CVE-2025-37865

CVE-2025-37865 affects Linux kernel net: dsa mv88e6xxx code. The bug arises when deleting VLANs on devices where MST is unsupported: mv88e6xxx_port_vlan_leave() calls mv88e6xxx_mst_put() which looks up an MST entry by sid. If the vtu/vlan population path fails to populate vlan.sid, a stale or zer...

CVE-2021-37982

CVE-2021-37982 is a use-after-free in the Incognito component of the Chromium browser engine before version 95.0.4638.54. The issue could allow an attacker to trigger arbitrary code execution via crafted HTML content; affected products cite Chromium-based browsers (e.g., Google Chrome/Chromium) b...

CVE-2024-35962

CVE-2024-35962 (Linux kernel): The issue is a netfilter input validation bug in the kernel’s user input handling. The vulnerability arises from do_replace() paths using copy_from_sockptr() followed by unsafe copy_from_sockptr_offset() calls, enabling insufficient validation of optlen against the ...

CVE-2025-37752

CVE-2025-37752 is a Linux kernel vulnerability affecting the scheduler, specifically net_sched: sch_sfq. The root cause is that limit validation could be bypassed if the limit was indirectly updated as other parameters changed. The fix moves the limit validation to the end of the configuration up...

CVE-2025-37840

CVE-2025-37840 concerns the Linux kernel MTD NAND code, specifically brcmnand, where a PM-resume path could trigger a WARN due to an uninitialized nand_operation that checks the chip select. The connected advisories confirm this as a fix: during platform suspend/resume, the code now calls a highe...

CVE-2014-1513

The CVE-2014-1513 issue affects Mozilla Firefox (and related Mozilla suite components) prior to version 28.0, and Firefox ESR 24.x prior to 24.4, with Firefox/SeaMonkey/Thunderbird affecting ArrayBuffer usage. Root cause: TypedArrayObject mishandles a zero-length transition during ArrayBuffer use...

CVE-2014-3690

CVE-2014-3690 affects arch/x86/kvm/vmx.c in the Linux kernel’s KVM subsystem on Intel, where the CR4 control register value may not be preserved across VM entries. The vendor-provided details in connected Nessus advisories describe a local attacker with access to /dev/kvm who can kill arbitrary p...

CVE-2014-4342

CVE-2014-4342 affects MIT Kerberos 5 (krb5) 1.7.x through 1.12.x before 1.12.2. The vulnerability arises in GSSAPI session handling: remote injection of invalid tokens can trigger a buffer over-read or NULL pointer dereference, causing the targeted application to crash (DoS). Affected records in ...

CVE-2015-2575

CVE-2015-2575 is described in connected docs as an unspecified vulnerability in Oracle MySQL Connector/J (MySQL Connectors component) affecting MySQL 5.1.34 and earlier, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. The connected materials do not...

CVE-2015-4830

CVE-2015-4830 corresponds to an unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier. The description states remote authenticated users can affect integrity via unknown vectors related to Server:Security:Privileges. Connected documents (F5/K59010802 advisory,...

CVE-2015-4861

CVE-2015-4861 is an unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, that allows remote authenticated users to affect availability via unknown InnoDB-related vectors. The connected advisories confirm this CVE among multiple MySQL-related flaws and indic...

CVE-2015-5146

CVE-2015-5146 affects ntpd up to version 4.2.8p3 when remote configuration is enabled. An authenticated attacker with knowledge of the configuration password and access to a machine entrusted to perform remote configuration can crash ntpd by sending a crafted configuration directive packet contai...

CVE-2015-8317

CVE-2015-8317 affects libxml2 prior to 2.9.3. The vulnerability arises in xmlParseXMLDecl in parser.c, where an unterminated encoding value or an incomplete XML declaration can trigger an out-of-bounds heap read, potentially exposing sensitive information. Public references include vendor advisor...

CVE-2017-10806

Technical details about CVE-2017-10806 are not publicly provided in the supplied connected documents. The initial description is the only concrete detail available; monitor for updates from vendors/security advisories.

CVE-2017-13723

CVE-2017-13723 affects X.Org Server (xorg-server) prior to 1.19.4. A local attacker authenticated to the X server can overflow a global buffer via injecting large or malformed XKB atoms and accessing them through xkbcomp, leading to crashes and potential privilege elevation when run as root. Docu...

CVE-2017-16353

GraphicsMagick 1.3.26 is affected by a memory information disclosure due to a heap-based buffer over-read in DescribeImage (magick/describe.c) when printing IPTC Profile data. The vulnerability can be triggered by a specially crafted MIFF file and involves an out-of-bounds buffer dereference beca...

CVE-2017-17434

The CVE-2017-17434 issue affects rsync 3.1.2 and 3.1.3-development prior to 2017-12-03. The daemon can bypass access restrictions by not checking fnamecmp filenames in daemon_filter_list and by not applying sanitize_paths to pathnames in "xname follows" strings (read_ndx_and_attrs in rsync.c). Re...

CVE-2017-5973

Technical details about CVE-2017-5973 are not publicly provided in the connected documents. Available records reference QEMU's xhci_kick_epctx vulnerability but do not expose deeper data (affected versions, exploit info, or fixes). Monitor for updates.

CVE-2017-7830

CVE-2017-7830 involves a cross-origin information disclosure through the Resource Timing API that could reveal navigations loaded in iframes, constituting a same-origin policy violation. Public documentation in Debian and CVE databases tie this to WebKit-related handling in Safari/WebKit componen...

CVE-2018-17468

CVE-2018-17468 affects Chromium/Google Chrome Blink prior to 70.0.3538.67. The issue is an information-disclosure in Blink during navigation caused by incorrect handling of timer information, allowing a remote attacker to obtain cross-origin URLs. Affected components: Blink in Chromium/Chrome bef...

CVE-2018-6120

CVE-2018-6120 affects Google Chrome’s PDFium component. An integer overflow could cause a heap out-of-bounds write in PDFium, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted PDF file. Affected version: Chrome prior to 66.0.3359.170. Remediation: upgrade ...

CVE-2019-1010301

CVE-2019-1010301 is a vulnerability in jhead where a crafted JPEG can trigger a buffer overflow in the GPS info handling (gpsinfo.c) leading to a DoS. Several connected advisories note the issue across distros (e.g., Ubuntu/Debian openSUSE/Gentoo/MS). Remediation observed in multiple advisories i...

CVE-2019-10732

CVE-2019-10732 affects KDE PIM’s messagelib/KMail: an attacker who has S/MIME or PGP encrypted emails can wrap the ciphertext in a crafted multipart message; by hiding parts with HTML/CSS or newline tricks, the attacker can cause the recipient to leak plaintext back when replying. Connected advis...

CVE-2019-7165

CVE-2019-7165 affects the DOSBox emulator (vulnerable component: parsing of long lines in bat files) and allows arbitrary code execution. Public sources across multiple distros confirm the issue alongside CVE-2019-12594, with fixes implemented in newer DOSBox releases (e.g., 0.74-3 and later). Af...

CVE-2020-17510

CVE-2020-17510 affects Apache Shiro software prior to version 1.7.0 when used with Spring. A specially crafted HTTP request can trigger an authentication bypass, allowing bypass of access restrictions. The vulnerability is categorized with a high to critical impact depending on the score, with ne...

CVE-2021-28695

CVE-2021-28695 affects the Xen hypervisor (IOMMU page mapping) on AMD systems. The issue arises when firmware specifies discontinuous memory ranges that are identity-mapped during translation, allowing a guest to retain access to memory ranges it should not access after device de-assignment. Docu...

CVE-2021-28696

CVE-2021-28696 affects the Xen hypervisor. The issue arises from IOMMU identity mappings defined in ACPI for devices assigned to a guest: when a device is de-allocated from a guest, the identity mappings can be left in place, allowing the guest continued access to memory ranges it should no longe...

CVE-2021-28706

CVE-2021-28706 affects the Xen hypervisor memory management: when a guest can approach 16 TiB, a 32-bit precision overflow in the memory-allocation calculation may allow the guest to bypass an administrator-set limit by miscomputing the compared value. The vulnerability enables memory expansion b...

CVE-2021-4078

The CVE-2021-4078 entry pertains to Google Chrome/V8 with a type-confusion vulnerability in V8 that was present in Chrome up to version 96.0.4664.93. The underlying issue is described as a type confusion in V8, which could allow a remote attacker to potentially trigger heap corruption via a craft...

CVE-2022-23518

The CVE-2022-23518 entry concerns rails-html-sanitizer, a Ruby/Rails HTML sanitizer. Multiple connected advisories confirm that versions 1.0.3 through 1.4.3 are vulnerable to cross-site scripting via data URIs when used with Loofah ≥ 2.1.0, with the issue described as an improper neutralization o...

CVE-2022-31042

Guzzle CVE-2022-31042 affects the handling of Cookie headers during redirects (https→http or host changes). The issue was fixed by stripping cookies on redirects and re-adding only safe cookies via the cookie middleware. Affected versions require upgrades: Guzzle 7 should move to 7.4.4 or later, ...

CVE-2022-31043

CVE-2022-31043 affects the PHP HTTP client Guzzle . The vulnerability arises when a request uses HTTPS and the server redirects to an HTTP URI, causing the Authorization header to be forwarded when it should be stripped. Prior fixes removed the header for host changes but not for scheme changes, ...

CVE-2022-42823

CVE-2022-42823 describes a type confusion vulnerability in WebKit (affecting WebKitGTK/WebKit2GTK and related WebKit variants) that could allow arbitrary code execution when processing maliciously crafted web content. The issue is addressed by memory-management improvements and fixes are listed f...

CVE-2022-42824

CVE-2022-42824 is a WebKitGTK/WebKit runtime logic issue that may disclose sensitive user information when processing malicious web content. The connected advisories confirm WebKitGTK/WebKitGTK-related fixes (CVE-2022-42824) across multiple distributions: Debian DLA-3183-1 and DSA-5274-1 for wpew...

CVE-2022-45442

Sinatra (Ruby) suffers a reflected file download (RFD) vulnerability where a response’s Content-Disposition header is derived from user-supplied input. Affected versions are 2.0.x before 2.2.3 and 3.0.x before 3.0.4; patches exist in 2.2.3 and 3.0.4. Remediation is to upgrade to those fixed relea...

CVE-2023-52880

CVE-2023-52880 is a Linux kernel flaw where attaching the N_GSM0710 line discipline can be performed by an unprivileged user only after CAP_NET_ADMIN has been requested to create GSM networking. The initial namespaceCAP_NET_ADMIN is also required to proceed with the attachment. Several connected ...

CVE-2024-46821

CVE-2024-46821 (Linux kernel, drm/amd/pm) affects the Linux kernel’s AMD power management code where a negative clk_index/clk_idex was used as an index into pptable->DpmDescriptor, leading to a negative array index read. The issue is resolved by a fix that prevents using negative values as an ...

CVE-2025-23145

Summary (CVE-2025-23145) : Linux kernel MPTCP component fix for a NULL pointer dereference in can_accept_new_subflow when subflow_req->msk is NULL. The issue could occur when a SYN-ACK is received twice in quick succession and the ownership of subflow_req->msk is transferred to the first su...

CVE-2012-1972

CVE-2012-1972 is a use-after-free in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox, with remote code execution/denial of service via heap memory corruption. Affected products/versions include Firefox prior to 15.0, Firefox ESR 10.x prior to 10.0.7, and Thunderbird prior ...

CVE-2015-2830

CVE-2015-2830 affects the Linux kernel (arch/x86/kernel/entry_64.S) prior to 3.19.2. The TS_COMPAT flag can reach a user-mode task, potentially allowing local attackers to bypass seccomp or audit protections via crafted applications using fork or close. A fix is available in 3.19.2 and later; att...

CVE-2015-4816

CVE-2015-4816 affects Oracle MySQL Server 5.5.44 and earlier, where an unspecified InnoDB-related vulnerability allows remote authenticated users to affect availability via unknown vectors. The MiracleLinux advisories/NESSUS plugins reference CVE-2015-4816 among a broader set of MySQL/MariaDB iss...

CVE-2016-0642

CVE-2016-0642 affects Oracle MySQL Server releases prior to 5.5.49/5.6.30/5.7.x (as cited in multiple advisories). Description: an unspecified vulnerability in the Federated component may lead to integrity and availability impact for local users. Connected sources confirm affected versions (5.5.4...

CVE-2017-12176

The CVE-2017-12176 issue affects xorg-server prior to version 1.19.5. It stems from missing extra length validation in ProcEstablishConnection, enabling a malicious X client to crash the X server and potentially execute arbitrary code. Documents from Debian, Arch Linux, and other vendors (e.g., D...

CVE-2017-12607

CVE-2017-12607 affects OpenOffice/OpenOffice.org and specifically the PPT file parser’s PPTStyleSheet. A crafted PPT document can trigger memory corruption and an application crash, with potential for arbitrary code execution. Vulnerable: OpenOffice prior to 4.1.4. Mitigation: upgrade to a fixed ...

CVE-2017-16526

CVE-2017-16526 affects the Linux kernel driver code drivers/uwb/uwbd.c up to version 4.13.5; a crafted USB device could trigger a general protection fault and system crash via local access, potentially causing denial of service or other impact. The connected Unity Linux advisories (UTSA-2026-0016...

CVE-2017-17833

OpenSLP CVE-2017-17833 is a heap-related memory corruption vulnerability in OpenSLP 1.0.2 and 1.1.0 (slpd/slpd_process.c) that may cause denial of service or remote code execution. Public details appear in multiple advisories: Debian fixes to openslp-dfsg 1.2.1-10+deb8u2; Red Hat/CentOS advisorie...

CVE-2018-16511

Artifex Ghostscript (pre-9.24) is vulnerable to a type confusion in ztype that remote attackers can exploit via crafted PostScript to crash the interpreter (possible other impact). The CVE entry for CVE-2018-16511 is supported by multiple advisories; remediation is to update Ghostscript to a newe...

CVE-2018-18336

CVE-2018-18336 is a use-after-free in the PDFium component of Chromium/Google Chrome prior to version 71.0.3578.80, enabling potential heap corruption via a crafted PDF file. The Arch Linux security advisory ASA-201812-2 (and Debian/DSA-4352-1 apart from other sources) confirm the issue and state...

CVE-2018-20184

GraphicsMagick 1.4 snapshot-20181209 Q8 contains a heap-based buffer overflow in the WriteTGAImage function (tga.c) when processing TGA files. The overflow arises because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA spec, enabling a crafted image to trigger...

CVE-2018-2766

CVE-2018-2766 affects the MySQL Server component (InnoDB) and can lead to a complete DoS via network access. Affected versions per the initial data are MySQL 5.6.39 and earlier and 5.7.21 and earlier. Several connected advisories reference this CVE (e.g., Debian security notices, F5 advisory) but...