CVE-2019-16391

SPIP vulnerability CVE-2019-16391 affects SPIP 3.1.x and 3.2.x prior to fixed releases. The issue allows authenticated visitors to modify any published content and perform other database modifications via ecrire/inc/meta.php and ecrire/inc/securiser_action.php. Affected versions: SPIP before 3.1....

CVE-2019-9858

CVE-2019-9858 affects Horde Groupware Webmail (versions 5.2.22 and 5.2.17). The flaw is in Horde/Form/Type.php image upload handling: an unsanitized POST parameter object[photo][img][file] is used as the destination path for move_uploaded_file(), allowing an attacker to place a PHP file (e.g., vi...

CVE-2021-32280

CVE-2021-32280 affects fig2dev prior to version 3.2.8. A NULL pointer dereference in compute_closed_spline() (trans_spline.c) can lead to Denial of Service. Affected advisories and notices (Astra Linux, Red Hat, Amazon Linux variants) confirm the issue and list 3.2.8 as the fixed version. Remedia...

CVE-2021-38022

CVE-2021-38022 affects Google Chrome’s WebAuthentication component in the Chromium engine, with an inappropriate implementation before 96.0.4664.45 that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described in multiple security entries and advisor...

CVE-2021-4052

CVE-2021-4052 describes a use-after-free bug in the Chromium-based Chrome engine before version 96.0.4664.93, affecting the web apps component. An attacker could convince a user to install a crafted extension, potentially enabling heap corruption and arbitrary code execution. Publicly documented ...

CVE-2021-44732

CVE-2021-44732 affects MBed TLS before 3.0.1, with a double free in certain out-of-memory conditions triggered by mbedtls_ssl_set_session(). The issue is documented across several advisories (Debian, Mageia, Gentoo, Astra Linux) and is fixed in newer releases (e.g., MBed TLS 3.0.1+; Debian 2.16.9...

CVE-2022-24720

CVE-2022-24720 affects the image_processing Ruby gem (wrapper for libvips/ImageMagick/GraphicsMagick). A bug in the #apply method allows executing shell commands when operation sequences come from unsanitized user input. This chain affects Active Storage variants that rely on image_processing. Th...

CVE-2022-24786

CVE-2022-24786 affects PJSIP (PJPROJECT) versions 2.12 and earlier. The root cause is that PJMEDIA RTC PTS/RPSI feedback parsing does not correctly handle RTCP RPSI packets, enabling an impact to applications that directly call pjmedia_rtcp_fb_parse_rpsi(). The issue is documented with a patch av...

CVE-2022-26496

The CVE-2022-26496 issue affects nbd-server prior to 3.24, causing a stack-based buffer overflow when parsing the name field. An attacker can trigger the overflow by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with a large value for the name length, potentially leading to code execution ...

CVE-2022-30784

CVE-2022-30784 affects NTFS-3G up to and including 2021.8.22. A crafted NTFS image can cause a heap exhaustion in ntfs_get_attribute_value, with CVSSv3.1 vectors indicating LOCAL, LOW CWE, but HIGH confidentiality, integrity, and availability impact. The vulnerability is exposed via NTFS-3G’s FUS...

CVE-2023-2857

CVE-2023-2857 affects Wireshark, where the BLF file parser crash in Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13 enables denial of service via crafted capture files. The issue is tied to the BLF file parsing path and can be triggered by processing crafted captures, as documented in multiple advisories....

CVE-2023-6185

CVE-2023-6185 is an Improper Input Validation vulnerability in the GStreamer integration of LibreOffice that may allow an attacker to execute arbitrary GStreamer plugins by not escaping the embedded video filename passed to GStreamer. The issue affects LibreOffice and is discussed in multiple adv...

CVE-2024-10224

Qualys reports CVE-2024-10224 affects perl-Module-ScanDeps prior to 1.36, where unsanitized input could allow local command execution via open() of a pipe or by eval(). Remediations shown in connected advisories include updating to 1.36+ (examples show 1.37+ in Amazon Linux 2023/AL2023 and other ...

CVE-2024-41096

CVE-2024-41096 : In the Linux kernel, KFENCE reported a use-after-free in PCI MSI handling during msi_capability_init. The root cause is an error-path path that unmasks a descriptor after it may have been freed, propagating a failure from __msi_domain_alloc_locked() back to pci_alloc_irq_vectors ...

CVE-2024-42136

CVE-2024-42136 affects the Linux kernel cdrom subsystem. The issue stems from an arithmetic path in last_media_change that could trigger a signed integer overflow under UBSAN when running syzkaller; the issue is resolved by rearranging the check to avoid any arithmetic, preventing the overflow. T...

CVE-2024-49986

CVE-2024-49986 refers to a Linux kernel issue affecting the x86/x86-android-tablets platform. The vulnerability arises during platform_device_register() error handling: x86_android_tablet_remove() frees the pdevs[] array, so the code must not use pdevs[] after its deletion. The fix, as described ...

CVE-2025-25474

DCMTK v3.6.9+ DEV contains a buffer overflow in the dcmimgle/diinpxt.h component (CVE-2025-25474). Multiple connected advisories confirm the issue and note fixes/updates exist (e.g., Debian, openSUSE, Mageia, TencentOS/SUSE advisories). Remediation is to upgrade to patched DCMTK versions as provi...

CVE-2025-37792

The CVE-2025-37792 issue affects the Linux kernel Bluetooth btrtl driver (rtl load file path). root cause: btrtl_initialize() may treat a zero-length rtl_load_file() as non-error, causing an error pointer vs NULL and a subsequent NULL dereference. Severity is MEDIUM (CVSSv3.1 base 5.5), with loca...

CVE-2025-37820

CVE-2025-37820 (Linux kernel – xen-netfront) has a concrete issue: the function xdp_convert_buff_to_frame() may return NULL when failing to convert an XDP buffer to an XDP frame due to memory constraints, internal errors, or invalid data. If the caller does not check for NULL, a NULL pointer dere...

CVE-2025-38477

The CVE-2025-38477 entry concerns a race in the Linux kernel’s net/sched qfq code. A concurrent modification of agg in qfq_change_agg (invoked during qfq_enqueue) could lead to a NULL dereference in qfq_dump_class and a use-after-free in qfq_delete_class. The fix moves qfq_destroy_class into the ...

CVE-2007-4476

CVE-2007-4476 is a buffer overflow in the safer_name_suffix function of GNU tar that exposes a crashing stack. The supplied connected documents corroborate the issue within tar/cpio track records and list it alongside other related CVEs (e.g., CVE-2010-0624); no explicit patch versions or remedia...

CVE-2007-6427

CVE-2007-6427 affects the X.Org Xserver (XInput-Misc extension) prior to version 1.4.1. The root cause is missing input sanitising within the XInput‑Misc code, which can lead to local privilege escalation. In public advisories, this is described as a vulnerability in the XInput‑Misc path that all...

CVE-2009-4538

CVE-2009-4538 affects the Linux kernel e1000e driver (netdev.c) up to and including version 2.6.32.3. The issue is an improper check of the Ethernet frame size when frames exceed the MTU, allowing a remote attacker to influence the system via crafted packets. The impact is described as unspecifie...

CVE-2010-3432

CVE-2010-3432 affects the Linux kernel SCTP stack: sctp_packet_config in net/sctp/output.c initializes packet data structures too aggressively in kernels before 2.6.35.6, enabling remote attackers to trigger a denial of service (panic) via a specific SCTP traffic sequence. Affected component: ker...

CVE-2012-1093

The CVE-2012-1093 entry identifies a vulnerability in the Debian x11-common init script prior to version 1:7.6+12, where a symlink attack during package installation can lead to privilege escalation. Affected software: Debian x11-common package; vulnerable component: init script; root cause: syml...

CVE-2012-3982

CVE-2012-3982 affects Mozilla Firefox before 16.0, Firefox ESR before 10.0.8, Thunderbird before 16.0, Thunderbird ESR before 10.0.8, and SeaMonkey before 2.13. The description notes multiple unspecified vulnerabilities in the browser engine that can cause memory corruption and application crashe...

CVE-2014-4699

CVE-2014-4699 affects the Linux kernel prior to 3.15.4 on Intel CPUs: a non-canonical saved RIP value in system calls that do not use IRET can be exploited via ptrace and fork to escalate privileges or trigger a denial of service (double fault). Multiple connected advisories (e.g., MiracleLinux A...

CVE-2014-6053

The CVE-2014-6053 issue affects LibVNCServer up to version 0.9.9, where rfbProcessClientNormalMessage does not properly handle large ClientCutText data, enabling a remote attacker to cause a denial of service via a crafted message processed by a single unchecked malloc. Connected sources (Astra L...

CVE-2015-0418

CVE-2015-0418 is an Oracle VirtualBox local vulnerability in the Core component that could affect availability. The initial description is unspecific about vectors, but connected documents confirm this as a local, core-level issue affecting VirtualBox as shipped in older branches (e.g., 3.2.x up ...

CVE-2015-2648

CVE-2015-2648 is a MySQL Server vulnerability affecting Server:DML in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier. It allows remote authenticated users to impact availability via DML-related vectors (CVSS v2 base 4.0). Public advisories in connected sources indicate remediation ...

CVE-2016-0505

CVE-2016-0505 is an unspecified vulnerability in Oracle MySQL Server and MariaDB that could allow a remote authenticated user to cause a denial of service via unknown vectors related to Options. Affected versions include MySQL 5.5.46 and earlier, 5.6.27 and earlier, 5.7.9 and MariaDB before 5.5.4...

CVE-2016-0649

CVE-2016-0649 is cited in IBM Security Bulletins as an unspecified vulnerability in Oracle MySQL Server related to the Server: PS component that could cause a partial availability DoS. Affected product in this IBM bulletin is PowerKVM (versions 2.1 and 3.1); remediation is to apply updates via yu...

CVE-2016-0650

CVE-2016-0650 is described in the connected documents as an unspecified vulnerability in Oracle MySQL Server related to the Server: Replication component that could allow a local/remote attacker to impact availability (DoS). The public details indicate the issue affects MySQL/MariaDB families acr...

CVE-2016-0739

The CVE-2016-0739 issue affects libssh up to and including version 0.7.2 (pre-0.7.3). It truncates ephemeral secrets used in diffie-hellman-group1 and diffie-hellman-group14 key exchanges to 128 bits, enabling man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vector...

CVE-2016-3162

The CVE-2016-3162 issue affects Drupal's File module (Drupal 7.x before 7.43 and 8.x before 8.0.4). The root cause is an access-control bypass that lets remote authenticated users who can create content or upload files read, delete, or substitute a link to a file uploaded to an unprocessed form. ...

CVE-2017-12377

ClamAV 0.99.2 and earlier are affected by CVE-2017-12377 due to improper input validation in mew packet processing, causing a heap-based over-read/DoS and potential arbitrary code execution when scanning crafted files. The vulnerability is remote and unauthenticated. Upstream advisories and secur...

CVE-2018-18343

CVE-2018-18343 affects Chromium/Chrome with a use-after-free in Skia prior to 71.0.3578.80. The issue is triggered via crafted HTML and can lead to heap corruption and remote code execution. Affected component: Skia (Chromium/WebKit rendering stack). The Arch Linux ASA-201812-2 entry confirms a s...

CVE-2018-18352

CVE-2018-18352 affects Chromium/Google Chrome Media handling, where cross-origin audio could be accessed due to an inappropriate implementation that bypassed the same-origin policy for audio content via crafted HTML. The issue is fixed in Chromium up to version 71.0.3578.80; upstream patches exis...

CVE-2018-6081

CVE-2018-6081 affects Google Chrome interstitials; a cross-site scripting flaw in Chrome prior to 65.0.3325.146 could be triggered by convincing a user to install a malicious extension or open Developer Console, via a crafted HTML page. Connected advisories confirm patches: Debian fixes in Chrome...

CVE-2018-6093

CVE-2018-6093 affects Google Chrome/Chromium Blink: a vulnerability in origin checks that could allow a remote attacker to bypass same-origin protections and leak cross-origin data via crafted HTML. The issue is listed as a Same Origin Policy bypass in Service Worker/Blink components. Debian and ...

CVE-2018-6123

CVE-2018-6123 is a use-after-free in Blink of Google Chrome prior to 67.0.3396.62, enabling a remote attacker to potentially corrupt the heap via a crafted HTML page. CNVD catalogs this Chrome/Blink memory misuse; Debian advisories note fixes in Chrome 67.0.3396.87 and later. Remediation: upgrade...

CVE-2018-6166

CVE-2018-6166: Google Chrome (Omnibox/URL Formatter) contains a URL spoofing vulnerability due to incorrect handling of confusable characters, enabling domain spoofing via IDN homographs. Affects Chrome up to 68.0.3440.75; fixed in 68.0.3440.75 (Chromium) with security updates across distribution...

CVE-2018-8012

CVE-2018-8012 affects Apache ZooKeeper: no authentication/authorization is enforced when a server attempts to join a quorum (before 3.4.10 and 3.5.0-alpha to 3.5.3-beta). This allows an arbitrary endpoint to join the cluster and propagate counterfeit changes to the leader. IBM and related advisor...

CVE-2019-14459

CVE-2019-14459 affects nfdump up to version 1.6.17 and earlier. The issue is an integer overflow in Process_ipfix_template_withdraw (ipfix.c) that can be remotely triggered to crash the process (denial of service). Connected advisories indicate fixes in newer releases: Gentoo GLSA-202003-17 recom...

CVE-2019-3464

CVE-2019-3464 involves insufficient sanitization of environment variables passed to rsync, enabling bypass of rssh restrictions and potential execution of arbitrary shell commands. The vulnerability affects setups using rssh as a restricted shell paired with rsync; attackers could exploit environ...

CVE-2020-20450

CVE-2020-20450: FFmpeg 4.2 is affected by a null pointer dereference in libavformat/aviobuf.c, leading to Denial of Service. The vulnerability targets FFmpeg’s handling of AVI/aviobuf, with a null pointer dereference as the underlying cause. Affected products are FFmpeg 4.2 and related builds; se...

CVE-2020-24361

CVE-2020-24361 affects SNMPTT versions prior to 1.4.2, enabling remote code execution via SNMP traps (EXEC, PREXEC, or unknown_trap_exec). Evidence across multiple sources ties the vulnerability to SNMPTT’s trap handling, with Debian and other advisories noting that upgrades to fixed packages (e....

CVE-2021-42529

CVE-2021-42529 affects XMP Toolkit SDK 2021.07 and earlier, with a stack-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a crafted file (user interaction). Connected advisories confirm the issue across mu...

CVE-2022-46329

CVE-2022-46329 involves protection mechanism failure in some Intel PROSet/Wireless/WiFi software that could allow a local attacker to escalate privileges. Public sources in the provided documents tie this CVE to linux-firmware updates for Power HMC and general Linux firmware packages, indicating ...

CVE-2022-4907

CVE-2022-4907 describes an uninitialized-use flaw in FFmpeg used by Google Chrome prior to 108.0.5359.71, allowing a remote attacker to run arbitrary code in a sandbox via a crafted HTML page. Public connected advisories map this to FFmpeg and Chromium components and indicate remediation through ...