CVE-2015-4895

CVE-2015-4895 is an unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier that could allow remote authenticated users to affect availability through unknown vectors related to InnoDB. Public documentation in the connected advisories confirms the CVE is listed among multiple MySQL/Ma...

CVE-2015-8567

CVE-2015-8567 describes a memory leak in the QEMU vmxnet3 device emulator (net/vmxnet3.c) that could allow a remote attacker to cause a denial of service via memory exhaustion. The vulnerability is part of multiple CVEs in QEMU; Debian security advisories report fixes in stable Jessie to version ...

CVE-2016-0753

CVE-2016-0753 affects Active Model in Rails up to 5.x (4.1.x < 4.1.14.1, 4.2.x < 4.2.5.1, 5.x

CVE-2016-1516

OpenCV 3.0.0 is affected by a double-free vulnerability (CVE-2016-1516) that could allow arbitrary code execution. The connected Nessus entries and Debian/RHEL advisories enumerate OpenCV 3.0.0 as vulnerable and list multiple related CVEs for OpenCV in older releases; Debian’s DLA-2799 and OSV no...

CVE-2016-8667

CVE-2016-8667 affects QEMU (rc4030_write in hw/dma/rc4030.c). It allows a local guest OS administrator to trigger a divide-by-zero and QEMU process crash by loading an excessively large interval timer value, causing a denial of service with partial impact on availability. The provided documents d...

CVE-2017-11358

CVE-2017-11358 affects SoX (Sound eXchange) version 14.4.2, where the read_samples function in hcom.c can be triggered by a crafted HCOM file to cause an invalid memory read and application crash (DoS). Multiple connected sources corroborate the vulnerability in the same function/file and note it...

CVE-2017-12374

CVE-2017-12374 affects ClamAV before 0.99.3, with a vulnerability in mail parsing (mbox.c) that can cause a use-after-free and DoS when processing crafted emails. The issue stems from insufficient input validation during certain mail parsing operations, allowing an unauthenticated, remote attacke...

CVE-2017-12601

CVE-2017-12601 is a buffer overflow in OpenCV's BMP decoder (cv::BmpDecoder::readData) in modules/imgcodecs/src/grfmt_bmp.cpp when reading images with cv::imread. Affected: OpenCV up to version 3.3; demonstrated by the 4-buf-overflow-readData-memcpy test case. The connected documents confirm the ...

CVE-2017-12603

CVE-2017-12603: OpenCV (up to 3.3) has an invalid write in cv::RLByteStream::getBytes (modules/imgcodecs/src/bitstrm.cpp) during image read via cv::imread, demonstrated by the 2-opencv-heapoverflow-fseek test. Affected component is the OpenCV image codecs; root cause is an out-of-bounds/incorrect...

CVE-2017-16669

CVE-2017-16669 affects GraphicsMagick; in 1.3.26, the code path coders/wpg.c AcquireCacheNexus in magick/pixel_cache.c can be exploited by a crafted file to trigger a heap-based buffer overflow, potentially causing application crash or other impact. This is a remote, unauthenticated issue with me...

CVE-2017-9992

CVE-2017-9992 is a vulnerability in FFmpeg/libav where the heap-based buffer overflow occurs in the decode_dds1 function (libavcodec/dfa.c). Affected branches include FFmpeg up to versions: 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1. Exploitation vi...

CVE-2018-17470

CVE-2018-17470 is a memory corruption bug in the GPU backend of Chromium/Google Chrome, before version 70.0.3538.67. A remote attacker who can render a crafted HTML page could potentially escape the sandbox. Publicly documented details across Debian security advisories and Arch Linux security not...

CVE-2018-5269

OpenCV 3.3.1 is affected by CVE-2018-5269 due to an assertion failure in cv::RBaseStream::setPos within modules/imgcodecs/src/bitstrm.cpp caused by an incorrect integer cast. The description confirms the vulnerable component and file path, but the provided documents do not include exploit informa...

CVE-2018-6050

CVE-2018-6050: In Google Chrome, the Omnibox (URL bar) UI could be spoofed via a crafted HTML page, allowing a remote attacker to misrepresent the target URL. This affects Chrome versions prior to 64.0.3282.119. Root cause is a security UI weakness in Omnibox handling that permits spoofed content...

CVE-2018-6143

CVE-2018-6143 is a Chrome/V8 vulnerability: an out-of-bounds memory read in the V8 engine that could be exploited remotely via a crafted HTML page to leak memory. Affected software is Google Chrome (and Chromium-derived builds) prior to 67.0.3396.62; exploitation is via malicious web content. Pub...

CVE-2019-13486

CVE-2019-13486 affects Xymon up to version 4.3.28, with a stack-based buffer overflow in the status-log viewer (svcstatus.c) caused by expansion. Multiple open‑source/vuln databases (NVD, OSV, CNVD, Debian/CVE trackers, OSVUbuntu/OSVDebian) corroborate the issue as a vulnerability in the status-l...

CVE-2020-14410

CVE-2020-14410 is the SDL/libSDL2 vulnerability described in multiple advisories (notably SUSE/DebianUbuntu/Nessus feeds) for SDL2

CVE-2021-35197

MediaWiki CVE-2021-35197 affects multiple branches (before 1.31.15, 1.32.x–1.35.x before 1.35.3, and 1.36.x before 1.36.1). Root cause: bots with a sitewide block could still purge pages via the Action API, despite the block. Impact: unintended API access leading to page purges; exploitation deta...

CVE-2021-38006

CVE-2021-38006 affects Chromium’s storage foundation component prior to version 96.0.4664.45. Description in connected docs confirms a use-after-free vulnerability, enabling potential remote code execution or browser instability via crafted content. The issue is addressed upstream in Chromium 96....

CVE-2021-42388

CVE-2021-42388 affects ClickHouse’s LZ4 compression codec. In LZ4::decompressImpl(), a 16-bit unsigned offset is read from the compressed data and later used to determine a copy length without lower-bound source checks, causing a heap out-of-bounds read. This could enable crashes or memory-access...

CVE-2022-0577

CVE-2022-0577 affects Scrapy (scrapy/scrapy) prior to 2.6.1, where sensitive information could be exposed to an unauthorized actor. Public sources describe leakage related to redirections where HTTP Authorization headers and cookies may be sent to unintended domains. Several connected advisories ...

CVE-2022-2553

CVE-2022-2553 concerns the Booth cluster ticket manager. Multiple connected sources confirm the root cause: the authfile directive in the booth configuration is ignored, preventing proper authentication enforcement between nodes. This leads to a risk that nodes without the correct authentication ...

CVE-2022-33747

CVE-2022-33747 affects the Xen hypervisor on ARM, where unbounded memory consumption can occur when removing pages from a guest’s P2M in the 2nd-level page tables if large pages are used. This can exhaust the global memory pool and enable a DoS via memory exhaustion. The issue is documented in se...

CVE-2022-40964

CVE-2022-40964 describes improper access control in Intel PROSet/Wireless WiFi and Killer WiFi software that may allow a privileged local user to escalate privileges. Connected sources confirm this is associated with Intel PROSet/Wireless WiFi software, and multiple advisories (Debian firmware-no...

CVE-2023-3550

CVE-2023-3550 affects MediaWiki 1.40.0, where XML upload handling does not validate namespaces. This enables a low-privilege user to craft a malicious XML and, by enticing an administrator to open it, escalate privileges to administrator on the target wiki. Remediation in connected advisories poi...

CVE-2025-37811

CVE-2025-37811 is a Linux kernel vulnerability in the USB chipidea ci_hdrc_imx driver. The root cause is an unsafe dereference of data->usbmisc_data when usbmisc is NULL; the fix adds a guard before dereferencing the pointer. Reported under CVSSv3.1: AV Local, AC Low, PR Low, UI None, S U, C a...

CVE-2025-37903

The CVE-2025-37903 issue affects the Linux kernel DRM/AMD display path (drm/amd/display) in the amdgpu_dm_hdcp.c handling. The root cause is that the HDCP code copies pointers to amdgpu_dm_connector objects without incrementing their kref reference counts. In a USB‑C dock scenario, unplugging fre...

CVE-2025-38177

CVE-2025-38177 affects the Linux kernel’s scheduling subsystem (sch_hfsc). The documented fix makes hfsc_qlen_notify() idempotent to improve safety for callers such as qdisc_tree_reduce_backlog(). The described changes include guarding update_vf() (checking cl_nactive) and safely removing RB node...

CVE-2026-34757

CVE-2026-34757 affects libpng 1.0.9 through before 1.6.57. The vulnerability arises when a pointer obtained from png_get_PLTE, png_get_tRNS, or png_get_hIST is passed back into the corresponding setter on the same png_struct/png_info pair, causing the setter to read from freed memory and copy it ...

CVE-2010-2471

CVE-2010-2471 affects Drupal 5.x and 6.x and concerns the API function drupal_goto(), which is vulnerable to open redirection/phishing. Exploitation would allow an attacker to redirect users to an arbitrarily provided URL. Public disclosures in Red Hat, Debian, and Ubuntu advisories describe the ...

CVE-2010-3452

CVE-2010-3452 is a use-after-free in OpenOffice.org’s oowriter that can crash the application or, potentially, allow arbitrary code execution via crafted RTF tags. Affected: OpenOffice.org 2.x/3.x before 3.3. Remediation: apply vendor security updates; advisories from multiple vendors (openSUSE/S...

CVE-2010-3877

The CVE-2010-3877 issue affects the Linux kernel (as cited in MiracleLinux AXSA:2011-143:02 and related advisories) where get_name in net/tipc/socket.c does not initialize a structure, enabling local attackers to read uninitialized kernel stack memory and leak information. Impact is a local infor...

CVE-2010-3880

CVE-2010-3880 affects the Linux kernel (net/ipv4/inet_diag.c) prior to 2.6.37-rc2. The issue is improper auditing of INET_DIAG bytecode, enabling a local user to trigger a kernel infinite loop and cause a denial of service via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message conta...

CVE-2011-1752

This CVE affects Subversion 1.6.x prior to 1.6.17, specifically the mod_dav_svn Apache module. The root cause is a NULL pointer dereference when handling baselined WebDAV resource requests, allowing remote attackers to cause a denial of service (daemon crash). The issue is noted as exploited in t...

CVE-2014-7204

CVE-2014-7204 affects Exuberant Ctags, specifically the jscript.c path in version 5.8. A crafted JavaScript file can trigger an infinite loop, causing CPU and disk space exhaustion and resulting in a denial of service. The vulnerability has been addressed in downstream patches across multiple dis...

CVE-2014-9667

CVE-2014-9667 affects FreeType up to version 2.5.3, where sfnt/ttload.c performs offset+length calculations without restricting values, enabling a remote attacker to cause a denial of service via an integer overflow and out-of-bounds read when processing a crafted SFNT table. The vulnerability is...

CVE-2015-4737

CVE-2015-4737 affects Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier, with an unspecified vulnerability in Server: Pluggable Auth that could affect confidentiality for remote authenticated users. Public remediation is in vendor advisories (e.g., RHSA-2015:1647) upgrading MariaDB/My...

CVE-2015-6748

CVE-2015-6748 affects the jsoup HTML parser library with a cross-site scripting (XSS) vulnerability present in versions before 1.8.3. Exploitation details are not provided in the documents beyond the XSS note; remediation is to upgrade to jsoup 1.8.3 or later.

CVE-2015-6855

CVE-2015-6855 affects QEMU, where hw/ide/core.c does not properly restrict ATAPI device commands. The flaw allows a guest user to cause a denial of service (and potentially other impact) by issuing certain IDE commands, demonstrated by a WIN_READ_NATIVE_MAX to an empty drive that triggers a divid...

CVE-2015-7512

CVE-2015-7512 is a buffer overflow in the PC-Net II Ethernet controller emulation (hw/net/pcnet.c) of QEMU. The flaw occurs when handling packets for guests with a larger MTU, allowing a remote attacker to trigger a denial of service (guest OS crash) or potentially execute arbitrary code. Connect...

CVE-2015-8467

Samba CVE-2015-8467 affects the samldb_check_user_account_control_acl in dsdb/samdb/ldb_modules/samldb.c, with improper administrative privilege checks during machine account creation. A remote authenticated user could cause a denial of service by exposing Windows DCs in the same domain when a do...

CVE-2016-3166

CVE-2016-3166 describes a CRLF injection in Drupal 6.x before 6.38 when used with PHP before 5.1.2, due to the drupal_set_header function. The issue allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting by leveraging a module that outputs user-submitted data...

CVE-2016-9105

CVE-2016-9105 applies to QEMU, describing a memory leak in the v9fs_link function of hw/9pfs/9p.c that can be triggered by a reference to the source fid object, leading to denial of service via memory consumption. The IBM PowerKVM bulletin notes a fix in PowerKVM: version 3.1.0.2 (and PowerKVM 2....

CVE-2016-9427

CVE-2016-9427 is an integer overflow in the GC library (bdwgc) involving GC_MALLOC_ATOMIC, reported as a heap overflow that could crash the client and potentially allow arbitrary code execution. The issue affects multiple distributions; public details in documents include: before 2016-09-27 (bdwg...

CVE-2017-1000433

Summary: CVE-2017-1000433 affects PySAML2. Versions 4.4.0 and earlier allow login without a password when Python optimizations are enabled, enabling attacker impersonation of any user. The issue is widely reported across distros and advisories (Debian DLA-2577-1; DLA-1410-1; Ubuntu USN-3520-1; Ge...

CVE-2017-12902

CVE-2017-12902 affects tcpdump (Zephyr parser) up to version 4.9.2. The vulnerability is a buffer over-read in print-zephyr.c that could lead to information exposure or a crash. Affected product: tcpdump (Zephyr parser) before 4.9.2. Root cause: buffer over-read in Zephyr parser. Impact (as per s...

CVE-2017-17863

CVE-2017-17863 affects the Linux kernel 4.9.x up to 4.9.71, where the BPF verifier in kernel/bpf/verifier.c fails to check the relationship between pointer values and the BPF stack. This can allow local users to trigger a denial of service (integer overflow or invalid memory access) or potentiall...

CVE-2017-5667

CVE-2017-5667 affects QEMU’s SDHCI emulation: the sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c can cause an out-of-bounds heap access during multi-block data transfers, enabling a local privileged guest to crash the QEMU host or potentially execute arbitrary code. The description an...

CVE-2017-8363

CVE-2017-8363 affects libsndfile 1.0.28, where the flac_buffer_copy function (flac.c) is vulnerable to a heap-based out-of-bounds read via a crafted audio file, causing denial of service. Documented in multiple advisories; impact is a crash/DoS. Affected packages include libsndfile and various OS...

CVE-2017-9330

CVE-2017-9330 : QEMU (Quick Emulator) prior to 2.9.0, when built with USB OHCI Emulation support, allows a local guest OS user to trigger a denial of service (infinite loop) via an incorrect return value. This is a distinct issue from CVE-2017-6505. Connected sources list QEMU as the affected com...