CVE-2014-9663

FreeType vulnerable component: tt_cmap4_validate in sfnt/ttcmap.c (Flag: FreeType before 2.5.4). A crafted cmap SFNT table can trigger an out-of-bounds read, causing denial of service (and possibly other impact) as described for CVE-2014-9663. Remediation: upgrade to FreeType 2.5.4 or newer.

CVE-2008-5506

CVE-2008-5506 affects Mozilla components (e.g., Firefox/Thunderbird/SeaMonkey) where an XMLHttpRequest to an attacker-controlled resource that performs a 302 redirect to a different domain can bypass same-origin policy, allowing reading of the redirected response. This can enable a remote attacke...

CVE-2010-0749

CVE-2010-0749 affects the Transmission BitTorrent client (pre-1.92). The vulnerability stems from corrupted data during the endgame, allowing a remote attacker over the network to prevent a file from being downloaded. Impact is limited to making a file download fail (availability) with no confide...

CVE-2011-2834

CVE-2011-2834 is a double-free flaw in libxml2 related to XPath handling. The vulnerability could allow a remote attacker to crash the application or, potentially, execute arbitrary code when processing crafted XML data. Public references in Debian and Red Hat advisories note that this issue affe...

CVE-2013-4969

CVE-2013-4969 affects Puppet before 3.3.3 and 3.4 before 3.4.1, and Puppet Enterprise before 2.8.4 and 3.1 before 3.1.1, allowing local users to overwrite arbitrary files via a symlink attack. Connected advisories indicate fixes with Puppet packages updated to 2.7.25 (e.g., Mageia MDVSA-2014:040 ...

CVE-2014-6054

CVE-2014-6054 affects LibVNCServer: rfbProcessClientNormalMessage handles the scaling factor and can crash the server via a division-by-zero when the factor is 0. This is a remote-denial-of-service condition. Connected advisories (Debian, CentOS/RHEL, Mageia, Arch Linux, Gentoo) report fixes via ...

CVE-2015-8476

PHPMailer CVE-2015-8476 describes CRLF injection vulnerabilities allowing arbitrary SMTP commands via CRLF in (1) an email address used in validateAddress() or (2) an SMTP command routed through sendCommand(). Affected versions are before 5.2.14. Public sources (Debian, Fedora advisories, GHSA) c...

CVE-2015-8568

CVE-2015-8568 affects QEMU VMXNET3 paravirtual NIC emulation. A memory leak occurs when a guest repeatedly activates the vmxnet3 device, leading to host memory consumption (DoS). Public details in connected Nessus/SUSE/OpenSUSE references corroborate the memory-leak impact; no explicit patch/fix ...

CVE-2015-8743

CVE-2015-8743 affects QEMU with NE2000 device emulation. The flaw is an out-of-bounds read/write in ioport r/w operations, exploitable by a privileged (CAP_SYS_RAWIO) user to leak or corrupt QEMU memory. Public fixes exist (e.g., vendor security updates, notably in SUSE/OpenSUSE advisories) that ...

CVE-2015-8784

LibTIFF's NeXTDecode path (tif_next.c) is vulnerable to an out-of-bounds write via a crafted TIFF image, enabling a remote attacker to trigger a denial of service. The CVE-2015-8784 issue is confirmed across multiple advisories: Debian/Ubuntu have patched libtiff in security updates; Red Hat/Cent...

CVE-2016-1667

CVE-2016-1667 describes a cross-origin bypass in the DOM implementation of Blink/WebKit used by Google Chrome before 50.0.2661.102. The vulnerability stems from the TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp, which failed to prevent script execution during node adop...

CVE-2016-7551

CVE-2016-7551 affects Asterisk Open Source 11.x (before 11.23.1) and 13.x (before 13.11.1), as well as Certified Asterisk 11.6 (before 11.6-cert15) and 13.8 (before 13.8-cert3). The vulnerability in chain_sip allows remote attackers to cause a denial of service via port exhaustion. The available ...

CVE-2016-7909

CVE-2016-7909 affects QEMU pcnet.c (pcnet_rdra_addr): local admin can trigger an infinite loop and crash QEMU by setting the receive or transmit descriptor ring length to 0. Public advisories (e.g., Fedora FEDORA-2017-12394e2cc7 and Debian DLA-1599-1) include fixes/updates; apply vendor patches o...

CVE-2016-8707

CVE-2016-8707 describes an out-of-bounds write in ImageMagick’s TIFF handling in convert that could enable remote code execution via a crafted TIFF. Mageia MGASA-2018-0229 confirms a fix in imagemagick (6.9.9.41), noting memory handling problems could lead to denial of service, memory disclosure,...

CVE-2016-9556

Technical details for CVE-2016-9556 are not available in the provided connected documents; only the core description and references are present. Monitor official advisories for updates.

CVE-2016-9597

CVE-2016-9597 is a regression for CVE-2016-3705 where Red Hat/JBoss RHSA-2016:2957 did not include the fix for libxml2, leaving a denial-of-service risk via a stack overflow. The connected records confirm libxml2 as the affected library and document multiple publisher advisories (RHSA-2016:1292, ...

CVE-2017-11450

CVE-2017-11450 affects ImageMagick; vulnerable component is coders/jpeg.c. An attacker can supply a crafted JPEG with data that is too short, potentially causing a denial of service (application crash) or other impact. The issue is present in ImageMagick versions before 7.0.6-1; remediation is to...

CVE-2017-14172

CVE-2017-14172 is rejected and not an active vulnerability entry.

CVE-2017-15411

CVE-2017-15411 affects Google Chrome’s PDFium component. A use-after-free/memory misreference in PDFium prior to 63.0.3239.84 can allow a remote attacker to trigger heap corruption via a crafted PDF file. The exploit could be remotely triggered with no user interaction (per CVSS metrics), leading...

CVE-2017-16996

The CVE-2017-16996 entry affects the Linux kernel (up to version 4.14.8) in kernel/bpf/verifier.c, where register truncation mishandling is the root cause. This allows local users to trigger memory corruption and potentially other impacts described as a denial of service. The vulnerability is res...

CVE-2017-2838

CVE-2017-2838 describes an exploitable denial-of-service in FreeRDP 2.0.0-beta1+android11 caused by how challenge packets are handled. A specially crafted challenge packet can terminate the process, enabling a DoS and potentially allowing an attacker to compromise the server or perform a man-in-t...

CVE-2017-5332

The CVE-2017-5332 issue affects icoutils (wrestool) with a memory access error in extract_group_icon_cursor_resource/extract.c. Exploitation could crash the process and, in crafted inputs, allow arbitrary code execution. Public advisories across Debian, Mageia, CentOS/Red Hat and Fedora describe ...

CVE-2018-0202

CVE-2018-0202 affects ClamAV prior to 0.99.4, where the PDF parser (libclamav/pdfng.c: pdf_parse_array/pdf_parse_string) may mishandle crafted PDF files, leading to an out-of-bounds read and a denial of service. Descriptions consistently state an unauthenticated, remote attacker can trigger this ...

CVE-2018-1000051

CVE-2018-1000051 details (MuPDF 1.12.0): A use-after-free in fz_keep_key_storable leads to denial of service or possible remote code execution when a victim opens a specially crafted PDF. The issue affects MuPDF 1.12.0 components, including mupdf/libmupdf family, and has been reported across mult...

CVE-2018-1000085

ClamAV (v0.99.3) contains an out-of-bounds heap memory read in the XAR parser’s xar_hash_check function, which can cause a memory leak and denial of service when scanning a crafted XAR file. Public advisories indicate the issue was fixed in upstream with the release of 0.99.4 (and related distro ...

CVE-2018-10900

NetworkManager VPNC plugin (networkmanager-vpnc) before version 1.2.6 is vulnerable to a local privilege-escalation flaw. A newline character in a configuration parameter can inject a Password helper directive into the VPNC configuration, causing NetworkManager to execute arbitrary commands as ro...

CVE-2018-4056

Affected software: coturn (TURN server) with vulnerable administrator web portal, prior to version 4.5.0.9. Issue: SQL injection via a specially crafted username in the login message can bypass authentication and grant access to the administrator web portal (remote via the external interface). Ev...

CVE-2019-17347

CVE-2019-17347 affects Xen 4.11.x and earlier, where a PV (paravirtualized) x86 guest can manipulate its virtualised %cr4 to cause a denial of service or privilege escalation. The root cause is described as PV kernel context switch corruption, addressed in primary Xen/XSA advisories for the 4.11....

CVE-2020-13964

CVE-2020-13964 affects Roundcube Webmail prior to 1.3.12 and prior to 1.4.5 for 1.4.x; the issue is an HTML/XSS risk in include/rcmail_output_html.php via the username template object. Patches are released: Roundcube 1.3.12 and 1.4.5 (and 1.4.6 in some advisories). Remediation is to upgrade to th...

CVE-2020-8159

CVE-2020-8159 affects the actionpack-page-caching gem prior to 1.2.1. An attacker can write arbitrary files to the web server, potentially enabling remote code execution if unescaped ERB is written to a view. Documents show CVSS2 base 7.5 and CVSS3.1 base 9.8 (CRITICAL). Debian/DLA-2719-1 and rel...

CVE-2021-20307

CVE-2021-20307 affects libpano13, specifically the panoFileOutputNamesCreate() formatter path in versions up to 2.9.20 (rc2 and earlier). The vulnerability is a format string issue that can lead to reading and writing arbitrary memory values, with potential for remote memory disclosure and, per t...

CVE-2021-35452

CVE-2021-35452 affects libde265 v1.0.8, with an Incorrect Access Control vulnerability caused by a SEGV in slice.cc. Exploitation could lead to denial of service and, in some advisories, potential arbitrary code execution via crafted media files. Public details in connected documents indicate rem...

CVE-2021-45086

CVE-2021-45086 affects GNOME Web (Epiphany) where a server-provided suggested_filename is used as the pdf_name value in PDF.js, enabling XSS. Affected versions include GNOME Web before 40.4 and 41.x before 41.1; exploitation details and in-the-wild status are not shown in the provided documents. ...

CVE-2022-43240

CVE-2022-43240 affects libde265 v1.0.8 and is described as a heap-buffer-overflow in ff_hevc_put_hevc_qpel_h_2_v_1_sse within sse-motion.cc, leading to potential Denial of Service via crafted video files. Multiple connected sources corroborate the same vulnerability and scope across distributions...

CVE-2023-0412

Wireshark contains a vulnerability CVE-2023-0412: a crash in the TIPC dissector across Wireshark 4.0.0–4.0.2 and 3.6.0–3.6.10, enabling denial of service via packet injection or crafted captures. Affected component: TIPC dissector. Root cause: crash in TIPC parser. Impact: DoS with potential serv...

CVE-2023-40181

CVE-2023-40181 (FreeRDP) is an integer-underflow in the zgfx_decompress_segment path that can cause an out-of-bounds read during CopyMemory, potentially crashing the client. Affected are FreeRDP variants implementing RDP; the issue is fixed in versions 2.11.0 and 3.0.0-beta3. The vulnerability st...

CVE-2023-48733

Summary: CVE-2023-48733 describes an insecure default in Ubuntu’s EDK2 firmware that enables the UEFI Shell, allowing an OS-resident attacker to bypass Secure Boot locally. What is affected: Ubuntu’s edk2 UEFI firmware packages (EDK2) shipped with a default that enables the UEFI Shell. Root cause...

CVE-2024-26833

CVE-2024-26833 : In the Linux kernel, the drm/amd/display memory-leak issue was caused by not freeing memory for dmub_srv after its destruction. The backtrace implicates dmub_sw_init and related AMDGPU initialization paths, with an unfreed object after dmub_srv destruction. The advisory’s fix is ...

CVE-2024-35833

CVE-2024-35833 affects the Linux kernel's dmaengine: fsl-qdma. The issue is a memory leak in the queue command DMA caused by dma_alloc_coherent() being undone in neither the remove path nor the error path of fsl_qdma_probe(). The advisory across connected sources states the fix is to switch to th...

CVE-2024-35871

CVE-2024-35871 concerns a kernel-level issue in riscv process handling that leaks the kernel global pointer (gp) via user-space observables. The vulnerability stems from how childregs (the user-context registers during syscall) can expose kernel gp in several ways (e.g., after execve, via ptrace,...

CVE-2025-37929

CVE-2025-37929 affects the Linux kernel arm64 Spectre-BHB mitigation (

CVE-2025-38052

CVE-2025-38052 concerns the Linux kernel where a slab-use-after-free in net/tipc/crypto.c during tipc_aead_encrypt_done can occur after the tipc_crypto tx is freed when a namespace is deleted. The issue arises when simd_aead_encrypt is interrupted and crypto_simd_usable() returns false, allowing ...

CVE-2025-38145

CVE-2025-38145 affects the Linux kernel in the ASPEED SoC driver (aspeed_lpc_enable_snoop). The vulnerability is due to not checking the return value of devm_kasprintf(), which can return NULL on memory allocation failure, leading to a NULL pointer dereference. The connected documentation confirm...

CVE-2025-38286

CVE-2025-38286 affects the Linux kernel with a fault in pinctrl/at91: at91_gpio_probe() not validating the OF alias, allowing out-of-bounds access to gpio_chips when indexing with an invalid value. The bug, which could be exposed if BUG() is compiled out, is mitigated by a kernel fix/workaround d...

CVE-2025-38328

CVE-2025-38328 concerns the Linux kernel JFFS2 subsystem. The issue arises from insufficient validation after jffs2_prealloc_raw_node_refs() completion, allowing a null pointer dereference in jffs2_link_node_ref and leading to a local, attacker-controlled disruption as described by the Syzkaller ...

CVE-2025-38412

CVE-2025-38412 affects the Linux kernel component platform/x86: dell-wmi-sysman. The issue arises from dereferencing WMI data blocks retrieved in sysfs callbacks without validating their content. The fix added is to validate the WMI data blocks after retrieval and before dereferencing their conte...

CVE-2025-38424

The CVE-2025-38424 entry is supported by connected docs describing a Linux kernel vulnerability in perf sampling. Affected: perf component in the Linux kernel (ARM64 crash scenario). Root cause: perf could access userspace during teardown, specifically sampling during exit_mmap()’s tlb_finish_mmu...

CVE-2025-38425

CVE-2025-38425 affects the Linux kernel i2c: tegra SMBUS block read path. Root cause: SMBUS block read reads the device-provided length without proper validation, continuing reads when length is 0 or exceeds allowed bytes. The vulnerability allows local attackers with lower privileges to potentia...

CVE-2004-0981

CVE-2004-0981 affects ImageMagick and concerns a buffer overflow in the TIFF/EXIF parsing routine that can lead to remote code execution via a crafted image file. The initial record states the vulnerability exists in ImageMagick before 6.1.0, with a network-based attack vector and critical impact...

CVE-2007-0454

CVE-2007-0454 describes a format-string vulnerability in the Samba 3.0.6 to 3.0.23d release range, specifically in the afsacl.so VFS module used for AFS file systems. The flaw arises from improper handling of format specifiers in filenames during Windows ACL mapping, enabling a context-dependent ...