CVE-2018-6071

CVE-2018-6071 is a heap/buffer overflow in Skia used by Google Chrome (pre-65.0.3325.146). Connected sources confirm a Skia-related overflow that could trigger an out-of-bounds memory access via a crafted HTML page. Affected context appears in Chrome/Chromium release notes and Debian/Gentoo advis...

CVE-2018-6141

Summary: Google Chrome's Skia image filter had insufficient validation that could allow a remote attacker with renderer access to perform an out-of-bounds memory read via a crafted HTML page. Affected versions are before 67.0.3396.62; the issue is resolved in 67.0.3396.62+.

CVE-2018-6179

CVE-2018-6179 is a Google Chrome/Chromium extension vulnerability: insufficient enforcement of file access permission in the activeTab case allowed a malicious extension to read local files. Affected version range is Chrome/Chromium prior to 68.0.3440.75. Impact described in sources as a local fi...

CVE-2019-10064

CVE-2019-10064 affects hostapd prior to 2.6 in EAP mode, where rand() and random() are invoked without a preceding srand()/srandom(), leading to deterministic values. This behavior is described as an inappropriate use of randomness and is fixed in conjunction with CVE-2016-10743. Public reference...

CVE-2019-11010

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by CVE-2019-11010 due to a memory leak in ReadMPCImage (coders/mpc.c), enabling denial of service via a crafted image. Public records in multiple advisories confirm this issue alongside related CVEs (e.g., 11005–11009, 11473–11474) affecting SVG...

CVE-2019-16393

CVE-2019-16393 affects SPIP web CMS: versions 3.1.x before 3.1.11 and 3.2.x before 3.2.5 mishandle redirect URLs in ecrire/inc/headers.php when encountering %0D, %0A, or %20 characters. Root cause is improper handling of redirect URLs, as described in multiple advisories. Practical impact details...

CVE-2019-16729

CVE-2019-16729 affects pam-python prior to 1.0.7-1, where mishandling of environment variables in Python within PAM could allow a local user to escalate to root in affected PAM configurations. The issue is documented in Ubuntu USN advisories (USN-4552-1/2/3) and related OSS advisories, with Ubunt...

CVE-2020-13881

CVE-2020-13881 affects pam_tacplus where the TACACS+ shared secret is logged via journald/syslog when DEBUG is enabled. The initial description notes logging of the shared secret for versions 1.3.8–1.5.1. Connected advisories confirm affected packages and provide remediation: Debian/Ubuntu adviso...

CVE-2020-21697

The CVE-2020-21697 entry concerns FFmpeg 4.2 with a heap-use-after-free in libavformat/mpegenc.c (mpeg_mux_write_packet) that allows denial of service via a crafted AVI file. Connected advisories confirm the issue in FFmpeg 4.2 and reference mitigations/upgrades (e.g., Ubuntu USN entries and Debi...

CVE-2021-28700

Summary: CVE-2021-28700 affects the Xen hypervisor, specifically the dom0less domU path on ARM, where the memory limit for unprivileged domains is not set. This can allow a domain to allocate more memory than configured. The issue is listed among Xen vulnerabilities (XSA-383) and appears in multi...

CVE-2021-4213

CVE-2021-4213 is a memory-leak flaw in JSS (and related PKI components like pki-core/jss) that can cause server memory to gradually exhaust RAM, enabling a denial-of-service via out-of-memory conditions. Publicly documented in multiple advisories and Nessus detections across distros (Alibaba Clou...

CVE-2021-45079

Summary: CVE-2021-45079 affects strongSwan prior to 5.9.5. A malicious responder can send an EAP-Success message before proper authentication, and in EAP methods with mutual authentication and EAP-only authentication for IKEv2, potentially bypassing server authentication. What is affected: strong...

CVE-2024-46849

CVE-2024-46849 — Linux kernel (ASoC: meson axg-card)Use-after-Free in axg_card_add_link Root cause: during axg-card link handling, buffer card->dai_link is reallocated in meson_card_reallocate_links(); this leads to a use-after-free if pad is initialized before memory is reallocated. The fix m...

CVE-2025-23159

CVE-2025-23159 affects the Linux kernel media/venus/hfi component. The issue arises from sfr->buf_size stored in shared memory being modifiable by a local attacker, allowing an out-of-bounds write when the size exceeds the actual SFR data. The fix caps the reported size to the allocated SFR bu...

CVE-2025-37749

CVE-2025-37749 concerns a Linux kernel vulnerability in the PPP stack. The issue stemmed from insufficient bounds checking on skb data in ppp_sync_txmung, risking out-of-bounds reads when processing short packets. The fixed description states that there must be enough data in the skb linear buffe...

CVE-2025-37778

CVE-2025-37778 is a Linux kernel vulnerability in ksmbd’s krb_authenticate path. The root cause is a use-after-free: krb_authenticate frees sess->user and may not NULL it; if ksmbd_krb5_authenticate does not reinitialize sess->user, smb2_sess_setup may later access freed memory. Several adv...

CVE-2014-0451

CVE-2014-0451 is described as an unspecified vulnerability in Oracle Java SE affecting AWT, with partial confidentiality, integrity, and availability impacts. The initial description lists affected products as Oracle Java SE 5.0u61, 6u71, 7u51, 8, and Java SE Embedded 7u51, indicating a remote-at...

CVE-2014-3144

CVE-2014-3144 affects the Linux kernel up to 3.14.3. The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST implementations in the sk_run_filter function (net/core/filter.c) do not properly verify a length value, enabling a local attacker to trigger a denial of service via crafted BPF instruction...

CVE-2014-4260

CVE-2014-4260 is reported in MariaDB/MySQL contexts as an unspecified vulnerability in the MySQL Server component (SRCHAR vectors) that allows remote authenticated users to affect integrity and availability. Public details in the connected documents indicate MariaDB versions prior to 5.5.38 are a...

CVE-2015-5707

CVE-2015-5707 affects the Linux kernel sg.c sg_start_req function (drivers/scsi/sg.c) where an integer overflow can occur in write requests with a large iov_count, allowing a local attacker to cause a denial of service or potentially other impact on kernel memory. Affected are kernel versions 2.6...

CVE-2016-1833

CVE-2016-1833 is a libxml2 memory corruption issue where the htmlCurrentChar function can cause a heap-based buffer over-read during parsing of crafted XML. Public details in connected docs indicate affected platforms include Apple iOS, macOS, tvOS, watchOS and related libxml2 usage, with version...

CVE-2016-2098

CVE-2016-2098 affects Ruby on Rails Action Pack render usage. Affected: ActionPack in Rails before 3.2.22.2, Rails 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2. Root cause: unrestricted/unsafe use of the render method allowing attacker-controlled arguments, enabling remote code execution of Ruby...

CVE-2016-2857

CVE-2016-2857 is a QEMU vulnerability in the IP checksum routines: the net_checksum_calculate function in net/checksum.c permits local (guest) users to trigger an out-of-bounds heap read, crashing the QEMU process via a crafted packet payload length. Multiple Nessus/MIRACLE-Linux advisories refer...

CVE-2017-0379

CVE-2017-0379 affects libgcrypt before 1.8.1, where Curve25519 side-channel attacks could allow a local attacker to recover a secret key. Public advisories indicate the flaw in cipher/ecc.c and mpi/ec.c can enable private-key recovery on multi-user systems or VMs. Remediation is to upgrade to lib...

CVE-2017-12597

OpenCV Open Source Computer Vision Library (

CVE-2017-15132

CVE-2017-15132 affects Dovecot: memory-leak in the login auth client when SASL authentication is aborted, in dovecot versions 2.0 up to 2.2.33 and 2.3.0.1 (and earlier per several advisories). Impact is memory exhaustion that can crash high‑performance login processes. Remediation across referenc...

CVE-2017-16227

The CVE-2017-16227 issue affects Quagga’s bgpd aspath_put handling of multi-segment AS_PATH UPDATE messages. In Quagga builds prior to 1.2.2, AS_PATH length calculation can double-count certain bytes, producing an invalid BGP UPDATE and allowing a remote attacker to terminate or disrupt existing ...

CVE-2017-7957

CVE-2017-7957 arises from XStream up to version 1.4.9 mishandling attempts to create an instance of the primitive type void during unmarshalling, which can cause a remote application crash when unmarshalling . The vulnerability is documented across multiple sources (e.g., Nessus/IBM/Guardium bull...

CVE-2017-9065

CVE-2017-9065 affects WordPress

CVE-2018-10756

Transmission prior to version 3.00 contains a use-after-free in libtransmission/variant.c that can be triggered by a crafted torrent file, allowing a remote attacker to cause a crash or potentially execute arbitrary code. The vulnerability affects the downloader’s handling of torrent data and cou...

CVE-2018-11529

VLC media player 2.2.x is affected by a use-after-free vulnerability in the MP4 demuxer that can be triggered by crafted MKV files, enabling arbitrary code execution. In the documented exploitchain, VLC 2.2.8 (and earlier 2.2.x) is at risk, with failures potentially causing denial of service. The...

CVE-2018-18346

CVE-2018-18346 affects Chromium/Google Chrome before 71.0.3578.80. Reported as an incorrect security UI issue in Blink, enabling a crafted HTML page to cause a confusing browser UI. The Arch Linux advisory confirms the issue set includes CVE-2018-18346 and recommends upgrading to 71.0.3578.80 or ...

CVE-2018-19200

CVE-2018-19200 affects the uriparser library prior to 0.9.0. The vulnerability arises from UriCommon.c handling NULL input, allowing an operation on NULL input via a uriResetUri* function. Public advisories indicate this has been fixed in uriparser 0.9.0 and related security updates across severa...

CVE-2018-5178

CVE-2018-5178: A buffer overflow during UTF-8 to Unicode string conversion in JavaScript can occur when a vulnerable legacy extension is used. Affected products include Thunderbird ESR and Firefox ESR up to version 52.8 (ESR branches); Thunderbrid/Firefox ESR

CVE-2018-6092

The CVE-2018-6092 entry relates to an integer overflow in Chrome’s WebAssembly implementation on 32‑bit systems, allowing remote code execution inside the sandbox via a crafted HTML page. Affected software from the connected advisories includes Google Chrome/Chromium up to version 66.0.3359.117 (...

CVE-2019-1000018

CVE-2019-1000018 affects rssh 2.3.4, where allowscp permits CWE-77 (Command Injection) leading to Local command execution. Exploitation is possible by an authorized SSH user with allowscp. Deb‑pack records note a fix version (Debian: 2.3.4-5+deb9u4); Alpine doc confirms the issue. No wider exploi...

CVE-2019-16394

SPIP (website engine) versions affected: 3.1.x prior to 3.1.11 and 3.2.x prior to 3.2.5. The issue is in the password reminder flow, where error messages differ depending on whether the provided e-mail exists, enabling potential user enumeration of subscribers. Root cause: non-homogeneous handlin...

CVE-2020-35176

AWStats vulnerability CVE-2020-35176 affects AWStats up to version 7.8, where cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting /etc), enabling directory traversal and potential filesystem access. Root cause cited as an incomplete fix for CVE-2017-1000501 and CVE-2020-29600...

CVE-2020-7105

CVE-2020-7105 concerns the hiredis C client. Concrete details across connected docs show the vulnerability in the library: async.c and dict.c within libhiredis.a (hiredis up to 0.14.0) allow a NULL pointer dereference due to unchecked malloc return values. Impact described as potential crash/deni...

CVE-2020-9359

Summary: CVE-2020-9359 affects KDE Okular prior to 1.10.0, enabling code execution through specially crafted PDF action links. Multiple advisories confirm local/remote code execution potential depending on the vendor and version. Impact notes (per sources): CentOS/Red Hat mentions local binary ex...

CVE-2021-26119

CVE-2021-26119 affects Smarty before 3.1.39. The vulnerability allows a Sandbox Escape because the $smarty.template_object can be accessed in sandbox mode, enabling potential escalation of privileges within PHP templates. Supported by multiple advisories (Debian/Mageia/GHSA) confirming the fix in...

CVE-2021-38015

CVE-2021-38015 affects the Chromium-based browser engine. The provided security advisories describe an inappropriate implementation in the input handling of Chromium (prior to 96.0.4664.45) that could allow a user-assisted attacker who persuades a user to install a malicious extension to bypass n...

CVE-2021-44538

CVE-2021-44538: The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object state is partially controllable by the remote party; crafted messages can manipulate the receiver’s session so that, for some buffer sizes, a buffer overflow ...

CVE-2022-24793

CVE-2022-24793 affects PJSIP’s DNS resolver. A buffer overflow is triggered in parsing the query record (parse_rr) for versions ≤ 2.12. A fix exists in the pjproject master branch; a workaround is to disable DNS resolution in PJSIP (set nameserver_count to 0) or use an external resolver. The issu...

CVE-2022-29500

The CVE-2022-29500 family affects SchedMD Slurm 21.08.x through 20.11.x, with root cause identified as Incorrect Access Control that leads to Information Disclosure. Related CVEs (CVE-2022-29501 and CVE-2022-29502) involve escalation of privileges and potential data exposure or code execution via...

CVE-2024-26635

CVE-2024-26635 affects the Linux kernel LLС path. The issue arises from legacy support for ETH_P_TR_802_2 in 802.2 LLC handling, where llc_conn_handler/llc_pdu_decode paths initialized saddr/daddr.mac only for ETH_P_802_2, causing reads of garbage in other protocols (e.g., ETH_P_TR_802_2). The bu...

CVE-2024-35811

In the Linux kernel, the wifi brcmfmac driver is affected by a use-after-free in brcmf_cfg80211_detach, triggered when a hotplug USB disconnect allows a escan_timeout_work to still run after cfg is freed. The issue is tied to the escan_timeout_work timer being active during detach. The fix patche...

CVE-2025-23142

CVE-2025-23142 details are not provided in the supplied documents; monitor for updates.

CVE-2025-37769

CVE-2025-37769 (Linux kernel): A division-by-zero condition exists in the DRM AMD SMU11 path (drm/amd/pm/smu11) when a user sets a speed value greater than UINT_MAX/8. The vulnerability is fixed in the kernel by a commit cherry-picked from da7dc714a8f8e1c9fc33c57cd63583779a3bef71, as reported by ...

CVE-2025-37841

CVE-2025-37841: In the Linux kernel, the vulnerability affects the pm: cpupower: bench path. If malloc returns NULL due to low memory, the config pointer can be NULL, leading to a NULL dereference. The issue has a tracked fix described as adding a NULL check to prevent dereferencing config when m...