CVE-2017-11352

ImageMagick vulnerable component: the RLE coder (coders/rle.c) in builds prior to 7.0.5-10. A crafted RLE image can trigger a crash due to incorrect EOF handling, stemming from an incomplete fix for CVE-2017-9144. The description notes the issue exists before 7.0.5-10 and implies a remediation in...

CVE-2012-0259

CVE-2012-0259 affects ImageMagick where the GetEXIFProperty function (magick/property.c) is vulnerable when processing JPEG EXIF XResolution tags. In ImageMagick versions before 6.7.6-3, a zero value in the component count can trigger an out-of-bounds read, leading to a denial of service (crash)....

CVE-2013-0782

CVE-2013-0782 is a heap-based buffer overflow in Mozilla’s nsSaveAsCharset::DoCharsetConversion that affects Firefox before 19.0, ESR 17.x before 17.0.3, Thunderbird before 17.0.3, and SeaMonkey before 2.16. The connected documents confirm this vulnerability and show affected components include F...

CVE-2013-5653

CVE-2013-5653 affects Ghostscript and stems from the getenv and filenameforall functions not honoring -dSAFER, enabling an attacker to read environment variables or list directories via a crafted PostScript document. The issue is documented across multiple sources (e.g., NVD description and IBM P...

CVE-2014-3564

CVE-2014-3564 affects the GPGME library (status_handler) in engine-gpgsm.c and engine-uiserver.c, with multiple heap-based buffer overflows that allow remote denial of service and possibly arbitrary code execution via vectors related to different line lengths in a specific order. Affected: GPGME ...

CVE-2014-3689

The CVE-2014-3689 issue affects the QEMU vmware-vga driver (hw/display/vmware_vga.c). Root cause: insufficient parameter validation related to rectangle handling, allowing a local guest user to write to QEMU memory locations and escalate privileges. Impact per sources is local privilege elevation...

CVE-2014-6262

CVE-2014-6262 describes multiple format string vulnerabilities in the Python RRDtool module used by Zenoss Core (before 4.2.5) and other products. An attacker can exploit a crafted third argument to rrdtool.graph to execute arbitrary code or cause an application crash (DoS). Related to CVE-2013-2...

CVE-2015-1277

CVE-2015-1277 is a use-after-free vulnerability in Google's Chrome/Chromium accessibility implementation (Chromium project). The issue arises from invalid memory handling in accessibility-tree structures, enabling a remote attacker to trigger a denial of service and possibly other unspecified imp...

CVE-2015-8504

Technical details for CVE-2015-8504 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-6836

CVE-2016-6836 : In QEMU, the vmxnet3_complete_packet path (hw/net/vmxnet3.c) allows local guest OS admins to obtain sensitive host memory information by exploiting failure to initialize the txcq_descr object, enabling information leakage. The IBM PowerKVM bulletin notes this vulnerability and sta...

CVE-2016-7116

CVE-2016-7116 is a directory-traversal vulnerability in QEMU's 9pfs (hw/9pfs/9p.c). An attacker with local guest OS privileges can trigger a crafted request containing dot-dot sequences to access host files outside the export path. Several advisories document this issue (e.g., Debian DLA-1599 and...

CVE-2016-9601

CVE-2016-9601 : Ghostscript before version 9.21 is vulnerable to a heap-based buffer overflow in the jbig2_decode_gray_scale_image function used for JBIG2 halftone decoding, potentially causing a segmentation fault when parsing a crafted PostScript/PDF with an embedded JBIG2 image, per multiple c...

CVE-2017-15370

CVE-2017-15370 affects SoX (Sound eXchange) 14.4.2, with a heap-based buffer overflow in ImaExpandS (ima_rw.c) that can cause denial of service during audio file conversion when supplied with crafted input. Multiple advisories across distributions confirm the issue and recommend upgrading to patc...

CVE-2017-17788

CVE-2017-17788 affects GIMP 2.8.22 with a stack-based buffer over-read in xcf_load_stream (app/xcf/xcf.c) when there is no '\0' after the version string. Connected advisories (Ubuntu USN-3539-1, SUSE SU-2020-0601-1, Red Hat/CVE bundles) confirm this issue among multiple GIMP vulnerabilities and r...

CVE-2017-17853

CVE-2017-17853 affects the Linux kernel’s BPF verifier (kernel/bpf/verifier.c) up to version 4.14.8. Local users can trigger memory corruption and potentially other impact via incorrect BPF_RSH signed bounds calculations. The connected Nessus advisories for Unity Linux describe the same issue and...

CVE-2017-17855

CVE-2017-17855 affects Linux kernel versions up to 4.14.8 in kernel/bpf/verifier.c, where improper use of pointers in place of scalars allows local users to cause a denial of service via memory corruption (impact described as high). The provided documents do not supply a confirmed exploit, mitiga...

CVE-2017-18076

CVE-2017-18076 affects the OmniAuth Ruby library, specifically the code path in strategy.rb prior to version 1.3.2. The vulnerability stems from POST parameters being stored in the session in addition to GET parameters, which makes the authenticity_token (CSRF token) available in the callback pha...

CVE-2017-2834

CVE-2017-2834 describes an exploitable code execution vulnerability in FreeRDP 2.0.0-beta1+android11, specifically in the authentication functionality. A specially crafted server response can trigger an out-of-bounds write, creating an exploitable condition. The vulnerability could allow an attac...

CVE-2017-9141

CVE-2017-9141 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-9344

CVE-2017-9344 affects Wireshark’s Bluetooth L2CAP dissector. Versions 2.2.0–2.2.6 and 2.0.0–2.0.12 could trigger a divide-by-zero due to an interval value. Root cause: an interval value was not properly validated in the Bluetooth L2CAP dissector. Mitigation: fixed in epan/dissectors/packet-btl2ca...

CVE-2018-0487

mbed TLS (ARM) is affected by CVE-2018-0487 and CVE-2018-0488. The issues occur in RSASSA-PSS signature verification (CVE-2018-0487) and, when the truncated HMAC extension with CBC is used, in a path that allows remote code execution or DoS via a crafted TLS/DTLS certificate chain (CVE-2018-0488)...

CVE-2018-1086

CVE-2018-1086 affects the pcs/pcsd REST interface where the debug argument is not removed from the /run_pcs query, allowing information disclosure and privilege escalation for a remote attacker with a valid token. Affected are pcs before versions 0.9.164 and 0.10 (per multiple advisories). Remedi...

CVE-2018-12893

CVE-2018-12893 concerns Xen up to 4.10.x. A safety check added to prevent livelock during debug exceptions (XSA-260) can be triggered by a guest, enabling a malicious x86 PV guest to crash Xen and cause a Denial of Service. The vulnerability is limited to x86 platforms and affects PV guests only;...

CVE-2018-3839

CVE-2018-3839 is an exploitable code execution in SDL2_image-2.0.2’s XCF image rendering. A specially crafted XCF image can cause an out-of-bounds write on the heap, enabling remote code execution when the image is processed. Multiple connected advisories confirm the issue and indicate fixes in S...

CVE-2019-12470

CVE-2019-12470 affects MediaWiki up to 1.32.1 and relates to Incorrect Access Control where the suppressed log in the RevisionDelete page is exposed. The vulnerability enables disclosure of restricted log data. Fixed in MediaWiki versions 1.32.2, 1.31.2, 1.30.2, and 1.27.6. The connected document...

CVE-2020-15005

CVE-2020-15005 affects MediaWiki before 1.31.8, 1.32.x, 1.33.x before 1.33.4, and 1.34.x before 1.34.2. The root cause is mishandling of Cache-Control and Vary headers on private wikis behind a caching proxy using the img_auth.php image authorization feature, allowing public caches to store and s...

CVE-2020-24379

CVE-2020-24379 affects Yaws, a Erlang-based HTTP server. The WebDAV implementation in Yaws versions 1.81–2.0.7 is vulnerable to a XML External Entity (XXE) injection in input handling. Exploitation could lead to sensitive data exposure via XXE. Public fixes exist: Debian/Ubuntu advisories update ...

CVE-2020-25269

CVE-2020-25269 is a use-after-free in InspIRCd (pgsql module) that can be triggered by combining the pgsql module with sqlauth or sqloper, enabling a remote user to crash the server. Initial description lists affected releases as InspIRCd 2 before 2.0.29 and 3 before 3.6.0. Public advisories in t...

CVE-2020-25706

CVE-2020-25706 is a cross-site scripting (XSS) vulnerability in Cacti 1.2.13 related to improper escaping of the error message during template import preview in the xml_path field of templates_import.php. Concrete details across connected sources indicate the flaw can lead to information disclosu...

CVE-2020-35532

CVE-2020-35532 is an out-of-bounds read in LibRaw, triggered by a crafted image with a large row_stride that targets the simple_decode_row() function (libraw\src\x3f\x3f_utils_patched.cpp). Connected documents confirm this CVE across distributions, e.g., Debian DLA-3113 fixes in LibRaw 0.19.2-2+d...

CVE-2021-28707

CVE-2021-28707 is a Xen hypervisor vulnerability affecting PoD (populate-on-demand) memory management for x86 HVM/PVH guests. The issue arises when handling PoD operations that act on page ranges (page orders); the base page frame number is not consistently enforced to be aligned for the requeste...

CVE-2021-30158

MediaWiki contains a vulnerability CVE-2021-30158 affecting blocked users’ ability to use Special:ResetTokens. Affected versions are MediaWiki up to 1.31.12 and 1.32.x through 1.35.x prior to 1.35.2. The issue is documented across multiple advisories (including Debian, Fedora, Gentoo, ALT Linux) ...

CVE-2021-36410

CVE-2021-36410 is a stack-buffer-overflow in the libde265 H.265 codec library (v1.0.8) triggered via fallback-motion.cc in put_epel_hv_fallback when running dec265. Public records indicate multiple advisories recommending upgrading libde265 to a newer release (e.g., 1.0.11 or later): Debian DSA-5...

CVE-2022-26363

CVE-2022-26363 and related Xen issues arise from CPU cache non-coherency interacting with Xen’s safety checks for page access. The vulnerability is in the x86 PV/hypervisor path where a safe TLB/pagetable state can be invalidly considered safe due to cache/memory divergence, potentially enabling ...

CVE-2022-28042

CVE-2022-28042 refers to a heap-based use-after-free in stb_image.h version 2.27, specifically in stbi__jpeg_huff_decode. Public advisories (Debian DLA-3305 and Gentoo GLSA 2024-09-15) document this as a vulnerability in the libstb library and list CVE-2022-28042 among fixed issues when upgrading...

CVE-2023-24038

CVE-2023-24038 affects the Perl module HTML-StripScripts (through version 1.06). The vulnerability is a ReDoS due to catastrophic backtracking when parsing HTML containing certain style attributes, potentially impacting availability. Affected component is html-strip-scripts logic in Perl; multipl...

CVE-2023-40589

CVE-2023-40589 affects FreeRDP and is caused by a Global-Buffer-Overflow in the ncrush_decompress function when processing crafted input, which can crash the client. The issue has been addressed in versions 2.11.0 and 3.0.0-beta3; upgrading is advised. Public documents consistently describe the i...

CVE-2025-37961

The CVE-2025-37961 entry describes a Linux kernel issue in the IP virtual server (ip_vs) path. A use of an uninitialized saddr argument in do_output_route4 could affect routing decision, potentially impacting connectivity for tunneled paths. The root cause is reading saddr despite an input that s...

CVE-2025-38094

CVE-2025-38094 (Linux kernel, macb deadlock) Fix for a possible deadlock in the macb driver under cadence when THALT is high and TGO remains high. The issue occurred in contexts with interrupts disabled, where jiffies were not updated and the loop wouldn’t exit, potentially locking a sama5d4 devi...

CVE-2025-38161

The CVE-2025-38161 issue affects the Linux kernel’s RDMA mlx5 driver, where on RQ destruction a firmware command failure could have already cleaned some software resources, leaving the object in an inconsistent state. The fix adds proper rollback to the original state when destruction fails, and ...

CVE-2025-38226

CVE-2025-38226 targets the Linux kernel, specifically the media/v4l2-tpg path used by vivid. The issue is a KASAN-detected vmalloc-out-of-bounds access in tpg_fill_plane_pattern and tpg_fill_plane_buffer (v4l2-tpg-core.c:2608 and 2705), causing a write of size 1440 to a kernel address during vivi...

CVE-2025-38245

In the Linux kernel ATM subsystem, CVE-2025-38245 is due to releasing atm_dev_mutex before procfs/sysfs removal in atm_dev_deregister(), creating a race window where a device may still appear in procfs while the device list no longer contains it. This can trigger a splat warning during atm_dev_re...

CVE-2025-38280

CVE-2025-38280 affects the Linux kernel’s BPF/JIT path. When a BPF program is compiled with JIT and CONFIG_BPF_JIT_ALWAYS_ON is not set while bpf_jit_enable is 1, the arch may attempt JIT the program, fail due to FAULT_INJECTION, and incorrectly treat the program as valid, causing a WARN_ON_ONCE ...

CVE-2025-38342

CVE-2025-38342 affects the Linux kernel; it stems from an out-of-bounds check in software_node_get_reference_args(), which may cause OOB access when reading the @index-th element due to a length check that can’t be guaranteed. The fix replaces the check with ((index + 1) * sizeof(*ref) > prop-...

CVE-2001-0131

CVE-2001-0131 is linked in Debian/OpenVAS advisories (e.g., DSA 021-1/188, OpenVAS entries) and references Apache components, but the connected documents do not provide detailed technical description of the root cause or explicit fixes beyond noting the vulnerability and CVSS scores. The Debian/O...

CVE-2001-0925

The CVE-2001-0925 entry describes a vulnerability in the default installation of Apache prior to 1.3.19 where a crafted HTTP request containing many slashes can cause directory listings (instead of the multiview index) due to mishandling by mod_negotiation, mod_dir, or mod_autoindex. Affected sof...

CVE-2004-0398

CVE-2004-0398 concerns the neon library (libneon) up to version 0.24.5 and cadaver prior to 0.22, where a heap-based overflow occurs in the date parsing function ne_rfc1036_parse. This vulnerability can allow a remote WebDAV server to cause arbitrary code execution on the client. The connected do...

CVE-2004-0835

CVE-2004-0835 affects MySQL 3.x up to 3.23.59, 4.x up to 4.0.19, 4.1.x up to 4.1.2, and 5.x up to 5.0.1. The vulnerability arises during ALTER TABLE RENAME, where the system checks the CREATE/INSERT rights of the original table instead of the target, potentially enabling unauthorized activities. ...

CVE-2008-4539

The connected documents describe a heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) of QEMU, affecting versions prior to a certain fix. The CVE-2014-8106 entry specifies Cirrus VGA heap overflow in QEMU before 2.2.0 and notes it exists due to an incomplete fix for C...

CVE-2009-1633

The CVE-2009-1633 issue affects the Linux kernel CIFS subsystem prior to 2.6.29.4. It describes multiple buffer overflows in CIFS that can be triggered by a malformed Unicode string (Unicode string area alignment in fs/cifs/sess.c) or long Unicode characters (fs/cifs/cifssmb.c and fs/cifs/readdir...