CVE-2018-14611

CVE-2018-14611 affects the Linux kernel up to version 4.17.10. The vulnerability is a use-after-free in try_merge_free_space() when mounting a crafted Btrfs image, caused by missing chunk type flag checks in fs/btrfs/volumes.c via btrfs_check_chunk_valid . In the provided connected documents, Nes...

CVE-2018-6035

CVE-2018-6035 concerns insufficient isolation of DevTools from extensions in Chromium/Google Chrome, enabling a crafted extension to potentially leak local user data. Affected product: Google Chrome (Chromium base). Root cause: insufficient policy enforcement in DevTools that allows extension int...

CVE-2018-6064

CVE-2018-6064 is a type-confusion vulnerability in Google Chrome’s V8 engine, caused by incorrect handling of defineGetter that could lead to heap corruption via a crafted HTML page. Affected software: Google Chrome (V8/javascript engine) prior to version 65.0.3325.146. Impact: remote code execut...

CVE-2018-6109

CVE-2018-6109 affects Google Chrome/Chromium: the File API readAsText() could read the user-selected file repeatedly instead of once, allowing data exposure via a crafted HTML page on Chrome versions prior to 66.0.3359.117. Public advisories (e.g., Debian security notices) confirm a fix was relea...

CVE-2018-6144

CVE-2018-6144 affects Google Chrome via the PDFium library, where an out-of-bounds memory access could be triggered by a crafted PDF. The vulnerability is in PDFium used by Chrome prior to version 67.0.3396.62 and could enable remote code execution or memory corruption. Public advisories and Debi...

CVE-2019-10785

CVE-2019-10785 affects the Dojo/Dojox component, where dojox.xmpp.util.xmlEncode only encodes the first occurrence of each character, enabling cross-site scripting in affected Dojo versions prior to 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. The connected IBM and Nessus entries corroborat...

CVE-2019-13274

In CVE-2019-13274, the affected software is Xymon up to version 4.3.28, where the csvinfo CGI script is vulnerable due to insufficient filtering of the db parameter, enabling a cross-site scripting (XSS) issue. The connected sources consistently describe the vulnerability and its presence in Xymo...

CVE-2021-32277

CVE-2021-32277 affects faad2 up to version 2.10.0. The vulnerability is a heap-buffer-overflow in sbr_qmf_analysis_32 (sbr_qmf.c) that can allow code execution. Multiple connected advisories reference FAAD2 and this CVE, confirming the same underlying issue across Debian/Ubuntu/Nessus entries. Th...

CVE-2021-3624

The CVE-2021-3624 issue is confirmed in connected sources as an integer overflow in dcraw that allows arbitrary code execution when processing crafted X3F images. Amazon Linux 2 advisories ALAS2-2025-3017 and ALAS2-2025-3016 link this to dcraw (and LibRaw) and specify patched packages: dcraw 9.19...

CVE-2024-26702

CVE-2024-26702 : In the Linux kernel, the iio: magnetometer RM3100 driver added a boundary check for the value read from RM3100_REG_TMRC to prevent an out-of-bounds access that could crash rm3100_common_probe. The crash was caused by out-of-bounds access of the rm3100_samp_rates array due to hard...

CVE-2024-35829

CVE-2024-35829 affects the Linux kernel DRM Lima heap allocator. The issue is a memleak in lima_heap_alloc where, if lima_vm_map_bo fails, allocated resources were not properly deallocated, leading to memory leaks. Connected advisories (Astra Linux, Unity Nessus entry) confirm the same root cause...

CVE-2024-4453

GStreamer EXIF Metadata Parsing Integer Overflow (CVE-2024-4453) is detailed across connected advisories as a vulnerability in the GStreamer base plugins, caused by improper validation during EXIF metadata parsing, producing an integer overflow that can lead to arbitrary code execution in the aff...

CVE-2024-44977

In CVE-2024-44977, the Linux kernel module drm/amdgpu is affected by a missing TA binary size validation that could allow an out-of-bounds write. The issue is resolved by adding TA binary size validation to the TA handling path. The fix was cherry-picked from commit c0a04e3570d72aaf090962156ad085...

CVE-2025-37892

In CVE-2025-37892, the Linux kernel mtd/inftlcore had a missing error check for inftl_read_oob() in INFTL_findwriteunit(); the return value must be validated, with reference logic located in INFTL_deleteblock() to set the status to SECTOR_IGNORE and break the loop when inftl_read_oob() fails. Con...

CVE-2025-38415

CVE-2025-38415 is a Linux kernel vulnerability affecting Squashfs where sb_min_blocksize(sb, SQUASHFS_DEVBLK_SIZE) can return 0, causing msblk->devblksize to be 0 and leading to an out-of-bounds shift (64) in msblk->devblksize_log2. The issue stems from not handling a 0 return from sb_min_b...

CVE-2025-38461

CVE-2025-38461 affects the Linux kernel vsock transport code. Root cause: a TOCTOU race where transport assignment could race with module unload, risking a stale pointer and potential instability. The fix adds protection for new_transport and a lockdep assertion; updated kernels are released (exa...

CVE-2005-3120

CVE-2005-3120 concerns Lynx, a text-mode web/browser, with a stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier. The overflow can be triggered when Lynx handles article headers containing Asian characters while connecting to an NNTP server, causing Lynx to write past a b...

CVE-2015-0432

CVE-2015-0432 is listed against Oracle/MySQL/MariaDB 5.5.x in multiple advisories. Public details in connected docs show fixes in 5.5.41 (RHSA-2015:0117) and 5.5.45 (ELSA-2015-1628/CentOS-CE), indicating a vulnerability affecting MySQL/MariaDB server components related to InnoDB/DDL-Foreign Key; ...

CVE-2015-2317

CVE-2015-2317 affects Django’s utils.http.is_safe_url, where URL validation is insufficient in Django versions prior to 1.4.20, 1.5.x, 1.6.x prior to 1.6.11, 1.7.x prior to 1.7.7, and 1.8.x prior to 1.8c1. This enables remote attackers to perform cross-site scripting via a control character in a ...

CVE-2016-2120

CVE-2016-2120 affects PowerDNS Authoritative Server up to and including versions 3.4.10 and 4.0.1. An authorized user can crash the server by inserting a crafted DNS record in a zone they control and querying for that record. Root cause is an integer overflow when checking if the record content m...

CVE-2016-4323

CVE-2016-4323 describes a directory traversal in Pidgin’s MXIT protocol handling that could allow overwriting files via a crafted splash image filename sent by a server. Affected product: Pidgin (MXIT handling). Root cause: improper handling of MXIT data enabling uncontrolled file overwrite. Impa...

CVE-2016-9634

CVE-2016-9634 affects GStreamer’s FLIC decoder (flx_decode_delta_fli in gst/flx/gstflxdec.c). The IBM bulletin ties this to PowerKVM, noting GStreamer vulnerabilities in the FLC/FLI/FLX decoding plug-in could allow a remote attacker to crash an application or execute arbitrary code via a speciall...

CVE-2016-9964

The CVE corresponds to a CRLF injection in bottle.py (bottle 0.12.10) where redirect() does not filter a "\r\n" sequence, enabling HTTP header injection. Public disclosures across multiple feeds confirm the issue is caused by improper handling of redirections, with clear remediation guidance to u...

CVE-2017-15721

Irssi (terminal IRC client) before 1.0.5 is vulnerable to CVE-2017-15721 due to incorrectly formatted DCC CTCP messages, which can cause a NULL pointer dereference and denial of service. Affected component: DCC CTCP message handling. Root cause: improper formatting leading to dereference of NULL ...

CVE-2017-16355

CVE-2017-16355 affects Phusion Passenger 5.1.10 (fixed in Open Source 5.1.11 and Enterprise 5.1.10). When Passenger runs as root, an attacker can read arbitrary files by symlinking the REVISION file from the application root to a target file and querying passenger-status --show=xml, enabling a lo...

CVE-2017-17782

GraphicsMagick is affected by CVE-2017-17782 where a heap-based buffer over-read occurs in ReadOneJNGImage (coders/png.c) due to oFFs chunk allocation in 1.3.27a. Exploitation could contribute to denial of service. The issue has been addressed in later releases (e.g., GraphicsMagick 1.3.28); upgr...

CVE-2017-5046

CVE-2017-5046 (Chrome/Blink): V8 policy enforcement flaw allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure. Affected: Google Chrome prior to 57.0.2987.98 on Mac/Windows/Linux and 57.0.2987.108 on Android. Impact is information ...

CVE-2017-8028

In CVE-2017-8028, Pivotal Spring-LDAP (versions 1.3.0–2.3.1) may authenticate with an arbitrary password when the username is correct if using LDAP BindAuthenticator with DefaultTlsDirContextAuthenticationStrategy and certain LDAP servers, due to LDAP bind not taking effect without an explicit op...

CVE-2017-9404

CVE-2017-9404 (LibTIFF) : In LibTIFF 4.0.7, a memory leak in the function OJPEGReadHeaderInfoSecTablesQTable (tif_ojpeg.c) can be triggered by a crafted TIFF file, allowing an attacker to cause a denial of service. The provided connected documents confirm the existence of this CVE and its associa...

CVE-2018-0498

mbed TLS (ARM PolarSSL) vulnerability CVE-2018-0498 affects CBC-based ciphersuites and allows partial plaintext recovery via a cache-based side-channel attack. Affected versions are before 2.12.0, before 2.7.5, and before 2.1.14. Remediation is to upgrade to patched releases (e.g., 2.12.0+ and ne...

CVE-2018-0505

MediaWiki prior to versions 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains CVE-2018-0505: BotPasswords can bypass CentralAuth’s account lock. The issue enables bypassing access restrictions. Vendors/maintainers document upstream fix in 1.31.1; Arch Fedora advisories confirm upgrade to 1.31.1-1 is the...

CVE-2018-1000801

Vulnerability summary (CVE-2018-1000801) Okular

CVE-2018-5205

CVE-2018-5205 affects Irssi (terminal IRC client) up to version 1.0.5; incomplete escape codes may cause out-of-bounds access (accessing data beyond string end). Public advisories (Arch Linux ASA-201801-12; Debian DSA-4162-1) note this vulnerability as a denial-of-service risk and state upstream ...

CVE-2018-6111

CVE-2018-6111 corresponds to a memory misreference/object lifetime issue in Google Chrome’s DevTools network handler, prior to version 66.0.3359.117. A local attacker could run arbitrary code via a crafted HTML page. Affected: Chrome/Chromium DevTools. Root cause: memory misreference in DevTools ...

CVE-2018-6164

CVE-2018-6164 relates to Google Chrome/Chromium’s Blink component. The initial CVE description notes “insufficient origin checks for CSS content in Blink” which allowed a remote attacker to leak cross-origin data via a crafted HTML page. Connected documents corroborate a broader class of cross-or...

CVE-2018-6167

CVE-2018-6167 is a Google Chrome/Chromium URL spoofing vulnerability in the Omnibox due to incorrect handling of confusable characters in the URL formatter. The flaw allowed a remote attacker to spoof a domain by presenting IDN homographs via a crafted domain name, with the issue tracked under Ch...

CVE-2018-7322

Wireshark CVE-2018-7322 affects the epan/dissectors/packet-dcm.c logic in Wireshark 2.2.0–2.2.12 and 2.4.0–2.4.4, where an infinite loop could be triggered by crafted packets due to insufficient handling (integer wraparound) in the DCM dissector. This could lead to high CPU usage or denial of ser...

CVE-2018-7325

CVE-2018-7325 affects Wireshark 2.4.x and 2.2.x. The flaw is in epan/dissectors/packet-rpki-rtr.c where an infinite loop could be triggered by malformed data; it was addressed by validating a length field. Affected products include Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12. Impact is denial of servi...

CVE-2018-7336

Wireshark vulnerability CVE-2018-7336 affects the FCP protocol dissector (packet-fcp.c). A NULL pointer dereference could cause a crash in Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12; fixes were implemented in the dissector to validate pointers. Connected sources confirm broader impact: exploitation v...

CVE-2018-9262

Wireshark VLAN dissector (CVE-2018-9262) affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. Root cause: crash due to unbounded VLAN tag nesting recursion in epan/dissectors/packet-vlan.c. Impact: vulnerability could cause a crash (partial availability) via crafted packets. Remediation: update to a r...

CVE-2018-9263

Wireshark CVE-2018-9263 affects Kerberos dissector: versions 2.4.0–2.4.5 and 2.2.0–2.2.13 could crash. Root cause: insufficient key length check in Kerberos dissector; fixed in epan/dissectors/packet-kerberos.c by ensuring a nonzero key length. Remediation: upgrade to a fixed release (e.g., Wires...

CVE-2019-5783

CVE-2019-5783 corresponds to an "insufficient validation of untrusted input" vulnerability in Google Chrome’s DevTools prior to version 72.0.3626.81. The flaw enables a remote attacker to perform a Dangling Markup Injection attack by delivering a crafted HTML page, as described in the public CVE ...

CVE-2019-8922

BlueZ Bluetooth stack vulnerability CVE-2019-8922 affects bluetoothd through 5.48. The issue is a heap-based buffer overflow in the SDP handling: service_attr_req in sdpd-request.c does not verify destination buffer space, potentially causing a heap overflow when a crafted request yields a large ...

CVE-2020-20445

Summary of the CVE-2020-20445 family (FFmpeg 4.2): FFmpeg 4.2 is affected by a Divide By Zero in various code paths (notably libavcodec/lpc.h) that can cause a Denial of Service when processing crafted input. The connected advisories corroborate multiple CVEs tied to FFmpeg 4.2 (e.g., CVE-2020-20...

CVE-2020-6079

libmicrodns 0.1.0 contains multiple CVEs including CVE-2020-6079, a denial-of-service in resource allocation during mDNS parsing where allocated data may not be freed. An attacker can trigger this by sending repeated mDNS messages; overall impact includes potential service disruption. Upstream fi...

CVE-2021-32274

FAAD2 (faad2) versions up to 2.10.0 are affected by a heap-buffer-overflow in sbr_qmf_synthesis_64 (sbr_qmf.c), enabling potential code execution. This CVE (CVE-2021-32274) is referenced in multiple advisories (Debian/Ubuntu/DLA/DLA-2792, USN 6313-1) indicating a patch is available in newer faad2...

CVE-2021-38004

CVE-2021-38004 affects Chromium-based Google Chrome Autofill: insufficient policy enforcement allows a remote attacker to leak cross-origin data via a crafted HTML page, prior to version 95.0.4638.69. Affected component: Autofill in Chromium/Chrome; root cause is policy enforcement gaps. Impact: ...

CVE-2021-4063

CVE-2021-4063 is a Use-After-Free vulnerability in the Chromium browser engine’s Developer Tools before version 96.0.4664.93. The issue, described across multiple trusted sources, can allow a remote attacker to potentially cause heap corruption via a crafted HTML page, with impact including arbit...

CVE-2022-1923

CVE-2022-1923 affects the GStreamer gst-plugins-good1.0 demuxer for MKV files using bz2 decompression. The issue is a heap overwrite/segfault caused by an integer overflow in the matroskademux element when processing bzip decompression, with impact depending on the libc and OS (heap overwrite pos...

CVE-2022-28202

CVE-2022-28202 affects MediaWiki pre-1.35.6, 1.36.x pre-1.36.4, and 1.37.x pre-1.37.2. The issue is an XSS in which the widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or in Special:RevisionDelete. Public disclosures in multiple advisories co...