CVE-2008-4989

Summary: CVE-2008-4989 affects the GnuTLS library. The vulnerability lies in _gnutls_x509_verify_certificate in libgnutls/lib/x509/verify.c, where the library can trust a chain whose last certificate is an arbitrary self-signed trusted cert. This allows a man-in-the-middle to spoof a certificate ...

CVE-2010-0307

CVE-2010-0307 affects the Linux kernel (x86_64) prior to 2.6.32.8 where load_elf_binary in fs/binfmt_elf.c may call SET_PERSONALITY before confirming the ELF interpreter exists, enabling a local DoS via a 32-bit process launching a 64-bit one and triggering a segmentation fault (flush_old_exec re...

CVE-2010-0727

CVE-2010-0727 affects the Linux kernel: the gfs2_lock (and on RHEL 5/6 gfs_lock) fails to properly remove POSIX locks on files that are setgid without group-execute permission. This allows a local attacker to trigger a denial of service or system crash by locking a file on a GFS or GFS2 filesyste...

CVE-2010-4072

CVE-2010-4072 affects the Linux kernel: the copy_shmid_to_user function in ipc/shm.c (pre-2.6.37-rc1) does not initialize a certain structure, enabling local users to leak potentially sensitive information from kernel stack memory via the shmctl interface and the old shm interface. Affected produ...

CVE-2012-3167

CVE-2012-3167 : Unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, could allow remote authenticated users to affect availability via unknown vectors related to Server Full Text Search. The connected documents corroborate that this f...

CVE-2013-3804

CVE-2013-3804 affects Oracle MySQL Server prior to specific versions (5.1.69 and earlier, 5.5.31 and earlier, 5.6.11 and earlier). The issue is described as an unspecified vulnerability in the Server Optimizer that remote authenticated users can exploit to affect availability via unknown vectors....

CVE-2014-7824

CVE-2014-7824 affects D-Bus: vulnerable versions are D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2. The issue allows local users to cause a denial of service by queuing the maximum number of file descriptors, due to an incomplete fix for CVE-2014-3636. Affec...

CVE-2015-1270

CVE-2015-1270 affects the ICU library used by Google Chrome prior to 44.0.2403.89. The issue arises in ucnv_io_getConverterName within common/ucnv_io.cpp, where converter names starting with x- are mishandled, allowing a remote attacker to trigger a read of uninitialized memory (denial of service...

CVE-2015-5622

CVE-2015-5622 concerns the robustness of WordPress shortcode HTML tag filtering. The patch tightened the parsing in wp-includes/kses.php and related shortcode handling, with fixes released around WordPress 4.2.x and culminating in WordPress 4.2.3. Debian advisories also note fixes for this CVE in...

CVE-2015-6251

GnuTLS vulnerability (CVE‑2015‑6251) : A double‑free in the certificate DN decoding path, specifically in _gnutls_x509_dn_to_string(), can be triggered by very long DistinguishedName values in X.509 certificates. Affected versions are before 3.3.17 and 3.4.x before 3.4.4. Impact : remote denial o...

CVE-2015-8613

CVE-2015-8613 is a stack-based buffer overflow in QEMU’s megasas_ctrl_get_info when using SCSI MegaRAID SAS HBA emulation, allowing local guest users to crash the QEMU process (DoS) via a crafted CTRL_GET_INFO SCSI command. The vulnerability affects QEMU’s SCSI MegaRAID SAS HBA emulation and has ...

CVE-2016-2335

7-Zip/p7zip vulnerability CVE-2016-2335 affects the CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp for 7zip 9.20 and 15.05 beta, enabling out-of-bounds read and potential code execution via the PartitionRef in the Long Allocation Descriptor of a UDF file. Connected advisories confirm a ...

CVE-2016-5116

The CVE applies to the GD Graphics Library (libgd) prior to version 2.2.0, used in certain PHP 5.5.x configurations. The flaw in gd_xbm.c allows a long XBM image name to read process memory or trigger a stack-based buffer under-read, causing potential information disclosure or denial of service. ...

CVE-2016-7074

CVE-2016-7074 affects PowerDNS (authoritative server and recursor): insufficient TSIG validation allows MITM to alter AXFR content due to missing check that the TSIG record is last, enabling parsing of records outside the TSIG scope. Affected: PowerDNS versions before 3.4.11/4.0.2 and recursor be...

CVE-2016-8691

CVE-2016-8691 affects the JasPer JPEG-2000 library. The issue is a divide-by-zero in jpc_dec_process_siz triggered by a crafted BMP image (XRsiz value) used with the imginfo command, leading to denial of service (application crash). Public advisories confirm JasPer upstream fixes and distro updat...

CVE-2016-9104

CVE-2016-9104 affects QEMU’s 9pfs/9p.c (v9fs_xattr_read and v9fs_xattr_write). The issue is multiple integer overflows that can trigger out-of-bounds access, enabling a local attacker to cause a denial of service (QEMU process crash). Public docs in the connected set confirm the 9pfs-related over...

CVE-2016-9106

CVE-2016-9106 is a memory leak in v9fs_write (hw/9pfs/9p.c) of QEMU. A local guest administrator can cause DoS by exhausting memory. The IBM PowerKVM bulletin notes fixes for PowerKVM 2.1/3.1 via PowerKVM 3.1.0.2; other public advisories reference the vulnerability as part of broader QEMU issues ...

CVE-2016-9907

The CVE-2016-9907 issue affects Quick Emulator (QEMU) built with usb-guest USB redirector support. It describes a memory-leak flaw that can occur while destroying the usbredir device (usbredir_handle_destroy), allowing a guest user to leak host memory and potentially cause DoS on the host. Red Ha...

CVE-2017-11107

CVE-2017-11107 affects phpLDAPadmin up to version 1.2.3, with a cross-site scripting vulnerability in htdocs/entry_chooser.php via form fields, the rdn, or container parameters. The issue stems from insufficient input sanitization in that component, enabling injected HTML/JavaScript in a user’s c...

CVE-2017-12380

CVE-2017-12380 affects ClamAV versions 0.99.2 and earlier. The root cause is improper input validation in mbox.c during certain mail parsing functions, allowing an unauthenticated remote attacker to send a crafted email that triggers a NULL pointer dereference and causes a DoS. The issue is remed...

CVE-2017-12598

CVE-2017-12598 affects OpenCV up to version 3.3.0, where an out-of-bounds read occurs in cv::RBaseStream::readBlock (modules/imgcodecs/src/bitstrm.cpp) when reading an image with cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case. The connected documents confirm the vulnerab...

CVE-2017-13687

CVE-2017-13687 affects tcpdump, specifically the Cisco HDLC parser: a buffer over-read in print-chdlc.c:chdlc_print() present in tcpdump prior to version 4.9.2. Connected documents confirm this is tied to the Cisco HDLC parser within tcpdump and describe the vulnerability as a buffer over-read/ov...

CVE-2017-13737

GraphicsMagick 1.3.26 contains an invalid free in MagickFree (memory.c), leading to a remote denial of service. The description indicates the vulnerability is in the GraphicsMagick package, but the provided documents do not specify a patched version or concrete remediation steps. There are no exp...

CVE-2017-15410

CVE-2017-15410 describes a use-after-free in PDFium used by Google Chrome before version 63.0.3239.84, leading to potential heap corruption via a crafted PDF file. Related sources (CNVD-2018-22400) corroborate a memory misreference in PDFium prior to 63.0.3239.84, enabling remote exploitation. Th...

CVE-2017-17502

GraphicsMagick 1.3.26 contains a vulnerability in ReadCMYKImage (coders/cmyk.c): a heap-based buffer over-read triggered by a crafted file. Impact per the entry includes partial confidentiality, integrity, and availability. The available data do not specify affected platforms/versions beyond Grap...

CVE-2017-17760

CVE-2017-17760 affects OpenCV 3.3.1 via a Buffer Overflow in cv::PxMDecoder::readData in grfmt_pxm.cpp caused by an incorrect size value. Connected documents indicate fixes are available in OpenCV updates (e.g., Debian DLA-2799-1 for OpenCV on Debian 9 and OpenSUSE security update openSUSE-2018-5...

CVE-2017-2918

Blender 2.78c has an exploitable integer overflow in the image loading code that can trigger a buffer overflow and execute code when a crafted .blend file is opened or used as a library. Mitigation is upgrading to upstream Blender 2.79b (as cited in multiple advisories), which fixes the issue. Th...

CVE-2017-3461

CVE-2017-3461 is a privilege-based vulnerability in Oracle MySQL Server (Server: Security: Privileges). Affected versions are 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue allows a high-privilege attacker with network access to cause a hang or complete denial of servic...

CVE-2017-7980

CVE-2017-7980 detailed : A heap-based buffer overflow in QEMU’s Cirrus CLGD 54xx VGA Emulator (Cirrus CLGD 54xx) used with Quick Emulator/ QEMU up to version 2.8 enables a local privileged guest to execute arbitrary code or cause a denial of service by exploiting a vulnerability when a VNC client...

CVE-2017-9865

CVE-2017-9865 : In Poppler 0.54.0, the function GfxImageColorMap::getGray in GfxState.cc can trigger a denial of service via a crafted PDF, due to missing color-map validation in ImageOutputDev.cc. The issue enables a stack-based buffer over-read that can crash the application. The vulnerability ...

CVE-2018-6048

CVE-2018-6048 is a Chrome Blink vulnerability where insufficient enforcement of the referrer policy allowed leakage of referrer information via a crafted HTML page. Affected product: Google Chrome (Blink component). Root cause: bypass of the referrer policy in Blink leading to potential informati...

CVE-2018-6051

CVE-2018-6051 affects Google Chrome prior to 64.0.3282.119. The XSS Auditor component could leak referrer information by reporting a URL to a crafted page from a page with a different origin, exposing potentially sensitive details. Public references in the Chrome 64 stable release note confirm CV...

CVE-2018-6070

CVE-2018-6070 is a CSP bypass vulnerability in Google Chrome/Chromium where an attacker could lure a user to install a crafted extension to bypass Content Security Policy. Technical details across connected records confirm the flaw resides in how extensions interact with WebUI CSP enforcement, en...

CVE-2018-6085

CVE-2018-6085 describes a use-after-free in Google Chrome’s Networking Disk Cache. The vulnerability affects Chrome/Chromium’s Disk Cache component and is triggered by a crafted HTML page, enabling a remote attacker to execute arbitrary code. The vulnerability is characterized as a use-after-free...

CVE-2018-6099

Concretely, CVE-2018-6099 affects Google Chrome/Chromium by a Cross-Origin Resource Sharing bypass in Service Workers (Blink). The root cause is a lack of proper CORS checks in Blink/ServiceWorker handling, enabling a remote attacker to leak limited cross-origin data via a crafted HTML page. The ...

CVE-2018-8828

Kamailio buffers overflow (CVE-2018-8828) : Affected versions up to 4.4.7, 5.0.x up to 5.0.6, and 5.1.x up to 5.1.2 contain an off-by-one heap overflow in the tmx_check_pretran.c when receiving a specially crafted REGISTER message with a malformed branch or From tag. The vulnerability can cause d...

CVE-2019-16220

Summary: CVE-2019-16220 affects WordPress before 5.2.3. The issue is an open redirect in wp_validate_redirect (wp-includes/pluggable.php) when a provided URL path does not start with "/". Root cause: insufficient validation/sanitization of redirect URLs leads to an open redirect. Impact: potentia...

CVE-2019-6338

CVE-2019-6338 maps to the same underlying issue as CVE-2018-1000888 in the PEAR Archive_Tar library used by Drupal Core. Connected sources describe a PHP object-injection vulnerability in Archive_Tar before 1.4.4, where certain file operations (e.g., file_exists, is_file, is_dir) combined with ex...

CVE-2021-28021

CVE-2021-28021 is a buffer overflow in stb_image.h (stb 2.26) inside the function stbi__extend_receive triggered by a crafted JPEG file. Connected advisories confirm affected libraries libstb/stb and related packages across multiple distros (Debian, Gentoo, SUSE, Nessus plugins). Impact per sourc...

CVE-2021-32276

CVE-2021-32276 concerns Faad2 up to version 2.10.0. Affected component: libfaad, specifically the function get_sample() in output.c. Root cause: NULL pointer dereference, which can be triggered to cause Denial of Service. Documented impact is partial availability degradation via DoS. Exploitation...

CVE-2021-32434

CVE-2021-32434 affects abcm2ps version 8.14.11, with an out-of-bounds read in calculate_beam (draw.c). Several connected advisories confirm the issue and note related CVEs (32435/32436) as part of the same package update impact. Public details across Debian, openSUSE, Mageia, Fedora, OpenSUSE-SU ...

CVE-2021-36056

CVE-2021-36056 affects XMP Toolkit SDK 2020.1 and earlier. The vulnerability is a heap-based buffer overflow in the Exempi XMP implementation that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a crafted file (user interaction). S...

CVE-2021-43331

GNU Mailman before 2.1.36 is affected. A crafted URL to the Cgi/options.py user options page can trigger cross-site scripting (XSS) by executing arbitrary JavaScript. Public sources confirm fixes in Mailman 2.1.36 and later; apply the upgrade to mitigate. The documentation also references related...

CVE-2022-24599

CVE-2022-24599 concerns memory leak in autofile Audio File Library 0.3.6, specifically in printfileinfo() where the copyrightstring data is not properly truncated with zero bytes, potentially allowing leakage of sensitive information via a crafted file. Connected advisories confirm the issue acro...

CVE-2022-24917

The CVE-2022-24917 describes an authenticated-user cross-site scripting issue in Zabbix frontend: an attacker can generate a link containing reflected Javascript on a services page and persuade other users to open it. The payload executes only if the victim’s CSRF token value (which is periodical...

CVE-2022-26362

CVE-2022-26362 is a Xen hypervisor local vulnerability on x86 PV guests caused by a race in typeref acquisition. The issue can let a guest re-establish a read/write mapping before writeability is prohibited due to an prematurely issued TLB flush, enabling potential unauthorized memory access. The...

CVE-2022-32293

CVE-2022-32293 : In ConnMan up to 1.41, a man-in-the-middle attack against a WISPR HTTP query can trigger a use-after-free in WISPR handling, causing crashes or code execution. Affected products include ConnMan’s WISPR component; multiple advisories describe this alongside related CVEs. Remediati...

CVE-2022-35409

Mbed TLS DTLS heap over-read CVE-2022-35409: unauthenticated clients can send a malformed ClientHello to a DTLS server with MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN below a config-dependent threshold, causing a heap-based over-read of up to 255 bytes and possibly ...

CVE-2022-39286

CVE-2022-39286 affects Jupyter Core prior to 4.11.2, where loading configuration files could cause arbitrary code execution by executing untrusted files in the current working directory. The issue enables one user to run code as another in affected environments. A patch is available in Jupyter Co...

CVE-2022-39958

The CVE-2022-39958 issue affects the OWASP ModSecurity Core Rule Set (CRS) and enables a response-body bypass that can exfiltrate small data portions by repeatedly issuing HTTP Range requests. Affected legacy CRS: 3.0.x, 3.1.x; and currently supported: 3.2.1, 3.3.2. Upgrades are recommended to CR...