CVE-2017-10978

FreeRADIUS is affected by CVE-2017-10978 (and related CVEs) with out-of-bounds memory handling in packet processing. The primary publicly documented issue for CVE-2017-10978 is an out-of-bounds read/write in make_secret() that can cause a crash and, in some disclosures, potential code execution, ...

CVE-2017-12987

tcpdump before 4.9.2 contains a buffer over-read in print-802_11.c:parse_elements(), affecting the IEEE 802.11 parser and enabling possible information disclosure. The CVE is CVE-2017-12987. Public sources describe the issue as a memory overread that could leak sensitive data from the affected pa...

CVE-2017-16532

CVE-2017-16532: A vulnerability in the Linux kernel ≤ 4.13.11 affects the get_endpoints function in drivers/usb/misc/usbtest.c, enabling local users to trigger a denial of service via a crafted USB device, through a NULL pointer dereference and potential system crash. The issue is triggered by a ...

CVE-2017-5193

CVE-2017-5193 targets Irssi. The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service via a message lacking a nick, via a NULL pointer dereference that crashes the application. Affected versions are

CVE-2018-11468

CVE-2018-11468 concerns the DISCOUNT Markdown engine (DISCOUNT 2.2.3a) where the __mkd_trim_line function in mkdio.c within libmarkdown.a is vulnerable to a heap-based buffer over-read via a crafted file, enabling a Denial of Service. Public advisories across distributions confirm the affected co...

CVE-2018-17471

CVE-2018-17471 affects Google Chrome/Chromium before 70.0.3538.67, due to a WebContents full-screen UI issue that could enable content spoofing or UI occlusion. Debian and Arch Linux advisories (DSA-4330-1, ASA-201810-12) confirm a remediation by upgrading to 70.0.3538.67-1 (Chromium). Other repo...

CVE-2018-18339

CVE-2018-18339 affects Chromium/Google Chrome where a use-after-free in the WebAudio implementation (before 71.0.3578.80) can lead to remote code execution via crafted HTML pages. Arch Linux notes the fix is in Chromium 71.0.3578.80-1 (upgrade recommended). Other sources corroborate the vulnerabi...

CVE-2018-18541

Teeworlds vulnerability CVE-2018-18541 affects versions before 0.6.5, where connection packets could be forged due to lack of a challenge–response during connection setup. A remote attacker could spoof a IP to occupy all server slots or perform reflection attacks using map download packets. The i...

CVE-2018-6080

CVE-2018-6080 is an information-disclosure vulnerability in Google Chrome (Chromium base) where lack of access-control checks in Instrumentation allowed a renderer-compromised attacker to obtain memory metadata from privileged processes. The issue affects Chrome prior to 65.0.3325.146 and was cat...

CVE-2018-7752

GPAC has a Buffer Overflow in MP4Box (gpac up to version 0.7.1) in media_tools/av_parsers.c (gf_media_avc_read_sps), associated with CVE-2018-7752 and related CVEs. Exploitation could occur via a crafted MP4 file, potentially enabling remote code execution. Mitigations are distribution-specific p...

CVE-2018-8004

CVE-2018-8004 affects Apache Traffic Server (ATS) and is due to HTTP smuggling and cache‑poisoning issues. The vulnerability impacts ATS versions 6.0.0–6.2.2 and 7.0.0–7.1.3, with fixed releases 6.2.3+ and 7.1.4+ recommended. Public sources describe multiple parsing flaws (e.g., header parsing in...

CVE-2019-12469

CVE-2019-12469 (MediaWiki) : Affected versions are MediaWiki up to 1.32.1. The issue is an Incorrect Access Control that exposes suppressed usernames or login status on Special:EditTags. Root cause is an access-control weakness in how EditTags visibility is enforced. Impact is information disclos...

CVE-2019-16391

SPIP vulnerability CVE-2019-16391 affects SPIP 3.1.x and 3.2.x prior to fixed releases. The issue allows authenticated visitors to modify any published content and perform other database modifications via ecrire/inc/meta.php and ecrire/inc/securiser_action.php. Affected versions: SPIP before 3.1....

CVE-2019-3464

CVE-2019-3464 involves insufficient sanitization of environment variables passed to rsync, enabling bypass of rssh restrictions and potential execution of arbitrary shell commands. The vulnerability affects setups using rssh as a restricted shell paired with rsync; attackers could exploit environ...

CVE-2019-9858

CVE-2019-9858 affects Horde Groupware Webmail (versions 5.2.22 and 5.2.17). The flaw is in Horde/Form/Type.php image upload handling: an unsanitized POST parameter object[photo][img][file] is used as the destination path for move_uploaded_file(), allowing an attacker to place a PHP file (e.g., vi...

CVE-2020-24361

CVE-2020-24361 affects SNMPTT versions prior to 1.4.2, enabling remote code execution via SNMP traps (EXEC, PREXEC, or unknown_trap_exec). Evidence across multiple sources ties the vulnerability to SNMPTT’s trap handling, with Debian and other advisories noting that upgrades to fixed packages (e....

CVE-2021-32280

CVE-2021-32280 affects fig2dev prior to version 3.2.8. A NULL pointer dereference in compute_closed_spline() (trans_spline.c) can lead to Denial of Service. Affected advisories and notices (Astra Linux, Red Hat, Amazon Linux variants) confirm the issue and list 3.2.8 as the fixed version. Remedia...

CVE-2021-44732

CVE-2021-44732 affects MBed TLS before 3.0.1, with a double free in certain out-of-memory conditions triggered by mbedtls_ssl_set_session(). The issue is documented across several advisories (Debian, Mageia, Gentoo, Astra Linux) and is fixed in newer releases (e.g., MBed TLS 3.0.1+; Debian 2.16.9...

CVE-2022-26496

The CVE-2022-26496 issue affects nbd-server prior to 3.24, causing a stack-based buffer overflow when parsing the name field. An attacker can trigger the overflow by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with a large value for the name length, potentially leading to code execution ...

CVE-2022-30784

CVE-2022-30784 affects NTFS-3G up to and including 2021.8.22. A crafted NTFS image can cause a heap exhaustion in ntfs_get_attribute_value, with CVSSv3.1 vectors indicating LOCAL, LOW CWE, but HIGH confidentiality, integrity, and availability impact. The vulnerability is exposed via NTFS-3G’s FUS...

CVE-2023-2857

CVE-2023-2857 affects Wireshark, where the BLF file parser crash in Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13 enables denial of service via crafted capture files. The issue is tied to the BLF file parsing path and can be triggered by processing crafted captures, as documented in multiple advisories....

CVE-2023-6185

CVE-2023-6185 is an Improper Input Validation vulnerability in the GStreamer integration of LibreOffice that may allow an attacker to execute arbitrary GStreamer plugins by not escaping the embedded video filename passed to GStreamer. The issue affects LibreOffice and is discussed in multiple adv...

CVE-2024-10224

Qualys reports CVE-2024-10224 affects perl-Module-ScanDeps prior to 1.36, where unsanitized input could allow local command execution via open() of a pipe or by eval(). Remediations shown in connected advisories include updating to 1.36+ (examples show 1.37+ in Amazon Linux 2023/AL2023 and other ...

CVE-2024-41096

CVE-2024-41096 : In the Linux kernel, KFENCE reported a use-after-free in PCI MSI handling during msi_capability_init. The root cause is an error-path path that unmasks a descriptor after it may have been freed, propagating a failure from __msi_domain_alloc_locked() back to pci_alloc_irq_vectors ...

CVE-2024-42136

CVE-2024-42136 affects the Linux kernel cdrom subsystem. The issue stems from an arithmetic path in last_media_change that could trigger a signed integer overflow under UBSAN when running syzkaller; the issue is resolved by rearranging the check to avoid any arithmetic, preventing the overflow. T...

CVE-2024-46951

CVE-2024-46951 is an issue in Artifex Ghostscript (Pattern color space) where an unchecked Implementation pointer could lead to arbitrary code execution. Connected advisories confirm this affects Ghostscript’s PostScript/PDF interpreter and note a developer-identified fix in ghostpdl-10.04.0, add...

CVE-2024-49986

CVE-2024-49986 refers to a Linux kernel issue affecting the x86/x86-android-tablets platform. The vulnerability arises during platform_device_register() error handling: x86_android_tablet_remove() frees the pdevs[] array, so the code must not use pdevs[] after its deletion. The fix, as described ...

CVE-2025-23158

The CVE-2025-23158 vulnerability affects the Linux kernel media: venus: hfi queue handling, where a firmware-modified large qsize can cause an OOB write when a new_wr_idx is not validated. The issue originates in reading/writing the shared queue (qhdr->q_size) and can lead to an out-of-bounds ...

CVE-2025-25474

DCMTK v3.6.9+ DEV contains a buffer overflow in the dcmimgle/diinpxt.h component (CVE-2025-25474). Multiple connected advisories confirm the issue and note fixes/updates exist (e.g., Debian, openSUSE, Mageia, TencentOS/SUSE advisories). Remediation is to upgrade to patched DCMTK versions as provi...

CVE-2025-37766

CVE-2025-37766 affects the Linux kernel drm/amd/pm component, where the vulnerability stems from a divide-by-zero condition when setting a speed value. If speed exceeds UINT_MAX/8, a division by zero can occur. Multiple connected advisories/plugins (Azure Linux update, Astra Linux page, CIRCL sig...

CVE-2025-37792

The CVE-2025-37792 issue affects the Linux kernel Bluetooth btrtl driver (rtl load file path). root cause: btrtl_initialize() may treat a zero-length rtl_load_file() as non-error, causing an error pointer vs NULL and a subsequent NULL dereference. Severity is MEDIUM (CVSSv3.1 base 5.5), with loca...

CVE-2025-37820

CVE-2025-37820 (Linux kernel – xen-netfront) has a concrete issue: the function xdp_convert_buff_to_frame() may return NULL when failing to convert an XDP buffer to an XDP frame due to memory constraints, internal errors, or invalid data. If the caller does not check for NULL, a NULL pointer dere...

CVE-2025-37862

CVE-2025-37862 affects the Linux kernel HID PIDFF code. The vulnerability is a NULL pointer dereference in pidff_find_fields (and pidff_find_special_field) when searching for a report not implemented on the device, potentially triggering a crash. The issue could occur for both optional and requir...

CVE-2025-38499

The CVE concerns the Linux kernel and the clone_private_mnt() path. The root cause is a missing CAP_SYS_ADMIN check in the correct user namespace during mount handling, which could allow exposure of something hidden by a mount that cannot be undone. The issue is tied to how CAP_SYS_ADMIN is check...

CVE-2007-4476

CVE-2007-4476 is a buffer overflow in the safer_name_suffix function of GNU tar that exposes a crashing stack. The supplied connected documents corroborate the issue within tar/cpio track records and list it alongside other related CVEs (e.g., CVE-2010-0624); no explicit patch versions or remedia...

CVE-2007-6427

CVE-2007-6427 affects the X.Org Xserver (XInput-Misc extension) prior to version 1.4.1. The root cause is missing input sanitising within the XInput‑Misc code, which can lead to local privilege escalation. In public advisories, this is described as a vulnerability in the XInput‑Misc path that all...

CVE-2008-1673

The CVE-2008-1673 vulnerability affects the Linux kernel ASN.1 BER decoding in CIFS and ip_nat_snmp_basic modules (and gxsnmp). Root cause: improper validation of ASN.1 BER lengths, enabling a remote attacker to crash the system or execute arbitrary code via: (1) a length greater than the working...

CVE-2009-4538

CVE-2009-4538 affects the Linux kernel e1000e driver (netdev.c) up to and including version 2.6.32.3. The issue is an improper check of the Ethernet frame size when frames exceed the MTU, allowing a remote attacker to influence the system via crafted packets. The impact is described as unspecifie...

CVE-2010-3432

CVE-2010-3432 affects the Linux kernel SCTP stack: sctp_packet_config in net/sctp/output.c initializes packet data structures too aggressively in kernels before 2.6.35.6, enabling remote attackers to trigger a denial of service (panic) via a specific SCTP traffic sequence. Affected component: ker...

CVE-2012-1093

The CVE-2012-1093 entry identifies a vulnerability in the Debian x11-common init script prior to version 1:7.6+12, where a symlink attack during package installation can lead to privilege escalation. Affected software: Debian x11-common package; vulnerable component: init script; root cause: syml...

CVE-2014-4699

CVE-2014-4699 affects the Linux kernel prior to 3.15.4 on Intel CPUs: a non-canonical saved RIP value in system calls that do not use IRET can be exploited via ptrace and fork to escalate privileges or trigger a denial of service (double fault). Multiple connected advisories (e.g., MiracleLinux A...

CVE-2014-6053

The CVE-2014-6053 issue affects LibVNCServer up to version 0.9.9, where rfbProcessClientNormalMessage does not properly handle large ClientCutText data, enabling a remote attacker to cause a denial of service via a crafted message processed by a single unchecked malloc. Connected sources (Astra L...

CVE-2015-0418

CVE-2015-0418 is an Oracle VirtualBox local vulnerability in the Core component that could affect availability. The initial description is unspecific about vectors, but connected documents confirm this as a local, core-level issue affecting VirtualBox as shipped in older branches (e.g., 3.2.x up ...

CVE-2015-2571

CVE-2015-2571 affects Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier. It is an unspecified vulnerability in the Server: Optimizer that could allow remote authenticated users to cause a denial of service via unknown vectors. Exploitation details are not provided in the supplied docu...

CVE-2015-2648

CVE-2015-2648 is a MySQL Server vulnerability affecting Server:DML in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier. It allows remote authenticated users to impact availability via DML-related vectors (CVSS v2 base 4.0). Public advisories in connected sources indicate remediation ...

CVE-2016-0505

CVE-2016-0505 is an unspecified vulnerability in Oracle MySQL Server and MariaDB that could allow a remote authenticated user to cause a denial of service via unknown vectors related to Options. Affected versions include MySQL 5.5.46 and earlier, 5.6.27 and earlier, 5.7.9 and MariaDB before 5.5.4...

CVE-2016-0649

CVE-2016-0649 is cited in IBM Security Bulletins as an unspecified vulnerability in Oracle MySQL Server related to the Server: PS component that could cause a partial availability DoS. Affected product in this IBM bulletin is PowerKVM (versions 2.1 and 3.1); remediation is to apply updates via yu...

CVE-2016-0650

CVE-2016-0650 is described in the connected documents as an unspecified vulnerability in Oracle MySQL Server related to the Server: Replication component that could allow a local/remote attacker to impact availability (DoS). The public details indicate the issue affects MySQL/MariaDB families acr...

CVE-2016-0739

The CVE-2016-0739 issue affects libssh up to and including version 0.7.2 (pre-0.7.3). It truncates ephemeral secrets used in diffie-hellman-group1 and diffie-hellman-group14 key exchanges to 128 bits, enabling man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vector...

CVE-2016-1000341

CVE-2016-1000341 : The Bouncy Castle JCE Provider (BC-JCE) up to version 1.55 and earlier suffers a timing-side-channel in DSA signature generation. The lack of blinding can allow an observer to deduce the signature’s k value, potentially leaking the private key. The vulnerability is tied to the ...