CVE-2025-37765

Summary (CVE-2025-37765): The Linux kernel DRM Nouveau path had a delayed-delete oops during ttm_bo_delayed_delete. The root cause is a dangling nouveau_bo.resv pointer after dma_buf destruction frees amdgpu_bo, and the subsequent ttm_bo_delayed_delete dereferences that pointer, causing a general...

CVE-2025-37879

CVE-2025-37879 affects the Linux kernel 9p/net component. Root cause: in p9_client_write() and p9_client_read_once(), a server could reply with success but a negative count due to signed variable handling, leading to incorrect conclusions about written/read data. The documented fix is to convert ...

CVE-2025-37932

The CVE-2025-37932 issue affects the Linux kernel’s HTB qdisc: htb_qlen_notify() was not idempotent and could deactivate an HTB class or trigger a warning if called when already deactivated. The fix ports the function to be idempotent, easing callers such as fq_codel_dequeue() and qdisc_tree_redu...

CVE-2004-1014

CVE-2004-1014 affects statd in nfs-utils 1.257 and earlier, where SIGPIPE is not ignored, allowing a remote attacker to trigger a denial-of-service (server crash) via a prematurely terminated TCP connection. The OpenVAS, Ubuntu USN-36-1, Debian DSA 606-1, Gentoo GLSA 200412-08, and Red Hat RHSA-2...

CVE-2009-1630

CVE-2009-1630 affects the Linux kernel nfs client: the nfs_permission function in fs/nfs/dir.c (kernel 2.6.29.3 and earlier) does not check execute (MAY_EXEC) permission bits when atomic_open is available. This allows local users to bypass permissions and execute files, as demonstrated by files o...

CVE-2010-2959

The CVE-2010-2959 issue affects the Linux kernel CAN subsystem, specifically the can/bcm.c implementation, due to an integer overflow vulnerability. This flaw can allow local attackers to execute arbitrary code or cause a system crash (DoS) via crafted CAN traffic. Public advisories confirm vulne...

CVE-2012-4201

CVE-2012-4201 is a concrete Firefox/XULRunner/Thunderbird/SeaMonkey vulnerability: the evalInSandbox path mishandles the context when processing JavaScript that sets location.href, enabling remote XSS or read access to arbitrary files via a sandboxed add-on. Affected software includes Mozilla Fir...

CVE-2014-2490

CVE-2014-2490 is described as an unspecified vulnerability in Oracle Java SE’s Hotspot component affecting Java SE 7u60 and 8u5, with remote impact on confidentiality, integrity, and availability. Connected advisories (e.g., MiracleLinux AXSA-2014-460/453/461) explicitly reference CVE-2014-2490 a...

CVE-2014-4678

The CVE-2014-4678 entry concerns Ansible’s safe_eval function. Version pre-1.6.4 fails to properly restrict the code subset, enabling remote attackers to execute arbitrary code via crafted instructions. This vulnerability is linked to an incomplete fix for CVE-2014-4657 and is described as a remo...

CVE-2014-9765

CVE-2014-9765 affects xdelta3 before 3.0.9. A buffer overflow in the function main_get_appheader in xdelta3-main.h allows remote attackers to execute arbitrary code via a crafted input file. Impact is remote code execution with the affected library/vector; exploitation details are not provided be...

CVE-2015-0381

Technical details for CVE-2015-0381 are not publicly available in the provided documents. No specific affected products, versions, root cause, impact, or fixes are described here; monitor for updates.

CVE-2015-1606

Technical details for CVE-2015-1606 are not publicly provided in the connected documents. The batch includes unrelated CVEs and generic notes, but no vendor/product/version/root-cause/impact specific to this CVE. Monitor for official updates and disclosures.

CVE-2015-3145

CVE-2015-3145 affects curl/libcurl 7.31.0 through 7.41.0. The sanitize_cookie_path function can miscompute an index, enabling a remote attacker to cause a denial of service via an out-of-bounds write when the cookie path consists only of a double-quote character. Connected sources corroborate the...

CVE-2017-12179

CVE-2017-12179 affects xorg-x11-server prior to 1.19.5. It is caused by an integer overflow in the (S)ProcXIBarrierReleasePointer functions, enabling a malicious X client to crash the X server or possibly execute arbitrary code. Several advisories and Nessus plugins corroborate this issue across ...

CVE-2017-14039

OpenJPEG 2.2.0 is affected by CVE-2017-14039 in the opj_t2_encode_packet function (lib/openjp2/t2.c): a heap-based buffer overflow causes an out-of-bounds write, potentially enabling remote denial of service or other impact. Multiple vendor advisories (e.g., Debian DSA-4013, Mageia MGASA-2017-048...

CVE-2017-15698

CVE-2017-15698 affects the Apache Tomcat Native Connector (tomcat-native library). It arises from improper handling of AIA-Extension fields longer than 127 bytes, causing the OCSP check to be skipped and potentially allowing invalid client certificates to be accepted. Confirmed fixes appear in up...

CVE-2017-5110

CVE-2017-5110 affects Chromium/Chrome Web Payments, specifically the payments dialog spoofing vulnerability in the Omnibox/payment UI. The root cause is an inappropriate implementation of the web payments API on blob: and data: schemes, enabling a remote attacker to spoof the Omnibox contents via...

CVE-2017-8064

The CVE refers to Linux kernel 4.9.x and 4.10.x before 4.10.12 where the DVB-USB core (drivers/media/usb/dvb-usb-v2/dvb_usb_core.c) interacts incorrectly with CONFIG_VMAP_STACK. This can allow a local attacker to cause a denial of service (system crash or memory corruption) or other impact by abu...

CVE-2017-8309

CVE-2017-8309 refers to a memory leak in QEMU’s audio subsystem (audio.c) that can be exploited remotely to cause a denial of service by repeatedly starting and stopping audio capture. The initial description explicitly states the issue and impact. Connected sources list the CVE in vendor advisor...

CVE-2018-10998

CVE-2018-10998 is an Exiv2 0.26 ReadMetadata issue in jp2image.cpp where an incorrect Safe::add call triggers SIGABRT, leading to denial of service. Public advisory entries (MiracleLinux, EulerOS, NewStart CGSL/AL2) enumerate this CVE among Exiv2 0.26/0.27.x family issues. Remediation: upgrade Ex...

CVE-2018-11490

CVE-2018-11490 affects GIFLIB (dgif_lib.c: DGifDecompressLine) with a heap-based buffer overflow caused by an unchecked array index (Private->RunningCode - 2). Potential denial of service or other impact. Affected: GIFLIB (including usages in sam2p 0.49.4 and related builds) and giflib in vari...

CVE-2018-14767

CVE-2018-14767 affects Kamailio prior to 5.0.7 and 5.1.x prior to 5.1.4, where the To header handling and especially the build_res_buf_from_sip_req function lack input validation. A crafted SIP message with a double To header and an empty To tag can trigger a segmentation fault, leading to denial...

CVE-2018-17206

Open vSwitch 2.7.x–2.7.6 contains a buffer over-read in the decode_bundle function (lib/ofp-actions.c) during BUNDLE action decoding, classified as CVE-2018-17206. The issue is documented in multiple advisories (e.g., RHSA/RHSA-like entries) and Debian/DLA disclosures; exploitation details and ex...

CVE-2018-18348

CVE-2018-18348 concerns the Chrome/Chromium Omnibox: a bug in the handling of bidirectional domain names with RTL characters allowed remote spoofing of the URL bar. The issue arises from an incorrect Omnibox implementation in Chromium-based browsers before version 71.0.3578.80, enabling a crafted...

CVE-2018-5801

CVE-2018-5801 – LibRaw NULL pointer dereference . The provided documents identify LibRaw versions prior to 0.18.7 containing a vulnerability in the LibRaw::unpack() function (src/libraw_cxx.cpp) that can be exploited to trigger a NULL pointer dereference. This condition may allow crashes or denia...

CVE-2018-6074

Google Chrome prior to version 65.0.3325.146 is vulnerable to a Mark-of-the-Web bypass in downloads. The root cause is the failure to apply the Mark-of-the-Web on downloaded pages, enabling a remote attacker to bypass OS-level protections via a crafted HTML page. The vulnerability is addressed in...

CVE-2018-6078

CVE-2018-6078 describes a URL spoofing vulnerability in Google Chrome’s Omnibox (URL bar) caused by incorrect handling of confusable characters. The issue affects Chrome prior to version 65.0.3325.146, enabling a remote attacker to spoof the displayed URL via a crafted domain name. The vulnerabil...

CVE-2018-6082

CVE-2018-6082 affects Google Chrome/Chromium prior to 65.0.3325.146. The entry describes a vulnerability where including port 22 among allowed FTP ports in Chrome’s Networking could let a remote attacker enumerate internal host services via a crafted HTML page. The connected Chrome security updat...

CVE-2018-6140

CVE-2018-6140 affects Google Chrome’s debugger extension API: before 67.0.3396.62, a crafted Chrome Extension could bypass restrictions and lead to arbitrary code execution if a user installs the malicious extension. The issue is tied to the debugger extension API in DevTools. Remediation in the ...

CVE-2018-9256

Wireshark CVE-2018-9256 affects the LWAPP dissector. Versions affected: 2.4.0–2.4.5 and 2.2.0–2.2.13. Root cause: recursion depth could be triggered by encapsulation levels, allowing a crash. Fix implemented in epan/dissectors/packet-lwapp.c by limiting encapsulation levels. Affected products: Wi...

CVE-2019-16993

CVE-2019-16993 affects phpBB

CVE-2019-19331

Knot Resolver (knot-resolver) is affected by CVE-2019-19331, with exploitation arising from processing DNS responses containing a large number of resource records. The issue exists in versions before 4.3.0, and can cause denial of service via high CPU utilization, potentially taking several CPU s...

CVE-2019-3463

CVE-2019-3463 involves insufficient sanitization of arguments passed to rsync, which can bypass rssh restrictions and allow execution of arbitrary shell commands. The issue lies in how rsync arguments are processed, enabling an authorized user to escape intended restrictions of the restricted she...

CVE-2019-7283

The connected Broadcom advisory confirms CVE-2019-7283 affects NetKit’s rcp up to version 0.17, where the rcp server’s file selection is trusted but the client’s object-name validation is only cursory. A malicious rsh server or MITM can overwrite arbitrary files in a client directory by exploitin...

CVE-2020-14409

CVE-2020-14409 affects SDL2 up to version 2.0.12. The vulnerability is an Integer Overflow in SDL_BlitCopy (video/SDL_blit_copy.c) triggered by processing a crafted BMP file, causing SDL_memcpy heap corruption and potential instability. Connected advisories (SUSE, Debian, Ubuntu) reference this C...

CVE-2020-1767

CVE-2020-1767 affects OTRS Community Edition 6.0.x (up to 6.0.24) and OTRS 7.0.x (up to 7.0.13). Description: Agent A can save a draft; Agent B can open it, modify the text, and send it as Agent A, so customers see a message sent by the original agent. Debian/Nessus advisories indicate patches: u...

CVE-2020-24165

Technical details of CVE-2020-24165 are not provided in the supplied documents. No affected products, impact, or remediation specifics are disclosed here; monitor for updates from official advisories.

CVE-2020-28242

CVE-2020-28242 affects Asterisk Open Source: 13.x < 13.37.1, 16.x < 16.14.1, 17.x < 17.8.1, 18.x < 18.0.1, and Certified Asterisk

CVE-2021-37990

CVE-2021-37990 describes an inappropriate implementation in the WebView component of the Chromium browser engine on Android prior to 95.0.4638.54. The issue allows a remote attacker to leak cross-origin data through a crafted Android app, i.e., data exfiltration from cross-origin contexts via Web...

CVE-2021-4065

CVE-2021-4065 is a concrete Chrome/Chromium use-after-free in the autofill component, before version 96.0.4664.93. The connected advisories (Arch Linux ASA-202112-6 and ASA-202112-7, Debian DSA-5046-1) describe the issue as an arbitrary code execution risk via crafted content and note remediation...

CVE-2021-4066

CVE-2021-4066 is an integer underflow in the ANGLE component of the Chromium browser engine, present before version 96.0.4664.93. The vulnerability could allow a remote attacker to cause heap corruption through crafted HTML/web content, potentially enabling arbitrary code execution. Concrete refe...

CVE-2021-4067

CVE-2021-4067: A use-after-free in the Chromium window manager before version 96.0.4664.93 allows a remote attacker to potentially execute arbitrary code or spoof content through crafted web content. Affected product: Chromium browser engine (window manager component). Root cause: use-after-free ...

CVE-2022-23035

CVE-2022-23035 affects the Xen hypervisor with PCI passthrough to x86 HVM guests. The issue is insufficient cleanup of IRQs for passed-through devices: if an interrupt isn’t quiescent during cleanup, a retry may be skipped and pointers can be cleared/freed, risking de-reference of NULL and a use-...

CVE-2022-23483

CVE-2022-23483 affects xrdp prior to version 0.9.21. An Out of Bound Read exists in libxrdp_send_to_channel(). No workarounds are documented in the connected sources. Debian and Alpine advisories, Astra Linux bulletin, and Fedora/ALT Linux entries indicate the fix is to upgrade to a version where...

CVE-2022-26359

CVE-2022-26359 is a Xen hypervisor issue related to IOMMU handling of RMRR (VT-d) and Unity Mapping (AMD-Vi). Public sources describe that when a device with such a region is active, mappings must remain accessible, and violations can lead to unpredictable DMA/interrupt behavior and memory corrup...

CVE-2022-26361

CVE-2022-26361 affects the Xen hypervisor via IOMMU handling (RMRR VT-d and Unity Mapping AMD-Vi). The issue arises when mappings for Reserved Memory Regions or Unity Mapping ranges must remain accessible and are violated, enabling unpredictable DMA/interrupt behavior and potential memory corrupt...

CVE-2022-30974

MuJS contains a denial-of-service vulnerability in versions up to 1.2.0 caused by infinite recursion in regexp.c during compilation, leading to stack exhaustion. This is documented across multiple sources (CNVD/CNNVD, Debian DSA, CNVD, Gentoo GLSA) and affects Artifex MuJS embedded in software. N...

CVE-2022-31031

CVE-2022-31031 affects PJSIP (pjproject) up to version 2.12.1. Root cause: a stack-based buffer overflow when using STUN (via STUN server config or pjlib-util/stun_simple). A patch exists in commit 450baca and should be included in the next release; no workaround is documented. Upgrade to a relea...

CVE-2023-34256

CVE-2023-34256 describes an out-of-bounds read in crc16 in lib/crc16.c when invoked from fs/ext4/super.c due to incomplete offset checks in ext4_group_desc_csum, affecting the Linux kernel up to but not including 6.3.3. The issue can enable local denial of service or information leaks via a craft...

CVE-2023-41915

The CVE-2023-41915 issue affects OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1, where a race condition during privileged library execution (UID 0) could let an attacker obtain ownership of arbitrary files. Multiple advisories confirm fixes across distributions (e.g., PMIx updates in AlmaLinux...