CVE-2014-9663

FreeType vulnerable component: tt_cmap4_validate in sfnt/ttcmap.c (Flag: FreeType before 2.5.4). A crafted cmap SFNT table can trigger an out-of-bounds read, causing denial of service (and possibly other impact) as described for CVE-2014-9663. Remediation: upgrade to FreeType 2.5.4 or newer.

CVE-2014-9673

CVE-2014-9673 details (from provided sources): FreeType before 2.5.4 contains an integer signedness error in the Mac_Read_POST_Resource function (base/ftobjs.c). This vulnerability allows remote attackers to cause a denial of service via a crafted Mac font, potentially triggering a heap-based buf...

CVE-2015-1258

CVE-2015-1258 affects Google Chrome up to 43.0.2357.65. The issue arises from libvpx not being built with an appropriate --size-limit value, which can allow remote attackers to trigger a negative value for a size field in VP9 data, potentially causing a denial of service or other impact via a cra...

CVE-2015-1277

CVE-2015-1277 is a use-after-free vulnerability in Google's Chrome/Chromium accessibility implementation (Chromium project). The issue arises from invalid memory handling in accessibility-tree structures, enabling a remote attacker to trigger a denial of service and possibly other unspecified imp...

CVE-2015-1803

CVE-2015-1803 affects the X.Org libXfont library. The bdfReadCharacters function in bitmap/bdfread.c does not properly handle unreadable character bitmaps, allowing remote authenticated users to trigger a denial of service via NULL pointer dereference and crash, with the potential to execute arbi...

CVE-2015-2157

PuTTY local memory disclosure vulnerability (CVE-2015-2157) affects PuTTY 0.51–0.63 where SSH-2 private keys are not properly wiped from memory after loading/saving, enabling local attackers to read sensitive key material. Impact is local, with partial confidentiality impact as per NVD metrics; n...

CVE-2016-2365

CVE-2016-2365 describes a denial-of-service in Pidgin via the MXIT protocol. The vulnerability stems from how specially crafted MXIT data is processed, potentially causing a null pointer dereference and a crash when received from a malicious server or via network interception. Affected software: ...

CVE-2016-6214

CVE-2016-6214 affects the GD Graphics Library (libgd) up to version 2.2.3, where gd_tga.c mishandles TGA input, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service. Root cause: improper boundary handling in TGA parsing. Affected versions: libgd ≤ 2.2.2 (befor...

CVE-2016-6316

Summary : CVE-2016-6316 is a cross-site scripting (XSS) vulnerability in Rails’ Action View. The root cause is that quotes were not escaped for strings declared as HTML safe when used as attribute values in tag helpers, enabling remote attackers to inject script or HTML. Affected products include...

CVE-2017-13776

GraphicsMagick 1.3.26 has a denial-of-service issue in ReadXBMImage() (coders/xbm.c) during the Read hex image data path for version!=10, leading to excessive CPU and memory use when given a crafted file. The current documents do not specify a concrete fixed version or patch for this CVE (CVE-201...

CVE-2017-15417

The CVE-2017-15417 issue affects Google Chrome (Chromium) involving Skia canvas operations. The flaw is described as an inappropriate implementation in Skia canvas composite operations that allowed a remote attacker to disclose cross-origin data via a crafted HTML page. CNVD-2018-20145 confirms t...

CVE-2017-17914

CVE-2017-17914 is rejected/not used per the Initial Description.

CVE-2017-4966

CVE-2017-4966 affects RabbitMQ server and RabbitMQ for PCF. The vulnerability is in the RabbitMQ management UI , which stores signed-in user credentials in the browser’s localStorage with no expiration, enabling retrieval via a chained attack. Affected versions include all 3.4.x, all 3.5.x, and 3...

CVE-2017-5934

CVE-2017-5934 affects MoinMoin GUI editor’s link dialogue prior to version 1.9.10, where input sanitization weaknesses allow remote XSS. The issue arises in the GUI editor’s link dialogue, enabling an attacker to inject arbitrary script/HTML via unspecified vectors. Public references across advis...

CVE-2017-6470

CVE-2017-6470 affects Wireshark 2.2.0–2.2.4 and 2.0.0–2.0.10. The issue is an IAX2 dissector infinite loop triggered by crafted packets or malformed captures. Root cause: the IAX2 dissector (epan/dissectors/packet-iax2.c) could loop due to lateness handling. Mitigation: the code was fixed by cons...

CVE-2017-6474

Technical details for CVE-2017-6474 are not provided in the supplied documents. The materials reference Wireshark versions and a NetScaler file parser issue but do not disclose root cause, affected builds, or a concrete fix. Monitor for updates.

CVE-2017-8112

CVE-2017-8112 affects QEMU (hw/scsi/vmw_pvscsi.c). The vulnerability allows a local guest OS user with privileges to trigger an infinite loop in the message ring page count, causing a denial of service (CPU exhaustion). The provided documents do not specify a vendor/version scope or a remediation...

CVE-2017-8349

ImageMagick 7.0.5-5 is affected by CVE-2017-8349: the ReadSFWImage function in sfw.c can leak memory and cause a denial of service via a crafted file. The provided documents do not specify a patched version or remediation steps. No other details about vectors beyond this description are present i...

CVE-2018-1086

CVE-2018-1086 affects the pcs/pcsd REST interface where the debug argument is not removed from the /run_pcs query, allowing information disclosure and privilege escalation for a remote attacker with a valid token. Affected are pcs before versions 0.9.164 and 0.10 (per multiple advisories). Remedi...

CVE-2018-10981

CVE-2018-10981 affects Xen up to 4.10.x and allows a local attacker with x86 HVM guest OS access to trigger a host-denial-of-service by causing invalid state transitions in a QEMU device model. Impact described as host OS infinite loop. No exploitation details are provided in the Initial document...

CVE-2018-16513

CVE-2018-16513 affects Artifex Ghostscript prior to 9.24. A crafted PostScript file can trigger a type confusion in the setcolor function, potentially crashing the Ghostscript interpreter or causing unspecified other impact. Mitigation documented across multiple sources is to upgrade Ghostscript ...

CVE-2018-19497

CVE-2018-19497 affects The Sleuth Kit (TSK) up to 4.6.4 via hfs_cat_traverse in tsk/fs/hfs.c, where an oversized key length can cause a denial of service (SEGV in tsk_getu16 during hfs_dir_open_meta_cb). Public docsets indicate mitigations/patches: Debian LTS/DLA-3054-1 fixes SleuthKit in Debian ...

CVE-2018-20584

CVE-2018-20584 affects JasPer 2.0.14 and can cause a remote denial of service (application hang) when converting to JP2. Connected sources indicate IBM Rational Synergy products are affected (7.2.1.x series) and provide a remediation path: upgrade to Rational Synergy 7.2.2 to gain Jetty 9.4.14 su...

CVE-2018-5206

CVE-2018-5206 affects Irssi prior to 1.0.6. The vulnerability occurs when the channel topic is set without specifying a sender, allowing a NULL pointer dereference. Public references in the connected documents confirm the issue as a denial-of-service exposure in Irssi before the fixed version. Th...

CVE-2018-7286

CVE-2018-7286 affects Asterisk and Certified Asterisk prior to vendor patches: res_pjsip accepts a sequence of SIP INVITE messages over TCP/TLS from an authenticated remote user, then the connection is abruptly closed, causing a segmentation fault (DoS). Affected: Asterisk versions up to 13.19.1,...

CVE-2018-7541

CVE-2018-7541 affects the Xen hypervisor (through 4.10.x). Affected component: grant-table handling in Xen guest-VM interactions. Root cause (as described): a guest OS user can trigger a grant-table transition from v2 to v1, enabling a denial of service (hypervisor crash) or privilege escalation....

CVE-2018-8048

CVE-2018-8048 affects the Loofah Ruby gem (through version 2.2.0). The vulnerability allows non-whitelisted HTML attributes to appear in sanitized output when a crafted HTML fragment is republished, enabling potential cross-site scripting (XSS). Public details come from the CVE entry and corrobor...

CVE-2020-12278

Libgit2 contains CVE-2020-12278: path.c mishandles equivalent filenames created via NTFS Alternate Data Streams, enabling remote code execution when cloning a repository. Affected versions are libgit2 < 0.28.4 and 0.9x

CVE-2020-14148

CVE-2020-14148 affects ngIRCd. Multiple sources confirm that ngIRCd prior to 26~rc2 has a vulnerability in the Server-Server protocol implementation, allowing an out-of-bounds access demonstrated by the IRC_NJOIN() function. Impact details in the sources align with partial availability disruption...

CVE-2020-35532

CVE-2020-35532 is an out-of-bounds read in LibRaw, triggered by a crafted image with a large row_stride that targets the simple_decode_row() function (libraw\src\x3f\x3f_utils_patched.cpp). Connected documents confirm this CVE across distributions, e.g., Debian DLA-3113 fixes in LibRaw 0.19.2-2+d...

CVE-2021-20298

OpenEXR's B44Compressor has a vulnerability CVE-2021-20298 that can exhaust memory when processing a crafted EXR file, impacting availability. Connected sources confirm the issue across multiple advisories and distributions. Affected OpenEXR versions include those around 1.x/2.x lines prior to pa...

CVE-2021-31347

CVE-2021-31347 affects ezXML/libezxml.a in ezXML 0.8.6. The flaw is in ezxml_parse_str(), which performs incorrect memory handling while parsing crafted XML files, writing outside a memory region created by mmap. This can lead to memory corruption (out-of-bounds write) as described across multipl...

CVE-2022-23537

CVE-2022-23537 affects the pjproject family (PJSIP/PJNATH) used for STUN processing. The issue is a buffer overread that occurs when parsing a specially crafted STUN message containing an unknown attribute, as described in the CVE entry. The vulnerability applies to applications using STUN featur...

CVE-2022-26363

CVE-2022-26363 and related Xen issues arise from CPU cache non-coherency interacting with Xen’s safety checks for page access. The vulnerability is in the x86 PV/hypervisor path where a safe TLB/pagetable state can be invalidly considered safe due to cache/memory divergence, potentially enabling ...

CVE-2022-31085

CVE-2022-31085 affects LDAP Account Manager (LAM). In versions prior to 8.0, session files can contain LDAP usernames and passwords in clear text when the PHP OpenSSL extension is not installed or session encryption is disabled. The issue is fixed in LAM 8.0; if upgrading is not possible, enable ...

CVE-2022-35414

CVE-2022-35414 affects QEMU

CVE-2022-42316

CVE-2022-42316 ( Xenstore ) : The Xen hypervisor/Xenstore vulnerability allows a guest to cause xenstored to exhaust memory, leading to a DoS. The issue stems from multiple attack vectors that can inflate memory usage: issuing new requests without reading responses (buffering responses in memory)...

CVE-2022-43250

CVE-2022-43250 affects libde265 v1.0.8. A heap-buffer-overflow in put_qpel_0_0_fallback_16 (fallback-motion.cc) can allow a crafted video file to trigger a Denial of Service. Connected advisories confirm multiple vendors require upgrades to newer libde265 releases to mitigate, e.g. Debian DSA-534...

CVE-2023-38745

Pandoc-era vulnerability set affects Pandoc up to 3.1.6. CVE-2023-38745: before 3.1.6, an arbitrary file write is possible when processing crafted image elements with --extract-media or PDF output, depending on process privileges. Root cause ties to an incomplete/adjusted handling of paths and do...

CVE-2024-35879

CVE-2024-35879 affects the Linux kernel. The issue arises from a race between devlink removals and destruction of OF nodes during the sequence 1) of_platform_depopulate() and 2) of_overlay_remove(). During step 1, devices and attached of_node are destroyed asynchronously via a workqueue, which co...

CVE-2025-10934

GIMP is affected by a heap-based buffer overflow in the parsing of XWD files, enabling remote code execution . The flaw stems from insufficient validation of the length of user-supplied data before copying it to a heap buffer, allowing an attacker to run code in the target process. Exploitation r...

CVE-2025-37953

CVE-2025-37953 affects the Linux kernel sch_htb component. The issue stems from a regression caused when htb_qlen_notify() and htb_deactivate() interactions could leave prt pointers NULL, enabling a NULL pointer dereference path via htb_next_rb_node() and in certain qlen/dequeue_backlog sequences...

CVE-2025-38068

CVE-2025-38068: In the Linux kernel, the crypto/lzo path fixed a compression buffer overrun by adding a safe compression interface that checks the end of the output buffer before each write and using it in crypto/lzo. This corrects a prior assumption that the caller always provided sufficient buf...

CVE-2025-38455

CVE-2025-38455 is a Linux kernel/KVM vulnerability in the KVM: SVM path. The issue occurs during SEV{-ES} intra-host migration when a vCPU is being created (in-flight) on either source or destination VM, where SEV{-ES} state can be toggled to non-SEV{-ES} in the destination. This can lead to a cr...

CVE-2000-0844

The connected records confirm CVE-2000-0844 affects Unix locale subsystem functions that fail to cleanse user-supplied format strings, enabling local attackers to execute arbitrary commands through gettext, catopen, and related calls. The root cause is improper sanitization of format strings in l...

CVE-2001-0925

The CVE-2001-0925 entry describes a vulnerability in the default installation of Apache prior to 1.3.19 where a crafted HTTP request containing many slashes can cause directory listings (instead of the multiview index) due to mishandling by mod_negotiation, mod_dir, or mod_autoindex. Affected sof...

CVE-2005-0206

Technical details about CVE-2005-0206 are not provided in the connected documents. Available sources reference related issues (CVE-2004-0888) and patch notes without explicit impact, affected products, or fixes for this CVE.

CVE-2008-1375

CVE-2008-1375 describes a race condition in the Linux kernel’s directory notification subsystem (dnotify). It affects Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1. Successful exploitation could allow local users to cause a denial of service (OOPS) and possibly gain privileges vi...

CVE-2008-2664

CVE-2008-2664 details: In Ruby, the rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context‑dependent attackers to trigger memory corruption via unspecified vectors related to alloca. This ...

CVE-2008-3275

The CVE-2008-3275 issue affects the Linux kernel before 2.6.25.15, where the real_lookup and __lookup_hash functions in fs/namei.c fail to prevent creating a child dentry for a deleted (S_DEAD) directory. This enables a local attacker to trigger a denial of service by repeatedly creating files wi...