploitable crash in Firefox and Thunderbird. Affected products include Firefox versions prior to 120 and Thunderbird prior to 115.5.0 (and ESR 115.5.0 lineage). The root cause is use-aft...

CVE-2024-35962

CVE-2024-35962 (Linux kernel): The issue is a netfilter input validation bug in the kernel’s user input handling. The vulnerability arises from do_replace() paths using copy_from_sockptr() followed by unsafe copy_from_sockptr_offset() calls, enabling insufficient validation of optlen against the ...

CVE-2025-37752

CVE-2025-37752 is a Linux kernel vulnerability affecting the scheduler, specifically net_sched: sch_sfq. The root cause is that limit validation could be bypassed if the limit was indirectly updated as other parameters changed. The fix moves the limit validation to the end of the configuration up...

CVE-2025-37840

CVE-2025-37840 concerns the Linux kernel MTD NAND code, specifically brcmnand, where a PM-resume path could trigger a WARN due to an uninitialized nand_operation that checks the chip select. The connected advisories confirm this as a fix: during platform suspend/resume, the code now calls a highe...

CVE-2014-1513

The CVE-2014-1513 issue affects Mozilla Firefox (and related Mozilla suite components) prior to version 28.0, and Firefox ESR 24.x prior to 24.4, with Firefox/SeaMonkey/Thunderbird affecting ArrayBuffer usage. Root cause: TypedArrayObject mishandles a zero-length transition during ArrayBuffer use...