CVE-2022-35409

Mbed TLS DTLS heap over-read CVE-2022-35409: unauthenticated clients can send a malformed ClientHello to a DTLS server with MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN below a config-dependent threshold, causing a heap-based over-read of up to 255 bytes and possibly ...

CVE-2022-39286

CVE-2022-39286 affects Jupyter Core prior to 4.11.2, where loading configuration files could cause arbitrary code execution by executing untrusted files in the current working directory. The issue enables one user to run code as another in affected environments. A patch is available in Jupyter Co...

CVE-2022-39958

The CVE-2022-39958 issue affects the OWASP ModSecurity Core Rule Set (CRS) and enables a response-body bypass that can exfiltrate small data portions by repeatedly issuing HTTP Range requests. Affected legacy CRS: 3.0.x, 3.1.x; and currently supported: 3.2.1, 3.3.2. Upgrades are recommended to CR...

CVE-2023-40567

CVE-2023-40567 affects FreeRDP. It is an Out-Of-Bounds Write in the function clear_decompress_bands_data due to missing offset validation, potentially allowing memory write/crash. Addressed in versions 2.11.0 and 3.0.0-beta3; upgrade recommended. Connected sources (Astra Linux, AlmaLinux, Debian ...

CVE-2024-35825

Summary (CVE-2024-35825) : The issue in the Linux kernel USB gadget for CDC NCM NTB handling occurs when a zero wBlockLength is encountered. The code’s previous logic could repeatedly process the same NTB if block length is zero, risking a crash. The connected Astra Linux advisory confirms this v...

CVE-2025-37818

LoongArch Linux kernel vulnerability CVE-2025-37818: the issue originates from huge_pte_offset() returning a PMD slot pointer even when the underlying pmd points to an invalid_pte_table, which could be misinterpreted as a swap entry by generic is_swap_pte() and lead to a crash in pfn_swap_entry_t...

CVE-2025-37913

Summary: CVE-2025-37913 affects the Linux kernel’s net_sched/qfq when a netem child qdisc can cause the parent enqueue callback to be reentrant, risking memory corruption from adding the same classifier twice. The root cause is a double list add in the class when reentry occurs; the fix adds a gu...

CVE-2025-37948

CVE-2025-37948 affects the Linux kernel arm64 and is fixed by adding a BHB mitigation in the epilogue of BPF programs (cBPF) loaded via seccomp. The vulnerability arises when a classic cBPF program manipulates the branch history to influence speculative execution. The published details indicate t...

CVE-2010-4008

CVE-2010-4008 affects libxml2 prior to 2.7.8 and is triggered by malformed XPath expressions, causing an application crash via invalid memory access. It is noted in advisories tied to libxml2 updates for platforms using the library (e.g., Chrome and Safari stacks). The connected records reference...

CVE-2013-3783

CVE-2013-3783 affects the MySQL Server component in Oracle MySQL 5.5.31 and earlier. The vulnerability is described as unspecified and allows remote authenticated users to affect availability via unknown vectors related to the Server Parser. Connected sources reference this CVE within broader Ora...

CVE-2014-8369

The CVE-2014-8369 flaw affects the Linux kernel and is caused by a miscalculation in kvm_iommu_map_pages (virt/kvm/iommu.c) when handling a mapping failure. The vulnerability exists in kernels up to 3.17.2 and arises from an incorrect fix for CVE-2014-3601. This allows guest OS users with privile...

CVE-2015-5723

CVE-2015-5723 affects multiple Doctrine projects (Annotations <1.2.7; Cache <1.3.2 and 1.4.x <1.4.2; Common <2.4.3 and 2.5.x <2.5.1; ORM <2.4.8 or 2.5.x <2.5.1; MongoDB ODM <1.0.2; MongoDB ODM Bundle

CVE-2016-0495

The CVE-2016-0495 entry affects Oracle VM VirtualBox prior to 4.3.36 and 5.0.14, with remote attackers able to disrupt availability via unspecified Core-related vectors. The Mageia and Debian advisories confirm fixes in VirtualBox 4.3.36 and 5.0.14, and advise upgrading to these versions. Other c...

CVE-2016-0655

CVE-2016-0655 is an InnoDB-related issue in Oracle MySQL Server affecting 5.6.29 and earlier and 5.7.11 and earlier, and in MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14. The connected Debian advisories confirm this cluster of CVEs and state the fix is to upgrade MariaDB to 10.0.25 (and...

CVE-2016-10149

CVE-2016-10149 affects PySAML2 up to version 4.4.0, exposing an XML External Entity (XXE) vulnerability that allows a remote attacker to read arbitrary files via crafted SAML XML requests/responses. Root cause: improper XML processing/external-entity handling. Documented impact: read access to fi...

CVE-2016-7073

PowerDNS (authoritative server and recursor) prior to versions 3.4.11/4.0.2 and 4.0.4 respectively had a vulnerability CVE-2016-7073 where TSIG signatures were insufficiently validated during AXFR, due to a missing check of TSIG time and fudge values in AXFRRetriever. This allowed an attacker in ...

CVE-2017-1000445

CVE-2021-20189 is rejected; this CVE entry is not a valid vulnerability entry.

CVE-2017-13765

CVE-2017-13765 affects Wireshark multiple versions (2.4.0, 2.2.0–2.2.8, 2.0.0–2.0.14). The IrCOMM dissector could trigger a buffer over-read and crash the application due to insufficient length validation in plugins/irda/packet-ircomm.c. The issue is specifically in the IrCOMM dissector’s handlin...

CVE-2017-15418

CVE-2017-15418 concerns Google Chrome (Skia) prior to 63.0.3239.84, where use of uninitialized memory in Skia could allow a remote attacker to read sensitive data from a process memory via a crafted HTML page. Technical details across sources consistently identify Skia’s uninitialized values as t...

CVE-2018-12495

CVE-2018-12495 affects the DISCOUNT Markdown implementation (DISCOUNT 2.2.3a) via the quoteblock function in markdown.c in libmarkdown.a, causing a heap-based buffer over-read that can lead to denial of service. Several connected sources confirm related issues and fixes: CVE-2018-11468 (mkdio.c:_...

CVE-2018-5161

The CVE-2018-5161 issue affects Mozilla Thunderbird (including ESR branches) and is caused by crafted message headers that can cause the Thunderbird process to hang when receiving a message. Public records identify affected versions as Thunderbird ESR < 52.8 and Thunderbird

CVE-2018-5685

GraphicsMagick 1.3.27 is affected by CVE-2018-5685 due to a flaw in ReadBMPImage (coders/bmp.c) where processing a BMP image with a crafted bit-field mask value can cause an infinite loop, leading to denial of service. Public advisories note this affects GraphicsMagick and list fixed versions; De...

CVE-2018-6135

CVE-2018-6135 affects Google ChromeBlink UI: prior to 67.0.3396.62, Chrome loaded alerts from a new site without clearing the previous site, enabling remote domain spoofing via crafted HTML. Affected: Blink UI loading flow; root cause: not clearing prior site context when loading new alerts. Impa...

CVE-2018-6158

CVE-2018-6158 refers to a race condition in Google Chrome’s Oilpan component that could lead to heap corruption via a crafted HTML page. The vulnerability affects Chrome/Chromium before version 68.0.3440.75 (the Debian security advisories indicate fixed in 68.0.3440.75 for the stretch release). T...

CVE-2019-12067

CVE-2019-12067 affects QEMU’s AHCI emulation: the ahci_commit_buf function in ide/ahci.c can dereference a NULL ad->cur_cmd, causing a denial of service (host QEMU process denial). Public docs (NVD entry) confirm the vulnerability and impact (availability) with local access required; EulerOS/N...

CVE-2019-13452

In Xymon (through version 4.3.28), a buffer overflow vulnerability is reported in the reportlog.c component (CVE-2019-13452). The issue stems from a buffer overflow in reportlog.c, with CVSS data indicating high/critical severity across both CVSS2 and CVSS3 metrics. The provided documents do not ...

CVE-2019-20208

CVE-2019-20208 affects GPAC 0.5.2 through 0.8.0, where dimC_Read in isomedia/box_code_3gpp.c causes a stack-based buffer overflow. Connected sources confirm the vulnerability in GPAC and note that patches are available in GPAC updates (Debian DLA-2072-1, Mageia MGASA-2020-0137, and OSV/DLA entrie...

CVE-2020-29260

CVE-2020-29260 affects libvncserver/libvncclient v0.9.13, with a memory leak in rfbClientCleanup() causing resource retention and potential memory exhaustion. The vulnerability is labeled with CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH, network attack, no privileges, no user in...

CVE-2020-9498

Apache Guacamole (guacd) 1.1.0 and earlier is vulnerable to memory corruption when processing data received via RDP static virtual channels. crafted PDUs from a malicious or compromised RDP server could allow arbitrary code execution with guacd privileges. Connected advisories confirm this family...

CVE-2021-33293

CVE-2021-33293 affects Panorama Tools libpano13, where an out-of-bounds read in panoParserFindOLine() (parser.c) is triggered by version 2.9.20. Connected advisories confirm this vulnerability and document patches across distros: Debian fixed to 2.9.19+dfsg-2+deb9u2; openSUSE/SUSE and Ubuntu advi...

CVE-2021-33477

The CVE-2021-33477 entry affects rxvt-unicode (9.22), rxvt (2.7.10), mrxvt (0.5.4) and Eterm (0.9.7). Root cause: improper handling of certain escape sequences (ESC G Q) that can terminate a response with a newline, enabling potentially remote code execution. Public advisories confirm this across...

CVE-2021-4061

CVE-2021-4061 describes a type confusion in V8 within Chromium/Google Chrome prior to 96.0.4664.93, enabling a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability affects Chromium-based browsers and is tracked in multiple advisories; upgrade to versio...

CVE-2022-23034

CVE-2022-23034 affects the Xen hypervisor. A PV guest could cause a Denial of Service by unmapping a grant when IOMMU is enabled; a reference count mis-decrement could trigger a hypervisor bug check (underflow). The issue is one of several Xen vulnerabilities reported across multiple distros (Deb...

CVE-2022-30975

MuJS vulnerability CVE-2022-30975 affects Artifex MuJS up to version 1.2.0, where the function jsP_dumpsyntax in jsdump.c can dereference a NULL pointer. This has been observed in the MuJS releases (mujs-pp) and is reflected across advisories for multiple distributions (e.g., Debian and Fedora). ...

CVE-2023-46850

CVE-2023-46850 concerns OpenVPN 2.6.0–2.6.6, where a use-after-free when sending network buffers to a remote peer can cause undefined behavior, memory leakage, or remote code execution. Multiple connected advisories confirm this issue and document downstream fixes across distros: Debian/DSA-5555-...

CVE-2023-52618

CVE-2023-52618 affects the Linux kernel’s block/rnbd-srv path. The issue stems from copying dev_search_path and a second string into full_path, each sized PATH_MAX, which could truncate. The root cause was a potential truncation in snprintf(full_path, PATH_MAX, "%s/%s", dev_search_path, dev_name)...

CVE-2024-26688

CVE-2024-26688 — affected component: Linux kernel hugetlbfs . The vulnerability is a NULL pointer dereference in hugetlbfs_fill_super() triggered when configuring a hugetlb filesystem via fsconfig() with an invalid pagesize. The issue happens because ctx->hstate may be set to NULL in hugetlbfs...

CVE-2024-46544

CVE-2024-46544 affects Apache Tomcat Connectors (mod_jk) on Unix-like systems, with vulnerable versions 1.2.9-beta through 1.2.49. The issue is Incorrect Default Permissions that can allow local users to view/modify shared memory containing mod_jk configuration, potentially leading to information...

CVE-2025-38007

CVE-2025-38007 affects HID uclogic in the Linux kernel. Root cause: uclogic_input_configured() dereferences a NULL after devm_kasprintf() returns NULL due to allocation failure. Mitigation: a NULL check is added after devm_kasprintf() to prevent the dereference. Described fixes are documented in ...

CVE-2005-3624

CVE-2005-3624 affects multiple PDF tools (xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The issue is in CCITTFaxDecode handling in Stream.cc, where negative or very large integers can trigger integer overflows/underflows, leading to heap corruption. The documented impact...

CVE-2011-4107

CVE-2011-4107 affects phpMyAdmin 3.3.x (before 3.3.10.5) and 3.4.x (before 3.4.7.1). The vulnerability resides in the XML import plug‑in (libraries/import/xml.php) where simplexml_load_string can process XML data containing external entity references, enabling a remote authenticated user to read ...

CVE-2011-4539

CVE-2011-4539 affects ISC DHCP: dhcpd in 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 fails to properly handle regular expressions in dhcpd.conf, enabling remote attackers to cause a denial of service (daemon crash) via a crafted request packet. Public advisories and Nessus/OpenSSL patch ref...

CVE-2012-2130

CVE-2012-2130 affects PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption issue in DH and RSA key generation, leading to a Security Bypass. Public advisories (SUSE, UBuntu, Gentoo GLSA 201310-10, Gentoo NASL) confirm the same vector and impact across multiple distributions. The root cause is...

CVE-2014-6311

The CVE-2014-6311 entry describes a privilege-escalation flaw in ace prior to 6.2.7+dfsg-2 where generate_doygen.pl creates predictable file names in /tmp. The documented impact is elevated privileges for attackers who can leverage these predictable names. Affected component: ace (script generate...

CVE-2014-7815

CVE-2014-7815 affects the QEMU component: the function set_pixel_format in ui/vnc.c can be triggered remotely to crash the QEMU process (DoS) by sending a small value for bytes_per_pixel. The vulnerability is explicitly documented in multiple advisories and patches were issued in openSUSE/SUSE se...

CVE-2015-2697

CVE-2015-2697 affects MIT Kerberos 5 (krb5) prior to 1.14. The issue is triggered via a remote authenticated TGS request where the realm field starts with a null byte, enabling an out-of-bounds condition that can crash the KDC (denial of service). The connected document confirms the vulnerability...

CVE-2015-8327

CVE-2015-8327 is an incomplete blacklist vulnerability in util.c of the foomatic-rip component in cups-filters (and in foomatic-filters/Foomatic). It allows remote attackers to execute arbitrary commands via backtick characters in a print job. Affected are cups-filters 1.0.42 before 1.2.0 and Foo...

CVE-2016-1245

CVE-2016-1245 affects the Quagga zebra daemon before 1.0.20161017, with a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages due to BUFSIZ dependence. Connected documents corroborate the vulnerability in Quagga across multiple vendors; exploitation details are not provid...

CVE-2016-2317

GraphicsMagick’s SVG processing for CVE-2016-2317 comprises stack and heap buffer overflows in MVG/SVG rendering (TracePoint, GetToken, GetTransformTokens). Connected advisories confirm this was addressed in newer GraphicsMagick packages across distros (e.g., Debian Jessie: 1.3.20-3+deb8u2; Stret...

CVE-2016-8654

CVE-2016-8654 is a JasPer/JPC-codec vulnerability where a heap-buffer overflow occurs due to an undersized QMFB buffer. It affects Jasper versions before 2.0.0. Remediation is to upgrade Jasper to a fixed version (≥2.0.0); various advisories (CentOS CESA-2017:1208, IBM PowerKVM bulletin, Cloud Fo...