CVE-2018-6083

CVE-2018-6083 affects Google Chrome and Chromium-based products due to an issue in AppManifests handling for CSP sandboxed pages, where the browser failed to disallow PWA installation from sandboxed contexts. The root cause is improper processing of AppManifests, enabling a remote attacker to acc...

CVE-2018-6123

CVE-2018-6123 is a use-after-free in Blink of Google Chrome prior to 67.0.3396.62, enabling a remote attacker to potentially corrupt the heap via a crafted HTML page. CNVD catalogs this Chrome/Blink memory misuse; Debian advisories note fixes in Chrome 67.0.3396.87 and later. Remediation: upgrade...

CVE-2018-7752

GPAC has a Buffer Overflow in MP4Box (gpac up to version 0.7.1) in media_tools/av_parsers.c (gf_media_avc_read_sps), associated with CVE-2018-7752 and related CVEs. Exploitation could occur via a crafted MP4 file, potentially enabling remote code execution. Mitigations are distribution-specific p...

CVE-2018-8004

CVE-2018-8004 affects Apache Traffic Server (ATS) and is due to HTTP smuggling and cache‑poisoning issues. The vulnerability impacts ATS versions 6.0.0–6.2.2 and 7.0.0–7.1.3, with fixed releases 6.2.3+ and 7.1.4+ recommended. Public sources describe multiple parsing flaws (e.g., header parsing in...

CVE-2019-13273

CVE-2019-13273 affects Xymon up to version 4.3.28, where the csvinfo CGI script contains a buffer overflow caused by a crafted GET request that triggers an sprintf on the srcdb parameter. This is a server-side vulnerability in the web interface (csvinfo.c) that can lead to memory corruption. The ...

CVE-2019-14459

CVE-2019-14459 affects nfdump up to version 1.6.17 and earlier. The issue is an integer overflow in Process_ipfix_template_withdraw (ipfix.c) that can be remotely triggered to crash the process (denial of service). Connected advisories indicate fixes in newer releases: Gentoo GLSA-202003-17 recom...

CVE-2019-16391

SPIP vulnerability CVE-2019-16391 affects SPIP 3.1.x and 3.2.x prior to fixed releases. The issue allows authenticated visitors to modify any published content and perform other database modifications via ecrire/inc/meta.php and ecrire/inc/securiser_action.php. Affected versions: SPIP before 3.1....

CVE-2019-9858

CVE-2019-9858 affects Horde Groupware Webmail (versions 5.2.22 and 5.2.17). The flaw is in Horde/Form/Type.php image upload handling: an unsanitized POST parameter object[photo][img][file] is used as the destination path for move_uploaded_file(), allowing an attacker to place a PHP file (e.g., vi...

CVE-2020-21688

CVE-2020-21688 describes a heap-use-after-free in FFmpeg’s libavutil/mem.c av_freep, affecting FFmpeg 4.2 and enabling arbitrary code execution under plausible conditions. Public references in connected documents indicate the issue pertains to FFmpeg 4.2, with surrounding advisories noting the vu...

CVE-2020-22046

CVE-2020-22046 affects FFmpeg 4.2 and is caused by a memory leak in avpriv_float_dsp_allocl (libavutil/float_dsp.c), enabling Denial of Service. Connected advisories confirm the issue and show vendor patches (e.g., Debian/OpenSUSE/SUSE advisories) with updated FFmpeg versions; no exploit details ...

CVE-2020-24361

CVE-2020-24361 affects SNMPTT versions prior to 1.4.2, enabling remote code execution via SNMP traps (EXEC, PREXEC, or unknown_trap_exec). Evidence across multiple sources ties the vulnerability to SNMPTT’s trap handling, with Debian and other advisories noting that upgrades to fixed packages (e....

CVE-2021-21215

CVE-2021-21215 affects Google Chrome Autofill: Inappropriately implemented Autofill allowed a remote attacker to spoof the security UI via a crafted HTML page (pre-90.0.4430.72). Concrete advisories across distributions confirm the issue in Chrome and Chromium-derived packages. Remediation: updat...

CVE-2021-37998

CVE-2021-37998 is a use-after-free vulnerability in the Garbage Collection component of the Chromium browser engine (Chrome) prior to 95.0.4638.69. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public recor...

CVE-2021-46142

The CVE concerns uriparser before 0.9.6, which performs invalid free operations in uriNormalizeSyntax. Connected advisories confirm this affects uriparser across multiple distributions and versions, with fixes provided in version 0.9.6 and later. Impact noted in Debian advisories includes potenti...

CVE-2022-24792

CVE-2022-24792 affects the PJSIP library (32-bit systems) and prior releases (up to 2.12). The issue arises when reading WAV file data chunks with lengths exceeding 31-bit integers, which can trigger a denial-of-service condition. The vulnerability does not affect 64-bit apps and may not impact a...

CVE-2022-26496

The CVE-2022-26496 issue affects nbd-server prior to 3.24, causing a stack-based buffer overflow when parsing the name field. An attacker can trigger the overflow by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with a large value for the name length, potentially leading to code execution ...

CVE-2022-3629

CVE-2022-3629 affects the Linux kernel’s vsock_connect in net/vmw_vsock/af_vsock.c, causing a memory leak. The issue is described as a local problem with low overall severity (CVSS 3.1: low, availability impact), and exploitation is not trivial but feasible locally. The primary remediation guidan...

CVE-2022-46329

CVE-2022-46329 involves protection mechanism failure in some Intel PROSet/Wireless/WiFi software that could allow a local attacker to escalate privileges. Public sources in the provided documents tie this CVE to linux-firmware updates for Power HMC and general Linux firmware packages, indicating ...

CVE-2023-37207

The provided connected documents confirm CVE-2023-37207 affects Firefox and Thunderbird (Firefox < 115, ESR < 102.13, Thunderbird

CVE-2023-46316

CVE-2023-46316 affects buc Traceroute 2.0.12 through 2.1.2; the wrapper scripts fail to parse command lines correctly, enabling local impact (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Public advisories/errata indicate the fix is to upgrade traceroute to version 2.1.3 or later (e.g., traceroute 2.1.3 ...

CVE-2023-46734

Symphony PHP framework vulnerability CVE-2023-46734: Some Twig filters in CodeExtension used is_safe=html without proper sanitization, allowing unsafe input. Affected versions: 2.0.0, 5.0.0, 6.0.0 and prior to 4.4.51, 5.4.31, 6.3.8. Fixes are in 4.4.51, 5.4.31, and 6.3.8 where output is now escap...

CVE-2023-50761

Affected software: Mozilla Thunderbird. Issue: S/MIME signature may be accepted despite mismatching signature creation date with message date/time, enabling impression of a different send date. Root cause: Thunderbird

CVE-2023-52617

CVE-2023-52617 : Linux kernel PCI: switchtec device crash on surprise hot-remove fixed. The issue occurred when a PCI device was hot-removed while stdev->cdev was open; stdev_release() ran after switchtec_pci_remove(), risking a fatal page fault in DMA mode and a stale dev pointer during dma_f...

CVE-2024-35819

CVE-2024-35819 affects the Linux kernel subsystem soc: fsl: qbman, where smp_call_function is used and can run callbacks in hard IRQ context; to prevent potential sleeping-task issues on PREEMPT_RT, the advisory specifies using a raw spinlock for cgr_lock. The root cause is that smp_call_function...

CVE-2024-35828

CVE-2024-35828 concerns the Linux kernel libertas WiFi code (lbs_allocate_cmd_buffer). In the for loop, if cmdarray[i].cmdbuf allocation fails, both cmdarray and cmdarray[i].cmdbuf must be freed, otherwise memory leaks occur in lbs_allocate_cmd_buffer(). The connected documents confirm a fix was ...

CVE-2024-44986

CVE-2024-44986 affects the Linux kernel IPv6 path. A use-after-free can occur in ip6_finish_output2() if skb_expand_head() returns NULL, potentially freeing skb and its dst/idev; the code must hold rcu_read_lock() to keep dst/idev alive. The provided connected documents confirm a kernel fix in th...

CVE-2025-23151

Technical details for CVE-2025-23151 are not provided in the connected documents. The initial description mentions a Linux kernel fix for an MHI bus/host race, but there are no specifics on affected products, vectors, or remediation in the supplied sources. Monitor for updates.

CVE-2025-37792

The CVE-2025-37792 issue affects the Linux kernel Bluetooth btrtl driver (rtl load file path). root cause: btrtl_initialize() may treat a zero-length rtl_load_file() as non-error, causing an error pointer vs NULL and a subsequent NULL dereference. Severity is MEDIUM (CVSSv3.1 base 5.5), with loca...

CVE-2025-37851

CVE-2025-37851 affects the Linux kernel fbdev omapfb path. The vulnerability centers on the dispc_ovl_setup function not handling the plane value OMAP_DSS_WB from the enum parameter plane. While that value is initialized in dss_init_overlays and in current code cannot take this value, some code p...

CVE-2025-37928

CVE-2025-37928 refers to a Linux kernel vulnerability in the dm-bufio path where scheduling in atomic context can occur when try_verify_in_tasklet is enabled and CONFIG_DEBUG_ATOMIC_SLEEP is set. The bug arises from sleeping in an invalid context, potentially enabling local privilege escalation o...

CVE-2007-4476

CVE-2007-4476 is a buffer overflow in the safer_name_suffix function of GNU tar that exposes a crashing stack. The supplied connected documents corroborate the issue within tar/cpio track records and list it alongside other related CVEs (e.g., CVE-2010-0624); no explicit patch versions or remedia...

CVE-2007-6427

CVE-2007-6427 affects the X.Org Xserver (XInput-Misc extension) prior to version 1.4.1. The root cause is missing input sanitising within the XInput‑Misc code, which can lead to local privilege escalation. In public advisories, this is described as a vulnerability in the XInput‑Misc path that all...

CVE-2010-3432

CVE-2010-3432 affects the Linux kernel SCTP stack: sctp_packet_config in net/sctp/output.c initializes packet data structures too aggressively in kernels before 2.6.35.6, enabling remote attackers to trigger a denial of service (panic) via a specific SCTP traffic sequence. Affected component: ker...

CVE-2010-3850

CVE-2010-3850: In the Linux kernel, the ec_dev_ioctl function in net/econet/af_econet.c did not require CAP_NET_ADMIN, allowing local users to bypass access restrictions and configure econet addresses via an SIOCSIFADDR ioctl. Documented impact is local privilege/unauthorized configuration; fix a...

CVE-2012-3982

CVE-2012-3982 affects Mozilla Firefox before 16.0, Firefox ESR before 10.0.8, Thunderbird before 16.0, Thunderbird ESR before 10.0.8, and SeaMonkey before 2.13. The description notes multiple unspecified vulnerabilities in the browser engine that can cause memory corruption and application crashe...

CVE-2013-0776

CVE-2013-0776 affects Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16. The flaw allows a man-in-the-middle attacker to spoof the address bar by using a proxy server that returns a 407 HTTP status...

CVE-2013-4475

CVE-2013-4475 affects Samba 3.2.x–3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1. When vfs_streams_depot or vfs_streams_xattr is enabled, an attacker can bypass file restrictions by exploiting ACL differences between a file and an associated alternate data stream (ADS). This is ...

CVE-2015-2041

CVE-2015-2041 affects Unity Linux kernels (20.1050e/20.1060e/20.1070e) where the Linux kernel before 3.19 contains an error in net/llc/sysctl_net_llc.c using an incorrect data type in a sysctl table. This local information-disclosure flaw allows an unprivileged local user to read potentially sens...

CVE-2015-3234

The vulnerability CVE-2015-3234 affects the Drupal OpenID module in Drupal 6.x (before 6.36) and 7.x (before 7.38). A remote attacker can authenticate as other users by presenting an OpenID identity from certain providers (e.g., Verisign, LiveJournal, StackExchange). Root cause: improper validati...

CVE-2015-8781

CVE-2015-8781 affects libtiff: tif_luv.c can trigger a denial of service via an out-of-bounds write when processing a LogL compressed TIFF image with an invalid number of samples per pixel. This is one of multiple libtiff flaws reported around 2015–2016. Connected sources document the issue and i...

CVE-2016-0505

CVE-2016-0505 is an unspecified vulnerability in Oracle MySQL Server and MariaDB that could allow a remote authenticated user to cause a denial of service via unknown vectors related to Options. Affected versions include MySQL 5.5.46 and earlier, 5.6.27 and earlier, 5.7.9 and MariaDB before 5.5.4...

CVE-2017-10978

FreeRADIUS is affected by CVE-2017-10978 (and related CVEs) with out-of-bounds memory handling in packet processing. The primary publicly documented issue for CVE-2017-10978 is an out-of-bounds read/write in make_secret() that can cause a crash and, in some disclosures, potential code execution, ...

CVE-2017-16527

CVE-2017-16527 affects the Linux kernel component sound/usb/mixer.c, vulnerable before version 4.13.8. A crafted USB device can trigger a snd_usb_mixer_interrupt use-after-free, causing denial of service or system crash. Exploitation vectors are local to physical USB device interaction. The conne...

CVE-2018-18340

CVE-2018-18340 affects Chromium/Google Chrome MediaRecorder. The vulnerability is a use-after-free in the MediaRecorder implementation, leading to potential heap corruption and remote code execution via a crafted HTML page. Affected version range is before 71.0.3578.80 (the fix version per upstre...

CVE-2018-6081

CVE-2018-6081 affects Google Chrome interstitials; a cross-site scripting flaw in Chrome prior to 65.0.3325.146 could be triggered by convincing a user to install a malicious extension or open Developer Console, via a crafted HTML page. Connected advisories confirm patches: Debian fixes in Chrome...

CVE-2018-6098

CVE-2018-6098 refers to a URL spoofing vulnerability in Google Chrome's URL Formatter caused by incorrect handling of confusable characters in IDN homographs. The issue affects Chrome prior to 66.0.3359.117, enabling a remote attacker to perform domain spoofing via a crafted domain name. The publ...

CVE-2018-6166

CVE-2018-6166: Google Chrome (Omnibox/URL Formatter) contains a URL spoofing vulnerability due to incorrect handling of confusable characters, enabling domain spoofing via IDN homographs. Affects Chrome up to 68.0.3440.75; fixed in 68.0.3440.75 (Chromium) with security updates across distribution...

CVE-2020-20450

CVE-2020-20450: FFmpeg 4.2 is affected by a null pointer dereference in libavformat/aviobuf.c, leading to Denial of Service. The vulnerability targets FFmpeg’s handling of AVI/aviobuf, with a null pointer dereference as the underlying cause. Affected products are FFmpeg 4.2 and related builds; se...

CVE-2020-9355

NetworkManager-ssh (the plugin for NetworkManager) is affected by CVE-2020-9355. Vulnerable component: network-manager-ssh before 1.2.11; root cause is mishandling of extra SSH options, enabling privilege escalation by a local user who can modify a connection. Impact per sources: local privilege ...

CVE-2021-36773

CVE-2021-36773 affects the browser extensions uBlock Origin (before 1.36.2) and nMatrix (before 4.4.9). The vulnerability arises from allowing an arbitrary depth of parameter nesting in strict blocking, which can be exploited by crafted websites to trigger unbounded recursion, resulting in memory...