CVE-2017-6467

CVE-2017-6467 affects Wireshark 2.2.0–2.2.4 and 2.0.0–2.0.10 due to a Netscaler file parser infinite loop triggered by a malformed capture file. The root cause is in wiretap/netscaler.c, where file size restrictions were tightened to address the issue. The vulnerability is cataloged in Debian/DSA...

CVE-2017-7650

CVE-2017-7650 affects Eclipse Mosquitto up to version 1.4.11 (before 1.4.12). The vulnerability arises from pattern-based ACLs that can be bypassed when clients set their username or client id to '#' or '+', allowing locally or remotely connected clients to access MQTT topics they should not be a...

CVE-2017-9310

CVE-2017-9310 affects QEMU when built with e1000e NIC emulation. The vulnerability arises from handling of the TDH/RDH pointers outside the allocated descriptor buffer, allowing a local privileged guest user to trigger a denial of service (infinite loop) in the QEMU process. Public references in ...

CVE-2018-1308

CVE-2018-1308 is an XML External Entity (XXE) vulnerability in Apache Solr’s DataImportHandler, affecting Solr 1.2–6.6.2 and 7.0–7.2.1. The vulnerability stems from an XXE flaw in the dataConfig parameter of the DataImportHandler, enabling an attacker to read arbitrary local files via file/ftp/ht...

CVE-2018-6038

CVE-2018-6038 describes a heap buffer overflow in WebGL on Google Chrome, allowing a remote attacker to cause an out-of-bounds read via a crafted HTML page. Affected product: Google Chrome (WebGL component). Root cause: heap overflow in WebGL leading to memory corruption. Impact: information disc...

CVE-2018-6052

The CVE-2018-6052 entry documents a vulnerability in Google Chrome (Blink) where the no-referrer policy policy was incompletely implemented, allowing a remote attacker to obtain referrer details from a page that believed it opted out. Affected software is Google Chrome (Blink component); impact i...

CVE-2018-7332

Wireshark vulnerability CVE-2018-7332 affects the epan/dissectors/packet-reload.c code path, where an infinite loop could be triggered by malformed packets in Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12. The issue was addressed by validating a length, preventing the loop. Some connected advisories (e....

CVE-2019-20917

InspIRCd vulnerability CVE-2019-20917 affects the mysql module prior to 3.3.0 when built against mariadb-connector-c 3.0.5+, enabling a NULL pointer dereference that can be triggered by users who can connect to a server, and used with sqlauth/sqloper to remotely crash the server. Public advisorie...

CVE-2020-21598

CVE-2020-21598 affects libde265 v1.0.4, where a heap buffer overflow in ff_hevc_put_unweighted_pred_8_sse can be triggered by a crafted file. Public advisories (e.g., Debian/DLA-3280-1 and Gentoo GLSA) indicate upgrading libde265 to 1.0.11 or newer to remediate. Other connected sources reiterate ...

CVE-2020-22028

CVE-2020-22028 is a buffer overflow in FFmpeg 4.2 affecting filter_vertically_8 (libavfilter/vf_avgblur.c) that could enable a remote Denial of Service. The issue is documented in multiple sources (Debian/USN advisories and related Nessus/NVD entries) and is specifically tied to FFmpeg 4.2; sever...

CVE-2021-21849

GPAC library (GPAC Project on Advanced Content), version 1.0.1, contains an exploitable integer overflow in MPEG‑4 decoding for atoms using tfra (and related FOURCCs), leading to a heap‑based buffer overflow and memory corruption. The flaw is triggered by specially crafted MPEG‑4 input and can be...

CVE-2021-21898

CVE-2021-21898 affects LibreCAD/libdxfrw (2.2.0-rc2-19-ge02f3580). The vulnerability lies in dwgCompressor::decompress18(), where a crafted DWG can trigger an out-of-bounds write, enabling possible code execution. Public references from Gentoo GLSA, Debian DSA/DLA and openSUSE/NASL advisories con...

CVE-2021-31348

CVE-2021-31348 affects ezXML 0.8.6 (libezxml.a); the flaw is in ezxml_parse_str() where improper memory handling during XML parsing leads to an out-of-bounds read after a strcspn failure. Connected advisories (SUSE/openSUSE) enumerate this CVE among multiple netcdf/ezXML issues and reference upda...

CVE-2021-42715

The CVE-2021-42715 issue concerns the HDR loader in the libstb component (stb_image.h) versions 1.33 through 2.27, where truncated end-of-file RLE scanlines are parsed as an infinite sequence of zero-length runs. This can allow a crafted HDR file to cause denial of service in applications using s...

CVE-2022-32292

ConnMan (through version 1.41) is vulnerable to a heap-based buffer overflow in the gweb component’s received_data function (CVE-2022-32292). Remote attackers could send HTTP requests to trigger code execution. A related issue (CVE-2022-32293) involves a WISPR handling use-after-free. Remediation...

CVE-2022-41404

The CVE-2022-41404 entry concerns the ini4j Java library. A flaw in the fetch() method of the BasicProfile class affects versions up to 0.5.4, allowing a Denial of Service (DoS) via unspecified vectors. Public references indicate remediation by upgrading ini4j to 0.5.4 (or later), with Debian LTS...

CVE-2022-43236

Libde265 v1.0.8 contains a stack-buffer-overflow via put_qpel_fallback in fallback-motion.cc, enabling DoS with a crafted video file. Debian advisory DSA-5346-1 fixes this by upgrading libde265 to 1.0.11; monitor for updates from affected vendors (Astra/CLOUD Foundry entries also reference this C...

CVE-2022-43252

CVE-2022-43252 affects libde265 v1.0.8 and is a heap-buffer-overflow in put_epel_16_fallback (fallback-motion.cc), enabling DoS via a crafted video file. Publicly documented instances reference the issue across multiple OS advisories (Debian DSA 5346-1 for Debian, USN 6627-1 for Cloud Foundry, Ge...

CVE-2023-2855

Wireshark contains a vulnerability CVE-2023-2855 where the Candump log parser crashes Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13, causing denial of service via crafted capture files. Public advisories note multiple vendor fixes and recommend upgrading to Wireshark 4.0.6 or newer (e.g., Debian 4.0.6-1...

CVE-2023-3389

CVE-2023-3389 (Linux kernel io_uring UAF) : A use-after-free in the io_uring subsystem can be exploited to achieve local privilege escalation. The issue involves racing a io_uring cancel poll request with a linked timeout, which can trigger a UAF in an hrtimer. Impact is local privilege escalatio...

CVE-2023-39354

CVE-2023-39354 involves FreeRDP, a remote desktop client/server implementation. The vulnerability is an out-of-bounds read in the nsc_rle_decompress_data function, triggered when processing context->Planes without ensuring sufficient input length. The issue can cause a crash and is addressed i...

CVE-2024-26727

CVE-2024-26727 (Linux kernel, btrfs subvolume creation) Concrete details are present in connected Astra/Linux advisory. The issue arises when creating a new subvolume under btrfs: after inserting the root item, a backref/read could access the subvolume before a preallocated anonymous device (anon...

CVE-2024-53566

CVE-2024-53566 affects Sangoma Asterisk versions v22, 22.0.0-rc1/rc2/pre1, where the function action_listcategories() (in Sangoma/Asterisk) can be abused to perform a path traversal . Public advisories and CVE records corroborate that the issue arises via AMI exposure (path traversal outside the ...

CVE-2025-37983

CVE-2025-37983 is a Linux kernel issue where an inode allocation path could leak a dentry due to an OOM related leak in qibfs. The description confirms the vulnerability was resolved by a fix merged in the kernel ("qibfs: fix another leak"). Public connected sources (Azure Linux, Astra Linux, and...

CVE-2025-38197

CVE-2025-38197 affects the Linux kernel component platform/x86: dell_rbu. The root cause is a wrong list head passed to list_for_each_entry*() when iterating the packet list, causing incorrect data reads via sysfs and, on clearing the list, potential NULL pointer dereference. A patch fix was intr...

CVE-2025-38371

CVE-2025-38371 affects the Linux kernel DRM v3D component on Raspberry Pi; the issue occurs when an interrupt is triggered during GPU reset, potentially causing GPU hangs and a kernel NULL pointer dereference. The fix is to disable interrupts before resetting the GPU. The openSUSE/SUSE references...

CVE-2008-5014

CVE-2008-5014 affects Mozilla firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13. Root cause: modifying window.proto .proto can lock a non-native object, triggering an OBJ_IS_NATIVE assertion. Impact: remote attacker could crash...

CVE-2008-5019

CVE-2008-5019 affects Mozilla Firefox 3.x prior to 3.0.4 and 2.x prior to 2.0.0.18. The session restore feature can bypass the same-origin policy, enabling cross-site scripting and arbitrary JavaScript execution with chrome privileges via unknown vectors. Mitigation per the connected advisories i...

CVE-2008-5511

Affected software: Mozilla Firefox (3.x before 3.0.5; 2.x before 2.0.0.19), Mozilla Thunderbird (2.x before 2.0.0.19), and SeaMonkey (1.x before 1.1.14). Root cause: vulnerability in XBL bindings allowing an XSS payload via an unloaded document, combined with bypass of the same-origin policy (CVE...

CVE-2009-5045

CVE-2009-5045 concerns an information disclosure in the Jetty Dump Servlet . Affected software is the Jetty web server/servlet container, with the vulnerability existing in versions prior to 6.1.22 . The NVD reports a CVSSv3.1 base score of 7.5 (HIGH) , indicating a network-accessible issue with ...

CVE-2010-1437

CVE-2010-1437 is a race condition in the Linux kernel’s keyring handling (find_keyring_by_name in security/keys/keyring.c) affecting version 2.6.34-rc5 and earlier. A local user can exploit this via keyctl session commands that access a dead keyring being deleted by key_cleanup, leading to memory...

CVE-2010-2500

CVE-2010-2500 details (from connected documents): FreeType’s integer overflow in the gray_render_span function (ftgrays.c) before version 2.4.0 can be triggered by parsing a crafted font file, potentially crashing the application or allowing arbitrary code execution. The vulnerability is rooted i...

CVE-2011-3630

CVE-2011-3630 concerns the hardlink project prior to version 0.1.2, which is affected by multiple stack-based buffer overflow flaws when processing deeply nested directory trees. According to the connected NVD entry, a remote attacker can craft a directory tree and trick the local user into conso...

CVE-2013-3793

CVE-2013-3793 affects Oracle MySQL Server: 5.5.31 and earlier and 5.6.11 and earlier. It is described as an unspecified vulnerability related to Data Manipulation Language that allows remote authenticated users to affect availability via unknown vectors. Connected documents (Nessus/OpenVAS) refer...

CVE-2014-2397

CVE-2014-2397 is an unspecified vulnerability affecting Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51. The linked MiracleLinux advisories enumerate CVE-2014-2397 among OpenJDK/Java vulnerabilities, explicitly noting impact to confidentiality, integrity, and availability via unknown vectors...

CVE-2014-2403

CVE-2014-2403 affects Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51. It is described as an unspecified vulnerability with confidentiality impact via vectors related to JAXP. Connected documents (MiracleLinux AXSA advisories) list CVE-2014-2403 among affected OpenJDK/Oracle Java comp...

CVE-2014-6051

CVE-2014-6051 is an integer overflow in LibVNCServer’s MallocFrameBuffer() (vncviewer.c) that can lead to a heap-based buffer overflow, enabling DoS or potential remote code execution via advertisement of oversized screen sizes. Debian and Gentoo advisories document multiple vulnerable components...

CVE-2014-8095

CVE-2014-8095 affects X.Org X Server/X11R4 and later up to versions before 1.16.3. A crafted length or index value to a large set of X server/extension handlers (including XInput, DRI2/GLX, Render, XFixes, XI/others) can cause out-of-bounds reads/writes, leading to Denial of Service and potential...

CVE-2014-8738

CVE-2014-8738 affects GNU Binutils (libbfd/archive.c: _bfd_slurp_extended_name_table). A crafted extended name table in an archive can trigger an invalid write, leading to a denial of service (segmentation fault/crash). Public advisories across vendors cite binutils and libbfd as vulnerable, with...

CVE-2014-9658

CVE-2014-9658 affects FreeType before 2.5.4. The tt_face_load_kern function in sfnt/ttkern.c enforces an incorrect minimum table length, enabling a remote attacker to trigger a denial of service via an out-of-bounds read with a crafted TrueType font. Mitigation: upgrade to FreeType 2.5.4 or newer...

CVE-2014-9660

CVE-2014-9660 affects FreeType prior to 2.5.4, where the _bdf_parse_glyphs function in bdf/bdflib.c fails to properly handle a missing ENDCHAR record. This can allow a remote attacker to trigger a denial of service via a crafted BDF font, potentially causing a NULL pointer dereference (and possib...

CVE-2015-4896

CVE-2015-4896 affects Oracle VM VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8. When a VM has the Remote Display feature (RDP) enabled, remote attackers could affect availability through unknown vectors related to Core. The issue is reported across multiple releases and is associat...

CVE-2015-7540

Samba CVE-2015-7540 affects the LDAP server in the AD DC of Samba 4.x prior to 4.1.22, where return values aren’t checked during ASN.1 memory allocation. This allows remote attackers to cause a denial of service through crafted packets that exhaust memory and crash the daemon. Remediation is to u...

CVE-2015-8783

CVE-2015-8783 affects LibTIFF’s tif_luv.c: a crafted TIFF image can trigger out-of-bounds reads in the library, leading to denial of service. This vulnerability is part of multiple LibTIFF flaws reported across Debian, CentOS, Gentoo, F5 advisories, and cloud/Ubuntu postings. Exploitation details...

CVE-2016-2056

Xymon xymond prior to 4.3.25 is affected by CVE-2016-2056: remote authenticated users can inject shell commands via the adduser_name field in web/useradm.c or web/chpasswd.c, executing arbitrary commands as the web server user. This is a shell command injection vulnerability with potential for fu...

CVE-2016-2342

The CVE-2016-2342 issue affects Quagga’s bgpd component, specifically the VPNv4 NLRI parser (bgp_mplsvpn.c). A stack-based buffer overflow arises when handling Labeled-VPN SAFI routes data due to incorrect length handling during a data copy, enabling a remote attacker to potentially execute arbit...

CVE-2016-5315

CVE-2016-5315 affects LibTIFF 4.0.6 and earlier: the setByteArray function in tif_dir.c can trigger an out-of-bounds read when processing crafted TIFF images, causing denial of service. Public advisories and vendor notes (e.g., Debian security updates and Arch Linux advisories) indicate remediati...

CVE-2016-6835

CVE-2016-6835 — QEMU vmxnet_tx_pkt_parse_headers vulnerability in hw/net/vmxnet_tx_pkt.c allows a local guest OS administrator to trigger a denial of service via a buffer over-read caused by failing to check the IP header length. This is a local, attacker-privileged issue inside the guest, with p...

CVE-2017-11407

CVE-2017-11407 affects Wireshark MQ dissector. A crafted MQ packet could trigger memory allocation issues leading to denial of service; root cause was insufficient fragment-length validation before reassembly. Upstream fix implemented in packet-mq.c (validation prior to reassembly) and bundled in...

CVE-2017-12166

CVE-2017-12166 affects OpenVPN prior to 2.3.3 and prior to 2.4.4, due to a buffer overflow in the read_key/key-method handling (read_key() stack-based overflow reported by security advisories). Exploitation could lead to remote code execution. Remediation across tracked disclosures: upgrade to Op...