CVE-2012-3197

CVE-2012-3197 is an unspecified vulnerability in the MySQL Server component affecting Oracle MySQL versions 5.1.64 and earlier and 5.5.26 and earlier. The issue is described as allowing remote authenticated users to affect availability via unknown vectors related to Server Replication. Connected ...

CVE-2013-0339

CVE-2013-0339 affects libxml2 up to version 2.9.1 and is an XML External Entity (XXE) issue. The root cause is improper handling of external entities expansion unless an application developer uses xmlSAX2ResolveEntity or xmlSetExternalEntityLoader. Impact cited includes potential denial of servic...

CVE-2014-3534

CVE-2014-3534 (Linux kernel, s390) : The vulnerability in arch/s390/kernel/ ptrace.c allows a local user to bypass restrictions on address-space control with PTRACE_POKEUSR_AREA, gaining read/write access to kernel memory and potentially elevation of privileges via a crafted ptrace call. Affected...

CVE-2014-8098

Affected software: X.Org X Window System (X.Org Server), GLX extension in X.Org X server prior to version 1.16.3. Root cause: several functions exposed via the GLX and other X11 core protocol paths accept crafted length or index values, enabling out-of-bounds read/write that could crash the serve...

CVE-2014-9669

CVE-2014-9669 affects FreeType (SFNT cmap handling). The issue arises from multiple integer overflows in sfnt/ttcmap.c prior to FreeType 2.5.4, enabling a remote attacker to trigger a denial of service via a crafted cmap SFNT table and possibly cause memory corruption or out-of-bounds reads. Conn...

CVE-2016-0610

CVE-2016-0610 affects Oracle MySQL <=5.6.27 and MariaDB <=10.0.22 / 10.1.x

CVE-2016-1629

Google Chrome before 48.0.2564.116 is affected by CVE-2016-1629, a vulnerability in the Blink/Same Origin Policy and sandbox where a remote attacker could bypass SOP and escape the sandbox via unspecified vectors. The issue is mitigated by upgrading to Chrome 48.0.2564.116 or later (as reflected ...

CVE-2016-1691

CVE-2016-1691 affects the Skia library used by Google Chrome prior to 51.0.2704.63. The issue arises from mishandling of coincidence runs in SkOpCoincidence.cpp and SkPathOpsCommon.cpp, enabling a remote attacker to trigger a heap-based buffer overflow and cause a denial of service (with possible...

CVE-2016-6130

CVE-2016-6130 is a race condition in the Linux kernel's sclp_ctl_ioctl_sccb path (drivers/s390/char/sclp_ctl.c) prior to 4.6 that can allow local users to disclose kernel memory by altering a length field (double fetch). The vulnerability is described as a local information-disclosure due to memo...

CVE-2016-9560

CVE-2016-9560 describes a stack-based buffer overflow in the JasPer JPEG-2000 library. The overflow occurs in the function jpc_tsfb_getbands2 inside jpc_tsfb.c and affects JasPer before version 1.900.30 . An attacker could trigger the overflow by supplying a crafted image, with the impact describ...

CVE-2017-12136

CVE-2017-12136 affects Xen 4.6.x–4.9.x. The issue is a race condition in grant table maptrack free list handling, enabling a malicious guest administrator to crash the host or escalate privileges to the host. Public advisories (GLSA 201801-14; SUSE SU-2017:2327-2) document the fix as Xen upgrades...

CVE-2017-12937

CVE-2017-12937 affects GraphicsMagick 1.3.26, where the ReadSUNImage function in coders/sun.c can trigger a heap-based buffer over-read. Debi an/Ubuntu/Fedora advisories (and USN/DLA notes) confirm heap-based issues in GraphicsMagick with potential denial of service or memory disclosure. The Debi...

CVE-2017-17670

CVE-2017-17670 affects VideoLAN VLC media player up to version 2.2.8, where the MP4 demuxer (modules/demux/mp4/libmp4.c) contains a type-conversion bug that may change a box’s type between a read and a free operation, causing an invalid free. Multiple connected sources confirm VLC 2.x are vulnera...

CVE-2017-18233

Exempi before 2.4.4 is affected by CVE-2017-18233: an integer overflow in XMPFiles/source/FormatSupport/RIFF.cpp (Chunk class) allows a crafted XMP payload in a .avi file to trigger a denial of service (infinite loop). The description in the initial document confirms the vulnerability in Exempi u...

CVE-2017-5043

CVE-2017-5043 : Affected software is Chromium/Chrome Apps in Google Chrome prior to 57.0.2987.98. The root cause is a use-after-free in GuestView, leading to a remote memory read (out-of-bounds) via a crafted extension. Public advisories indicate fixes in Chromium/Chrome updates; Debian and openS...

CVE-2017-5111

CVE-2017-5111 is a use-after-free vulnerability in the PDFium component of Chromium/Google Chrome prior to 61.0.3163.79. It allows remote memory corruption via a crafted PDF file. Connected advisories confirm the issue affects Chromium/Chromium-derived packages and that the fix was introduced in ...

CVE-2017-9468

Irssi vulnerability CVE-2017-9468 affects the IRC client Irssi prior to 1.0.3. When receiving a DCC message without a source nick/host, Irssi dereferences a NULL pointer, which can cause a remote crash (denial of service). Affected software is Irssi (DCC handling). Root cause: NULL pointer derefe...

CVE-2018-10888

CVE-2018-10888 affects libgit2 prior to 0.27.3 where a missing check in git_delta_apply (delta-apply.c) can cause an out-of-bounds read while reading a binary delta file, enabling Denial of Service. Connected advisories confirm related fixes in later libgit2 releases (e.g., openSUSE/SUSE advisori...

CVE-2018-6036

CVE-2018-6036 is an integer underflow in WebAssembly within Google Chrome64-bit era (V8) that could allow a remote attacker to leak user data via a crafted HTML page. The vulnerability was fixed in the Chrome stable update 64.0.3282.119; affected products are Google Chrome released before that v...

CVE-2019-13033

In the CISOfy Lynis family, CVE-2019-13033 affects Lynis 2.x up to 2.7.5, where the license key can be exposed by inspecting the process list during a data upload. The license can be used to upload data to a central Lynis server, potentially enabling insertion of data from additional scans, thoug...

CVE-2019-9658

CVE-2019-9658 affects Checkstyle (com.puppycrawl.tools:checkstyle). Multiple connected sources confirm that versions prior to 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. The root cause is an incomplete/partial mitigation in the earlier fi...

CVE-2020-25739

The CVE-2020-25739 issue affects the gon Ruby gem prior to version 6.4.0. The root cause is that MultiJson does not honor the escape_mode setting, reducing XSS protection when converting data to JSON. As a mitigation, the json_dumper.rb in gon now escapes for XSS by default, independent of MultiJ...

CVE-2020-26519

MuPDF (Artifex) prior to version 1.18.0 is affected by a heap-based buffer over-write while parsing JBIG2 files, which can cause a denial of service and, per Debian advisories, may lead to arbitrary code execution if malformed documents are opened. The issue is addressed in MuPDF 1.18.0 and later...

CVE-2020-6497

CVE-2020-6497 is a policy enforcement issue in Omnibox on Google Chrome for iOS, allowing domain spoofing via a crafted URI. The connected Nessus entries confirm this CVE is part of the Chrome 83.0.4103.88– era fixes set. Affected component: Omnibox URL handling; root cause: insufficient policy e...

CVE-2021-3735

CVE-2021-3735 describes a deadlock in the AHCI controller device of QEMU. The issue occurs during a software reset (ahci_reset_port) while processing a host-to-device Register FIS from a guest, allowing a privileged guest user to hang the QEMU process on the host and cause a denial of service. Co...

CVE-2022-2735

CVE-2022-2735 affects the PCS project. The root cause is incorrect permissions on the Unix socket used for internal PCS daemon communication, enabling a privilege escalation by obtaining an authentication token for a hacluster user. With that token, an attacker could gain complete control over th...

CVE-2022-43252

CVE-2022-43252 affects libde265 v1.0.8 and is a heap-buffer-overflow in put_epel_16_fallback (fallback-motion.cc), enabling DoS via a crafted video file. Publicly documented instances reference the issue across multiple OS advisories (Debian DSA 5346-1 for Debian, USN 6627-1 for Cloud Foundry, Ge...

CVE-2023-39351

CVE-2023-39351 affects FreeRDP (RDP client/server library). The issue is a null pointer dereference in the RemoteFX (rfx) path: in rfx_process_message_tileset, tiles are allocated via rfx_allocate_tiles for numTiles, but if initialization fails some tiles remain NULL and may be accessed later, ca...

CVE-2023-39353

CVE-2023-39353 affects FreeRDP. The root cause is a missing offset validation in libfreerdp/codec/rfx.c for tile->quantIdxY, tile->quantIdxCb, and tile->quantIdxCr, allowing crafted input to trigger an out-of-bounds read and likely crash. The issue is documented as fixed in versions 2.11...

CVE-2025-23143

CVE-2025-23143 is a Linux kernel issue where unloading a module (e.g., CIFS/NFS) can race with a TCP socket still alive, leading to a NULL pointer dereference in lockdep when hlock_class() is called after the module is gone. The root cause is that CIFS assigns a different lock class to the socket...

CVE-2025-37931

CVE-2025-37931 (btrfs) affects the Linux kernel’s btrfs metadata write path. The issue arises when writing subpage extent buffers (EBs) with a 64k page size, 16k nodsz, and a 4k sectorsize, where the bitmap addressing is based on sectors, yielding 4 bits per node. If a dirty range is found, the c...

CVE-2025-38348

The CVE-2025-38348 issue is in the Linux kernel wifi driver for the Intersil p54 interface. A malicious USB device could cause a buffer over-read in p54_rx_eeprom_readback() by tampering v1/v2 eeprom length fields, potentially crashing the host. A patch was applied to store the eeprom size in the...

CVE-2025-38494

CVE-2025-38494 (Linux kernel) : In the HID core, hid_hw_raw_request() checks were bypassed by a low-level transport path, allowing the use of invalid parameters. The vulnerability was resolved in the Linux kernel; advisories from Debian/Amazon/RHEL references confirm the fix. Impact is high (loca...

CVE-2005-1260

CVE-2005-1260 describes a remote denial-of-service vulnerability in bzip2 where a crafted archive can cause an infinite loop during decompression, potentially exhausting disk space. Public documents show this issue alongside a related local race condition (CVE-2005-0953) and note that untrusted a...

CVE-2007-5191

The CVE-2007-5191 issue concerns util-linux: the mount and umount utilities call setuid/setgid in the wrong order and do not check return values, which could allow a local attacker to elevate privileges via helper programs (e.g., mount.nfs). Affected component: util-linux (mount/umount). Impact: ...

CVE-2009-0269

CVE-2009-0269 refers to a local kernel vulnerability in the Linux kernel’s eCryptfs inode handling. The flaw, described as a readlink error path in fs/ecryptfs/inode.c, can lead to denial of service (fault or memory corruption) and possibly other unspecified effects by causing the code to use a -...

CVE-2010-3874

CVE-2010-3874: Heap-based buffer overflow in the bcm_connect function of net/can/bcm.c (Broadcast Manager) in the Linux kernel CAN implementation. Affects 64-bit kernels, before 2.6.36.2, enabling local attackers to cause memory corruption and a denial of service via a connect operation. The conn...

CVE-2012-3955

CVE-2012-3955 affects ISC DHCP 4.1.x prior to 4.1-ESV-R7 and 4.2.x prior to 4.2.4-P2. In opportunistic scenarios, remote attackers can cause a denial of service (daemon crash) by establishing an IPv6 lease when the lease expiration time is later reduced. Remediation is to upgrade to ISC DHCP 4.1-...

CVE-2013-2166

The CVE-2013-2166 entry concerns python-keystoneclient versions 0.2.3 to 0.2.5, where the middleware memcache encryption bypass is documented. Multiple connected records (GHSA-C3XQ-CJ8F-7829 and OSV entries) confirm the same issue and reference advisories like RHSA-2013:0992. The vulnerability ce...

CVE-2014-1511

CVE-2014-1511 affects Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25. The issue is described as a remote bypass of the popup blocker via unspecified vectors. Public security advisories in 2014 consolidate Firefox/Thunderbird/SeaMonkey...

CVE-2014-4667

CVE-2014-4667 affects the Linux kernel: the sctp_association_free function in net/sctp/associola.c before version 3.15.2 fails to properly manage a specific backlog value, enabling remote attackers to trigger a denial of service (socket outage) via a crafted SCTP packet. The vulnerability is root...

CVE-2014-9093

CVE-2014-9093 affects LibreOffice prior to 4.3.5, where a crafted RTF file can cause a denial of service (invalid write) and may allow arbitrary code execution. The issue is tied to LibreOffice’s RTF handling; confirmed by the initial description. Remediation: upgrade to LibreOffice 4.3.5 or newe...

CVE-2015-7295

CVE-2015-7295 affects QEMU virtio-net (Virtual Network Device) where, if big or mergeable receive buffers are not supported, a remote attacker can cause a denial of service by flooding jumbo frames on tuntap or macvtap, exhausting guest network receive buffers. Affected product area: QEMU’s virti...

CVE-2016-7447

GraphicsMagick (before 1.3.25) is affected by a heap-based buffer overflow in the EscapeParenthesis function. The CVE-2016-7447 entry notes remote, unspecified impact via unknown vectors. Multiple external advisories indicate fixes in newer releases (e.g., 1.3.25 per openSUSE/SUSE notes; Debian a...

CVE-2016-7908

CVE-2016-7908 refers to a DoS in QEMU where the mcf_fec_do_tx path does not properly cap the buffer descriptor count during transmit. A local guest administrator can trigger an infinite loop and QEMU process crash by crafting a 0-length BD with specific bd.flags values. Public listings (Debian se...

CVE-2017-12375

CVE-2017-12375 affects ClamAV before 0.99.3, where improper input validation in the rfc2047 handling of mbox.c can be exploited by a crafted email to trigger a buffer overflow and cause DoS on an affected device. Documents confirm the vulnerability is remote, unauthenticated, and tied to mail par...

CVE-2017-12643

CVE-2017-12643 targets ImageMagick 7.0.6-1, with a memory exhaustion vulnerability in ReadOneJNGImage() inside coders/png.c. The associated Nessus entry (UNPATCHED_CVE_2017_12643.NASL) notes that this vulnerability affects Linux distros and that a vendor patch is not available, indicating an unpa...

CVE-2017-13139

CVE-2017-13139: In ImageMagick, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk. Affected versions: ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1. Impact is described as an out-of-bounds read; no explicit exploitation details provided in the docu...

CVE-2017-14977

CVE-2017-14977 affects Poppler 0.59.0 and is a NULL pointer dereference in FoFiTrueType::getCFFBlock() due to missing validation of a table pointer, enabling denial of service. The core issue is a dereference of an unvalidated table pointer within FoFiTrueType.cc. Public advisories (openSUSE, Red...

CVE-2017-17500

GraphicsMagick 1.3.26 is affected by CVE-2017-17500 due to a heap-based buffer over-read in ReadRGBImage (coders/rgb.c) triggered by a crafted image. The root cause is an error in ImportRGBQuantumType handling that can lead to out-of-bounds reads, with high impact on confidentiality, integrity an...