10003 matches found
CVE-2021-20302
CVE-2021-20302 affects OpenEXR, specifically the TiledInputFile component. A crafted single-part non-image can be processed by OpenEXR, triggering a floating-point exception and impacting availability. The connected Debian LTS advisory (DLA-3236-1) states this is fixed in OpenEXR version 2.2.1-4....
CVE-2022-31086
CVE-2022-31086 affects LDAP Account Manager (LAM). In versions prior to 8.0, an incorrect regular expression allows uploading PHP scripts to the /config/templates/pdf directory, which could enable Remote Code Execution if that directory is accessible. This is not a default configuration of LAM. T...
CVE-2015-5260
SPICE vulnerability CVE-2015-5260 is a heap-based buffer overflow in SPICE prior to 0.12.6 caused by improper bounds handling of certain QXL commands related to the surface_id parameter. A local attacker could cause a denial of service (heap corruption and QEMU-KVM crash) or possibly execute code...
CVE-2015-8241
CVE-2015-8241 affects libxml2 (notably the xmlNextChar path) where improper state checking can lead to a heap-based buffer over-read, DoS, and potential information disclosure. Public docs place the vulnerable component in libxml2 2.9.2; exploitation requires crafted XML data. Several connected a...
CVE-2015-8683
The set of connected documents confirms multiple LibTIFF vulnerabilities, notably CVE-2015-8683 (out-of-bounds read in putcontig8bitCIELab) among many others (CVE-2014-8127, CVE-2014-8130, CVE-2015-8665, CVE-2015-8668, etc.). Affected component is LibTIFF (primarily 4.0.x) with various tools (tif...
CVE-2016-2385
CVE-2016-2385 describes a heap-based buffer overflow in Kamailio’s SEAS module (encode_msg.c) that can be triggered by oversized SIP packets, potentially leading to memory corruption, a process crash, or remote code execution. The vulnerability affects Kamailio versions prior to 4.3.5; the Fixed ...
CVE-2016-9103
CVE-2016-9103 affects QEMU’s 9pfs/v9fs_xattrcreate in hw/9pfs/9p.c. The vulnerability allows local authenticated guests to obtain sensitive host heap memory information by reading xattribute values before writing to them. Technical context and host-memory disclosure are supported by connected sou...
CVE-2016-9602
CVE-2016-9602 is tied to QEMU (qemu-kvm) built with VirtFS where, before version 2.9, a privileged guest user can trigger an improper link following to access the host filesystem outside the shared folder, potentially escalating privileges on the host. The connected EulerOS advisory confirms this...
CVE-2017-11359
CVE-2017-11359 affects SoX 14.4.2: the wavwritehdr function in wav.c can be triggered by a crafted snd file to cause a denial of service (divide-by-zero error and application crash) during WAV conversion. Public advisories note fixes/updates (e.g., Debian 14.4.1-5+deb8u3; DLA 1705-1; Alpine pages...
CVE-2017-14733
CVE-2017-14733 affects GraphicsMagick 1.3.26 where ReadRLEImage in coders/rle.c mishandles RLE headers that specify too few colors, enabling a heap-based buffer over-read and a denial of service via a crafted image. Connected advisories indicate the issue was addressed in later GraphicsMagick rel...
CVE-2017-2624
CVE-2017-2624 affects the X.Org X server (xorg-x11-server) before 1.19.0. The vulnerability arises from using memcmp() to compare the received MIT cookie against a series of valid cookies; since many memcmp() implementations stop at the first differing byte, an observable timing差 can leak informa...
CVE-2017-2836
CVE-2017-2836 : FreeRDP contains an exploitable denial-of-service in the handling of proprietary server certificates. A specially crafted challenge packet can cause the program to terminate, resulting in a DoS condition. Affected component: FreeRDP 2.0.0-beta1+android11 (reading of server certifi...
CVE-2017-5040
CVE-2017-5040 affects Chromium/Chromium-based browsers. The issue is an information disclosure in the V8 JavaScript engine caused by a missing neutering check, enabling a remote attacker to read memory values via a crafted HTML page. The vulnerability is in the V8 component of Chromium before ver...
CVE-2018-0503
CVE-2018-0503 affects MediaWiki releases prior to 1.31.1 (also noted for 1.30.1, 1.29.3 and 1.27.5). Root cause: the $wgRateLimits entry for 'user' incorrectly overrides the 'newbie' limit, enabling a remote authenticated user to bypass access restrictions. Impact: possible bypass of site-imposed...
CVE-2018-10982
CVE-2018-10982 affects the Xen hypervisor (through 4.10.x) where x86 HVM guests can cause a denial of service or potentially gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode (vHPET interrupt injection). Affected component: Xen hypervisor (x86 HVM path) ...
CVE-2018-6060
CVE-2018-6060 describes a use-after-free in Chrome/Chromium’s Blink/WebKit (WebAudio) prior to version 65.0.3325.146. The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. The Debian advisories and Chromium security updates indicate fixes in Chromium/Chr...
CVE-2018-6152
CVE-2018-6152 is a Chrome/Chromium developer tools vulnerability where the Page.downloadBehavior backend could cause downloaded files to be treated as safe, enabling a crafted HTML page and user interaction to potentially escape the sandbox. Connected sources indicate this issue affected Chromium...
CVE-2018-6174
CVE-2018-6174 : An integer overflow in the SwiftShader library used by Google Chrome/Chromium prior to 68.0.3440.75 allows remote code execution via a crafted HTML page. Public notes across connected sources confirm the issue in Chromium/Chrome’s SwiftShader component, with Debian/DSA and Gentoo ...
CVE-2018-7557
CVE-2018-7557 affects FFmpeg (libavcodec/utvideodec.c: decode_init) in FFmpeg versions 2.8 through 3.4.2. A crafted AVI file with specific chroma subsampling dimensions can trigger a denial of service via an out-of-bounds/out-of-array read. Connected sources confirm the component and root cause b...
CVE-2019-18976
CVE-2019-18976 affects Sangoma Asterisk and Certified Asterisk up to 13.x; a NULL pointer dereference and crash can occur when receiving a re-invite that initiates T.38 faxing if the SDP has a port of 0 and no c-line. Public details confirm the affected file is res_pjsip_t38.c and the issue is a ...
CVE-2019-8383
AdvanceCOMP vulnerability CVE-2019-8383: an invalid memory address in adv_png_unfilter_8 (lib/png.c) can be triggered by a crafted file, allowing a Denial of Service (segmentation fault) or unspecified impact when opened. Public advisories (Debian, Mageia, Red Hat/CentOS, Fedora) document this is...
CVE-2020-12460
OpenDMARC (affected: 1.3.2 and 1.4.x up to 1.4.0-Beta1) is vulnerable to an improper null termination in opendmarc_xml_parse, causing a one-byte heap overflow and remote memory corruption when parsing crafted DMARC aggregate reports. Affected components/file: opendmarc_xml_parse in OpenDMARC. Roo...
CVE-2020-12626
Roundcube Webmail (Roundcube Webmail) CVE-2020-12626 is a CSRF vulnerability where an attacker can cause an authenticated user to be logged out by abusing POST requests. The issue arises from incorrect handling of login/logout POSTs and is documented across multiple connected sources, including D...
CVE-2020-20739
CVE-2020-20739 affects VIPS (libvips) where im_vips2dz in libvips/deprecated/im_vips2dz.c uses an uninitialized variable, potentially leaking a remote server path or stack address. Multiple advisories reference VIPS and CVE-2020-20739 in the context of the upstream library and vendor updates. Deb...
CVE-2020-21534
Summary (CVE-2020-21534) fig2dev 3.2.7b contains a global buffer overflow in the get_line function (read.c). The vulnerability is discussed in multiple advisories across Linux distros (Ubuntu, Debian, openSUSE/openSUSE-SU-2021:1481-1, SUSE/openSUSE patches). Affected component is the fig2dev util...
CVE-2020-36244
CVE-2020-36244 affects the GENIVI diagnostic log and trace (DLT) daemon, dlt-daemon, with a heap-based buffer overflow in versions prior to 2.18.6 that could enable remote code execution. The issue, assigned to DLT-Daemon, is documented across multiple feeds (NVD/NASL/OSV/Debian LTS) and is refle...
CVE-2020-8003
CVE-2020-8003 applies to virglrenderer, specifically a double-free in vrend_renderer.c that can cause a denial of service when a texture allocation fails. The root cause is that vrend_renderer_resource_allocated_texture is not an appropriate place for a free. Public documentation in the connected...
CVE-2021-21375
CVE-2021-21375 affects the pjproject/PJSIP library (versions 2.10 and earlier). The issue arises after an initial INVITE when two 183 responses are received and the first triggers negotiation failure, causing a crash and a denial of service. Mitigation: upgrade to patched pjproject/PJSIP (per GLS...
CVE-2021-27347
CVE-2021-27347 affects lrzip 0.631 (Irzip) with a use-after-free in lzma_decompress_buf in stream.c, enabling DoS via a crafted compressed file. Debian and Ubuntu advisories indicate fixed packages: oldstable (buster) 0.631+git180528-1+deb10u1; stable (bullseye) 0.641-1+deb11u1. Other related CVE...
CVE-2021-30157
MediaWiki CVE-2021-30157 affects the core web UI: on ChangesList pages (Special:RecentChanges, Special:Watchlist) rcfilters-filter-* labels were emitted as unescaped HTML, enabling cross-site scripting. Affected versions are MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. The is...
CVE-2021-3563
CVE-2021-3563 affects OpenStack Keystone. The issue stems from keystone only validating the first 72 characters of an application secret, enabling bypass of some password complexity checks and affecting confidentiality and integrity. The vulnerability is listed across multiple advisories (e.g., D...
CVE-2021-43845
CVE-2021-43845 affects the PJPROJECT/JAMI stack used by PJMEDIA. In version 2.11.1 and earlier, processing of incoming RTCP XR messages with a block may not validate the data field against the packet size, potentially enabling out-of-bounds reads. Debian/DSA/DLA entries note fixes in ring (embedd...
CVE-2022-1924
CVE-2022-1924 describes a DOS/heap-overwrite risk in the gstreamer good plugins’ MKV demuxer when using LZO decompression. The root cause is an integer overflow in the matroskademux element’s LZO decompression path, which can lead to a segfault or a heap overwrite depending on the libc/OS behavio...
CVE-2023-2952
Wireshark CVE-2023-2952: XRA dissector infinite loop allowing denial of service via crafted capture files or packet injection. Affected versions: Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13. Mitigation: upgrade to Wireshark 4.0.6 or newer (fixed in multiple advisories; e.g., Debian/AlmaLinux). Exploit...
CVE-2023-52642
CVE-2023-52642 concerns a Linux kernel issue in the media: rc subsystem where attaching/detaching BPF programs could require write permission, with an auxiliary CAP_NET_ADMIN requirement. The main impact described across multiple advisories is a locally exploitable condition in kernel space that ...
CVE-2025-37969
In CVE-2025-37969, the Linux kernel vulnerable component is the IIO IMU driver st_lsm6dsx (read_tagged_fifo). The issue allows a potential lockup when pattern_len is zero and the device FIFO is not empty, risking an infinite loop and elevated availability impact. The vulnerability has been fixed ...
CVE-2025-37970
CVE-2025-37970 affects the Linux kernel IIO imu driver st_lsm6dsx_read_fifo. The root cause is a possible infinite loop when pattern_len is zero and the device FIFO is not empty, leading to a local lockup and availability impact. The vulnerability is addressed by a fix in the kernel (as described...
CVE-2025-38239
CVE-2025-38239 affects the Linux kernel megaraid_sas driver. On systems with DRAM interleave enabled, an out-of-bounds access can occur due to an invalid node index in megasas_alloc_irq_vectors during megaraid_sas probing, which triggers UBSAN reports (array-index-out-of-bounds in topology.h: ind...
CVE-2007-6206
CVE-2007-6206 affects the Linux kernel (2.4.x and 2.6.x up to 2.6.24-rc3). The issue lies in the do_coredump function in fs/exec.c, where the core dump file’s UID is not changed if a core dump already exists in the same location when a root-owned process dumps a core. This behavior could allow a ...
CVE-2008-4796
The CVE-2008-4796 issue concerns the _httpsrequest function in Snoopy (Snoopy.class.php) of Snoopy 1.2.3 and earlier, used by Nagios Core and related products (e.g., Nagios-related components referenced in connected records). The vulnerability allows remote attackers to execute arbitrary commands...
CVE-2010-3310
CVE-2010-3310 refers to multiple signedness errors in net/rose/af_rose.c of the Linux kernel, fixed before 2.6.36-rc5-next-20100923. The vulnerability allows local users to induce a denial of service (heap memory corruption) or possibly cause other unspecified impacts through a rose_getname call ...
CVE-2013-4327
CVE-2013-4327 describes a Polkit race condition used when systemd communicates with a polkit authority via D-Bus, enabling local users to bypass access restrictions using a PolkitUnixProcess PolkitSubject race with (1) setuid processes or (2) pkexec. Connected advisories (GLSA-201406-27, related ...
CVE-2013-7439
CVE-2013-7439 affects X.Org libX11 and the X11R6.x include/X11/Xlibint.h, where multiple off-by-one errors in the MakeBigReq and SetReqLen macros can allow a remote attacker to trigger a buffer overflow. The vulnerability exists in libX11 prior to version 1.6.0. Impact as stated: unspecified in d...
CVE-2014-1705
CVE-2014-1705 affects Google Chrome’s V8 engine. Chrome versions before 33.0.1750.152 (OS X/Linux) and 33.0.1750.154 (Windows) are affected by a memory corruption bug in V8 that could be exploited remotely to cause a denial of service or other impacts. Public documentation in the provided sources...
CVE-2014-3686
CVE-2014-3686 affects wpa_supplicant and hostapd (versions 0.7.2–2.2) where using wpa_cli or hostapd_cli with action scripts can lead to remote arbitrary command execution via a crafted frame. Root cause involves unsanitized input passed to a system() call from action scripts, enabling command in...
CVE-2015-0837
CVE-2015-0837 affects Libgcrypt (before 1.6.3) and GnuPG (before 1.4.19). It enables a timing side-channel attack on modular exponentiation using a pre-computed table, related to a Last-Level Cache side-channel attack. The description notes the timing differences that could allow an attacker to o...
CVE-2015-1821
CVE-2015-1821 affects the chrony project (chronyd/chronyc). The issue is an out-of-bounds write flaw in how chrony stores certain addresses when configuring NTP or cmdmon access, triggered by a subnet size not divisible by four and an address with a nonzero bit in the subnet remainder. This can a...
CVE-2015-8560
CVE-2015-8560 describes an incomplete blacklist vulnerability in foomatic-rip (util.c) used by cups-filters 1.0.42 and in foomatic-filters (Foomatic 4.0.x). The issue allows remote attackers to execute arbitrary commands by injecting a ; (semicolon) in a print job. Root cause is failure to fully ...
CVE-2016-1688
CVE-2016-1688 is an out-of-bounds read in the V8 JavaScript library used by Google Chrome/Chromium prior to 51.0.2704.63. The root cause involves mishandling external string sizes, enabling a remote attacker to trigger a denial of service via crafted JavaScript. Remediation: upgrade to Chrome/Chr...