CVE-2022-23477

From the connected documents: CVE-2022-23477 affects xrdp before v0.9.21, with a buffer overflow in the audin_send_open() function. Root cause is an overflow in the input handling within audin_send_open(); no public exploit details are provided in the supplied sources. Impact is described variabl...

CVE-2022-29536

CVE-2022-29536 affects GNOME Epiphany before 41.4 and 42.x before 42.2. A buffer overflow in the UI process (ephy_string_shorten) can be triggered by a long page title because the UTF-8 ellipsis byte length is not properly accounted for. Impact per referenced advisories is memory corruption/crash...

CVE-2022-30788

NTFS-3G contains a vulnerability for CVE-2022-30788: a crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (NTFS-3G up to 2021.8.22). Public sources (e.g., Astra Linux security bulletins and enterprise advisories) reference this CVE and guide updating to mitigate, but ...

CVE-2022-39028

CVE-2022-39028 affects telnetd in GNU Inetutils up to 2.3 and MIT krb5-appl up to 1.0.3 (and derivatives). The issue is a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8, causing telnetd to crash; in typical installs the service stays up via inetd, but repeated crashes can render the telnet s...

CVE-2022-47950

OpenStack Swift contains a vulnerability (CVE-2022-47950) where a authenticated user can supply crafted XML to the S3 API, causing it to disclose arbitrary host files. Affected lines mention OpenStack Swift versions before 2.28.1, 2.29.x before 2.29.2, and 2.30.0, with impact on both s3api (Rocky...

CVE-2022-49063

The CVE (CVE-2022-49063) affects the Linux kernel in the ice driver’s ARFS feature, where use-after-free can occur when freeing @rx_cpu_rmap. The issue arises because free_irq_cpu_rmap() is invoked after (devm_)free_irq(), causing the code to operate on IRQ descriptors that may already be freed, ...

CVE-2022-4907

CVE-2022-4907 describes an uninitialized-use flaw in FFmpeg used by Google Chrome prior to 108.0.5359.71, allowing a remote attacker to run arbitrary code in a sandbox via a crafted HTML page. Public connected advisories map this to FFmpeg and Chromium components and indicate remediation through ...

CVE-2023-5197

CVE-2023-5197 is a use-after-free vulnerability in the Linux kernel’s netfilter nf_tables component. Public documents confirm it can be triggered by the addition/removal of rules within the same transaction, leading to potential local privilege escalation. Affected context includes Linux kernel d...

CVE-2024-36946

CVE-2024-36946 is a Linux kernel local denial of service issue related to phonet: rtm_phonet_notify() skb allocation. The root cause is that fill_route() stores three components in the skb (rtmsg, RTA_DST, RTA_OIF) and rtm_phonet_notify() should allocate space via NLMSG_ALIGN(sizeof(struct rtmsg)...

CVE-2025-23156

The CVE-2025-23156 vulnerability affects the Linux kernel’s media: venus: hfi_parser component. It is caused by a potential out-of-bounds access when parsing a payload’s words_count and data pointers; when words_count reaches the last word, data may read beyond the total payload. The issue is mit...

CVE-2025-37790

The CVE-2025-37790 issue concerns the Linux kernel: specifically the net: mctp: Set SOCK_RCU_FREE path where a socket could disappear during a Bind lookup that runs under RCU. The vulnerability arises from the Bind lookup performing operations under RCU, potentially leading to use-after-free scen...

CVE-2025-37812

CVE-2025-37812 concerns the Linux kernel cdns3 driver: a deadlock in NCM gadget usage can occur under PREEMPT_RT when heavy network traffic triggers the threaded interrupt handler to be preempted by softirq. The root cause is protection by the same spinlock shared by the threaded IRQ and softirq....

CVE-1999-0368

The CVE-1999-0368 issue involves buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD that can lead to remote root access (palmetto). Red Hat’s entry reiterates the same vulnerability. Nessus plugin 10318 (WU-FTPD Multiple Vulnerabilities) and 10318’s description cite the overflow as enabling...

CVE-2008-1887

Summary of CVE-2008-1887 : Python 2.5.2 and earlier are affected by a context-dependent vulnerability where a negative size value is passed to PyString_FromStringAndSize when assert() is disabled, causing under-allocation and a buffer overflow. Documented impact: remote attackers could execute ar...

CVE-2009-0946

The CVE-2009-0946 issue affects the FreeType font engine (FreeType 2.3.9 and earlier). The vulnerability arises from multiple integer overflows in the engine, exploitable via crafted font input in components such as smooth/ftsmooth.c, sfnt/ttcmap.c, and cff/cffload.c, potentially allowing remote ...

CVE-2009-2949

CVE-2009-2949 refers to an integer overflow in OpenOffice.org's XPM parsing, specifically the XPMReader path, causing a heap-based buffer overflow. The issue affects OpenOffice.org prior to 3.2 and can allow a remote attacker to execute arbitrary code by supplying a crafted XPM file. Multiple Ope...

CVE-2009-4537

CVE-2009-4537 concerns the Linux kernel before 2.6.32.3, specifically the r8169 Ethernet driver (drivers/net/r8169.c). The vulnerability arises from not properly checking the size of frames that exceed the MTU, allowing remote attackers to cause a denial of service via crafted packets that exploi...

CVE-2010-3442

Technical details for CVE-2010-3442 are not publicly provided in the connected documents. The sources reference the CVE and affected kernel versions but do not describe exploitability, impact specifics, or fixes. Monitor for vendor advisories and updates.

CVE-2010-3453

CVE-2010-3453 affects OpenOffice.org upstream: WW8ListManager in oowriter handles Word .DOC WW8 list data; root cause is an out-of-bounds/heap write due to an unspecified list levels count in user-defined styles. Affected products are OpenOffice.org 2.x and 3.x prior to 3.3. Consequences include ...

CVE-2013-2016

CVE-2013-2016 affects qemu v1.3.0 and later (virtio-rng). The issue arises from how addresses are validated when a guest accesses the config space of a virtio device; when the device has a very small or zero-sized config space, a privileged guest could access the host’s qemu address space and pot...

CVE-2014-2423

CVE-2014-2423 is an unspecified vulnerability in the JAX-WS component affecting Oracle Java SE (6u71, 7u51, 8, and Embedded 7u51) with partial confidentiality, integrity, and availability impacts. Public IBM-related documentation maps this and related Java CPU entries to IBM SDK/JAVA packages, e....

CVE-2014-2427

CVE-2014-2427 is listed in IBM Java/SDK bulletins as one of the Java SE CVEs addressed by IBM updates. The IBM Security Bulletins for SDKs shipped with WebSphere/InfoSphere Streams/Support Assistant enumerate CVE-2014-2427 among vulnerabilities affecting IBM SDK/JAVA Runtime components. Remediati...

CVE-2014-8650

Affected software: python-requests-Kerberos (Python) up to version 0.5. Root cause: mutual authentication is not handled by the library. Impact (as per provided metrics): CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL) with network attack vector, no authentication, and partial/confident...

CVE-2015-0505

CVE-2015-0505 affects Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier. An unspecified remote-authenticated vulnerability related to Data Definition Language (DDL) operations could cause a denial of service. Impact is limited to availability (partial). The public description does no...

CVE-2015-1572

CVE-2015-1572 is a heap-based buffer overflow in closefs.c of the libext2fs library used by e2fsprogs, exploited when a crafted block group descriptor is marked dirty. Affected: e2fsprogs (libext2fs) prior to 1.42.12. Root cause: incomplete fix for CVE-2015-0247. Impact: local code execution poss...

CVE-2015-3451

CVE-2015-3451 affects XML::LibXML prior to 2.0119. The _clone function does not properly preserve or set the expand_entities option, enabling XML external entity (XXE) attacks via crafted XML data to the new or load_xml entry points. The connected sources confirm the vulnerable component and the ...

CVE-2016-0609

CVE-2016-0609 is an Oracle MySQL vulnerability affecting multiple branches (MySQL 5.5.46 and earlier; 5.6.27 and earlier; 5.7.9 and MariaDB before 5.5.47; 10.0.x before 10.0.23; 10.1.x before 10.1.10) where remote authenticated users can affect availability via unknown vectors related to privileg...

CVE-2016-1837

CVE-2016-1837 is a use-after-free/memory corruption vulnerability in libxml2 affecting the htmlParsePubidLiteral and htmlParseSystemLiteral paths, leading to denial of service. Public references in the Initial document note a MEDIUM (CVSSv3 base 5.5) impact with LOCAL attack vector and user inter...

CVE-2016-3170

Drupal Core CVE-2016-3170 affects Drupal 7.x before 7.43 and Drupal 8.x before 8.0.4. The issue arises when a configuration allows login by email and a module permits logging in, enabling remote attackers to disclose usernames via the Forgot Password workflow. The vulnerability is confirmed by NV...

CVE-2016-9939

CVE-2016-9939 affects Crypto++ (Crypto++/libcrypto++) 5.6.4, where the ASN.1 BER decoding routine allocates a memory block based on the length field and may zero the memory if contents are insufficient, causing a noticeable delay during the wipe for large allocations. This concrete detail is repe...

CVE-2017-12183

CVE-2017-12183 affects xorg-server before 1.19.5. The XFIXES extension mishandled buffer/length validation, allowing a malicious X client to crash the X server or possibly execute arbitrary code. Impact cited as denial of service or arbitrary code execution when an X client connects (remote/local...

CVE-2017-13028

CVE-2017-13028 (tcpdump) affects tcpdump prior to 4.9.2, describing a buffer over-read in the BOOTP parser (print-bootp.c:bootp_print()). The connected Debian/DSA advisories and upstream tcpdump notes confirm the issue and list 4.9.2 as the fix. Remediation: upgrade tcpdump to version 4.9.2 or la...

CVE-2017-14997

CVE-2017-14997 affects GraphicsMagick (notably the 1.3.26 release in the provided description) due to an integer underflow in ReadPICTImage (coders/pict.c) that allows a remote attacker to trigger a denial of service via excessive memory allocation. The connected documents corroborate that this C...

CVE-2017-16529

CVE-2017-16529 affects the Linux kernel’s snd_usb_create_streams in sound/usb/card.c, allowing a local attacker to trigger an out-of-bounds read and system crash via a crafted USB device, with impact described as a denial of service and potentially other effects. The issue is present in kernels p...

CVE-2017-5094

CVE-2017-5094: Type confusion in the extensions JavaScript bindings of Chromium/Google Chrome before 60.0.3112.78. Affected component is the extensions subsystem; root cause described as a type confusion. Impact stated across connected advisories: remote attacker could potentially maliciously mod...

CVE-2017-5121

CVE-2017-5121 concerns the Chromium/Google Chrome V8 component. Reports in the connected sources confirm an out-of-bounds memory access in V8 before version 61.0.3163.100, enabling a remote attacker to execute arbitrary code within the Chrome sandbox on Linux, Windows, and Mac via a crafted page....

CVE-2018-18337

The CVE-2018-18337 issue affects Chromium/Blink. A use-after-free vulnerability in Blink (Chromium’s rendering engine) was identified prior to version 71.0.3578.80, with attackers able to trigger heap corruption through a crafted HTML page. Upstream fixes address Blink use-after-free paths; affec...

CVE-2018-18355

Affected software: Google Chrome (and Chromium) prior to version 71.0.3578.80. Issue: CVE-2018-18355 is a policy enforcement/URL Formatter vulnerability caused by incorrect handling of confusable characters, allowing a remote attacker to spoof the Omnibox (address bar) with a crafted domain name....

CVE-2018-6040

CVE-2018-6040 : In Google Chrome, there was a CSP bypass due to insufficient policy enforcement in the Blink component. Version information in the provided docs indicates this affected Chrome prior to 64.0.3282.119 and was addressed by the 64.0.3282.119 update. The vulnerability could allow a cra...

CVE-2018-6076

CVE-2018-6076 affects Google Chrome (Blink) where URL fragment identifiers were not encoded correctly, enabling a remote attacker to trigger a DOM-based XSS via a crafted HTML page. Concrete details in connected records place the vulnerable component in Blink/Chrome prior to version 65.0.3325.146...

CVE-2018-6127

CVE-2018-6127 affects Chromium/Google Chrome before version 67.0.3396.62, where a use-after-free in IndexedDB could be triggered by a crafted HTML page from a compromised renderer, potentially enabling sandbox escape and arbitrary code execution. Public advisories (e.g., Debian DSA-4237-1) indica...

CVE-2019-14370

Exiv2 0.27.99.0 contains an out-of-bounds read in MrwImage::readMetadata() (CVE-2019-14370) that could lead to denial of service. Connected sources confirm the issue but do not specify a fixed version in the provided materials; remediation/version details are not disclosed here. Monitor for updat...

CVE-2021-1093

CVE-2021-1093 affects the NVIDIA GPU Display Driver for Windows and Linux. The vulnerability stems from a firmware assert()‑like check in the driver, which can be triggered by a local attacker and may cause an application exit, denial of service, or system crash. Connected advisories confirm mult...

CVE-2021-4054

CVE-2021-4054 affects Google Chrome/Chromium autofill UI prior to 96.0.4664.93. The root cause is an incorrect security UI in the autofill path, allowing a remote attacker to spoof the displayed domain via a crafted HTML page. Affected component: Chromium browser engine’s autofill UI. Impact: dom...

CVE-2022-26357

CVE-2022-26357 is a race in Xen’s VT-d domain ID cleanup that can leak VT-d domain IDs and bypass housekeeping flushes. Reported across multiple Xen deployments (e.g., SUSE SLES/SLED, Gentoo advisories) with the issue rooted in mapping Xen domain IDs to a smaller value range and a race in the cle...

CVE-2022-26358

CVE-2022-26358 affects the Xen hypervisor (IOMMU: RMRR VT-d and Unity Mapping for AMD-Vi). Issues arise when a device with Reserved Memory Regions remains accessible, potentially causing DMA/interrupts to trigger IOMMU faults or memory corruption. Connected advisories document multiple vendors (S...

CVE-2022-29248

Guzzle prior to 6.5.6 and 7.4.3 exposed a cookie-domain validation flaw in the cookie middleware: a response Set-Cookie header could set cookies for unrelated domains if the cookie middleware was enabled (or cookies => true) and the client reused a single Guzzle instance across domains. The co...

CVE-2022-3534

CVE-2022-3534 affects the libbpf component (function btf_dump_name_dups in tools/lib/bpf/btf_dump.c) with a use-after-free in Linux kernel/libbpf. Debian and other sources report a patch and version bumps: Debian DLA fixes libbpf to 0.3-2+deb11u1 (and related packages), and ALT Linux notes a fix ...

CVE-2022-37032

CVE-2022-37032 : FRRouting (FRR) before 8.4 has an out-of-bounds read in the BGP daemon, specifically in bgp_capability_msg_parse (bgpd/bgp_packet.c), which may trigger a segmentation fault and DoS. Affected product: FRR’s BGP daemon; impact is denial of service due to memory access. Exploitation...

CVE-2022-48279

CVE-2022-48279 affects ModSecurity; HTTP multipart requests could bypass the Web Application Firewall in versions before 2.9.6 and in 3.x before 3.0.8. Connected sources show patched releases (2.9.6+, 3.0.8+) and downstream updates (Debian, Fedora, Amazon Linux, etc.). No exploit details are prov...