CVE-2025-37929

CVE-2025-37929 affects the Linux kernel arm64 Spectre-BHB mitigation (

CVE-2025-38063

The CVE-2025-38063 entry concerns a Linux kernel vulnerability in the Linux DM (device-mapper) path where a bio submitted with REQ_PREFLUSH causes an unconditional IO throttle via wbt_wait, throttling the flush_bio that includes REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC. The root cause is throttling...

CVE-2025-38476

Mode C: The CVE-2025-38476 entry concerns a use-after-free in the Linux kernel’s rpl_do_srh_inline function (IPv6 RPL handling). The issue arises from accessing ipv6_hdr(skb) after skb_cow_head(), which could free the header. The fix converts the header reference to a local struct (oldhdr) instea...

CVE-2025-38485

CVE-2025-38485 affects the Linux kernel IIO FXLS8962AF accelerator driver. The flaw is a use-after-free in fxls8962af_fifo_flush where indio_dev->active_scan_mask is accessed while the device might exit buffer mode mid-interrupt, creating a race that can lead to a NULL pointer dereference. The...

CVE-2005-0102

Evolution 2.0.2 and earlier is affected by CVE-2005-0102 due to an integer overflow in camel-lock-helper. A length value of -1 can cause a zero-byte allocation and a buffer overflow, enabling arbitrary code execution by local users or remote malicious POP3 servers. The issue is cited across multi...

CVE-2007-1887

CVE-2007-1887 concerns a buffer overflow in the sqlite_decode_binary function in the bundled sqlite library used by PHP. The issue affects PHP 4 before 4.4.5 and PHP 5 before 5.2.1, where an empty parameter value to sqlite_udf_decode_binary (0x01 character input) can enable context-dependent arbi...

CVE-2008-2931

The CVE-2008-2931 issue affects the Linux kernel (fs/namespace.c) prior to version 2.6.22, where do_change_type does not verify CAP_SYS_ADMIN, enabling a local user to gain privileges or cause a denial of service by modifying mountpoint properties. The vulnerability is documented across multiple ...

CVE-2011-2522

CVE-2011-2522 describes CSRF in the Samba Web Administration Tool (SWAT) affecting Samba 3.x before 3.5.10, enabling remote attackers to perform configuration changes (e.g., starting/stopping services, adding/removing shares or users) via crafted SWAT requests. Connected advisories confirm SWAT C...

CVE-2011-2691

The CVE-2011-2691 issue affects libpng in multiple series (1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, 1.5.x before 1.5.4). The png_err function may call with a NULL pointer instead of an empty string, enabling remote attackers to crash the application via a crafted PNG image (d...

CVE-2011-3905

CVE-2011-3905 is a libxml2 out-of-bounds memory read vulnerability. It affects libxml2 used by Chrome before 16.0.912.63 and can be triggered by processing crafted XML, potentially crashing the application or enabling arbitrary code execution. Mitigations documented in multiple advisories (e.g., ...

CVE-2012-5474

Affected software : Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1). Vulnerability : the file /etc/openstack-dashboard/local_settings is world readable, exposing the secret key value. Impact (as described) : exposure of secret key information;...

CVE-2013-6668

CVE-2013-6668 refers to multiple vulnerabilities in the V8 JavaScript engine (before 3.24.35.10) as used in Google Chrome prior to 33.0.1750.146. The connected documents confirm that these issues were fixed in V8 version 3.24.35.10 and are reflected in Chromium/Chrome patches (e.g., Chrome 33.x s...

CVE-2014-5353

The CVE-2014-5353 issue affects MIT Kerberos krb5 when the KDC uses LDAP. A remote authenticated user can crash the KDC/daemon by issuing an LDAP query with no results using an incorrect password policy object type. Root cause: LDAP KDB back end handling of password policy objects (in ldap_pwd_po...

CVE-2014-8158

JasPer 1.900.1 and earlier contain multiple stack-based buffer overflows in jpc_qmfb.c, enabling remote attackers to crash or possibly execute arbitrary code via crafted JPEG 2000 images. The issue (CVE-2014-8158) affects the JasPer JPEG-2000 library; impact is a denial of service and potential c...

CVE-2014-9323

CVE-2014-9323 affects Firebird servers prior to 2.1.7 and 2.5.x prior to 2.5.3 SU1. The xdr_status_vector function mishandles a remote op_response with a non-empty status, causing a NULL pointer dereference and a denial-of-service crash. This is a remote, network-based issue tied to malformed pac...

CVE-2014-9670

CVE-2014-9670 : In FreeType before 2.5.4, multiple integer signedness errors in the pcf_get_encodings function (pcf/pcfread.c) can be triggered by a crafted PCF file with negative values for the first column and first row, enabling a remote attacker to cause a denial of service via integer overfl...

CVE-2014-9675

CVE-2014-9675 is a vulnerability in FreeType prior to 2.5.4 where bdf/bdflib.c identifies property names by matching only an initial substring. This allows remote attackers to discover heap pointer values and bypass ASLR via a crafted BDF font. Affected: FreeType library (before 2.5.4); impact is...

CVE-2016-1626

CVE-2016-1626 affects Google Chrome (before 48.0.2564.109) via OpenJPEG used in PDFium. The opj_pi_update_decode_poc function in pi.c miscalculates a layer index value, enabling a remote attacker to cause a denial of service (out-of-bounds read) through a crafted PDF document. Remediation: update...

CVE-2016-2366

Pidgin is affected by CVE-2016-2366 and related MXIT protocol issues in libpurple, where specially crafted MXIT data from a server or attacker can trigger out-of-bounds reads/writes in Pidgin’s MXIT handling, potentially crashing or memory-corrupting the application. The connected Nessus/EulerOS ...

CVE-2016-7449

CVE-2016-7449 affects GraphicsMagick 1.3.24 where TIFFGetField() in coders/tiff.c can cause a denial of service via a malformed file containing an “unterminated” string. Connected sources confirm a remote-exploitation risk leading to an out-of-bounds heap read. CVSS details: v3 base score 7.5 (Hi...

CVE-2017-1002201

CVE-2017-1002201 describes a cross-site scripting/code execution risk in Haml prior to 5.0.0.beta.2 when user input is used on the server and the single quote character was not escaped, allowing input manipulation that could introduce attributes and potentially execute code. Public details confir...

CVE-2017-14607

CVE-2017-14607 concerns ImageMagick 7.0.7-4 Q16 where an out-of-bounds read in ReadTIFFImage (coders/tiff.c) could allow an attacker to disclose memory contents or crash the application. The description specifies the root cause as an out-of-bounds read in TIFF decoding and notes potential memory ...

CVE-2017-14859

CVE-2017-14859 affects Exiv2 up to version 0.26, where an invalid memory address dereference in Exiv2::StringValueBase::read (value.cpp) can cause a segmentation fault and denial of service. The connected documents confirm this precise root cause and the resulting crash vector, and cite multiple ...

CVE-2017-15392

CVE-2017-15392 relates to Google Chrome/Chromium on Windows and is caused by an incorrect registry key handling in the PlatformIntegration component prior to 62.0.3202.62. A crafted Windows Registry entry could allow heap corruption, potentially enabling code execution or stability issues as desc...

CVE-2017-15415

Google Chrome IPC Pointer Information Disclosure vulnerability (CVE-2017-15415) stems from incorrect serialization in the IPC component, allowing a remote attacker to leak a pointer value via a crafted HTML page on affected builds prior to 63.0.3239.84. Public descriptions in CNVD-2018-22403 corr...

CVE-2017-17458

CVE-2017-17458 affects Mercurial prior to 4.4.1. A specially malformed repository can cause Git subrepositories to execute arbitrary code via a checked-in .git/hooks/post-update script. This condition can occur despite typical Mercurial usage preventing such repositories, though they can be creat...

CVE-2017-17852

CVE-2017-17852 affects the Linux kernel’s BPF verifier (kernel/bpf/verifier.c) up to version 4.14.8. The root cause is mishandling of 32-bit ALU operations, which can allow local users to cause a denial of service (memory corruption) and possibly other impact. The connected Nessus entries repeat ...

CVE-2017-6499

CVE-2017-6499 is rejected/not used as stated.

CVE-2017-8355

ImageMagick 7.0.5-5 is affected by CVE-2017-8355 via the ReadMTVImage function in mtv.c, which can cause a memory leak and denial of service when processing a crafted MTV file. Connected sources confirm the specific vulnerable component and file, but do not list a patched version or fix details.

CVE-2018-12891

CVE-2018-12891 affects the Xen hypervisor. A flaw in PV MMU preemption checks allows a malicious/badly-behaved PV guest to bypass preemption and potentially run an unbounded number of iterations, causing a Denial of Service that can freeze the host. Affected are Xen versions through 4.10.x (and o...

CVE-2018-17472

CVE-2018-17472 : In Google Chrome for iOS (Intents), the handling of the googlechrome:// URL scheme before version 70.0.3538.67 could allow a remote attacker to escape the iframe sandbox via a crafted HTML page. The vulnerability is tied to the browser’s iOS Intents handling and could lead to san...

CVE-2018-5686

MuPDF 1.12.0 contains an infinite loop vulnerability in pdf_parse_array (EOF not considered) that can be triggered by a crafted PDF to cause denial of service. This CVE (CVE-2018-5686) is referenced across multiple advisories (Arch Linux ASA-201805-12/ASA-201805-5, Debian DSA-4334-1, DLA-1838-1, ...

CVE-2018-6162

CVE-2018-6162 is a heap buffer overflow in WebGL within Google Chrome (Mac) prior to 68.0.3440.75, exploitable via crafted HTML to trigger heap corruption. Debian and other advisories confirm a fix in Chrome/Chromium 68.0.3440.75 (and later); remediation is to upgrade to the fixed version. The co...

CVE-2018-7050

CVE-2018-7050 affects Irssi prior to 1.0.7 and 1.1.x prior to 1.1.1, where a NULL pointer dereference occurs for an "empty" nick. Debian security notes and related advisories describe this as a denial of service risk (null pointer backreference), with fixes delivered in Irssi packages: upgrade to...

CVE-2018-7540

CVE-2018-7540 affects the Xen hypervisor (through 4.10.x) enabling local x86 PV guests to trigger a host-DOS via non-preemptable L3/L4 pagetable freeing. This can cause host OS CPU hang. The issue is discussed in the Xen advisory XSA-252 with DoS via pagetable freeing. Mitigation is to apply the ...

CVE-2019-18423

CVE-2019-18423 concerns the Xen hypervisor vulnerability affecting ARM guests via XENMEM_add_to_physmap in Xen 4.12.x and earlier. The issue stems from p2m handling: p2m->max_mapped_gfn is used to sanity-check guest frames in p2m_resolve_translation_fault() and p2m_get_entry(), while p2m_get_r...

CVE-2020-19609

CVE-2020-19609 affects Artifex MuPDF: a heap-based buffer overwrite in tiff_expand_colormap() when parsing TIFF files can cause denial of service. The vulnerability is present in MuPDF before 1.18.0. OpenSUSE/OpenSUSE-SU-2021:1341-1 and Debian/DLA-2765-1 reference this issue alongside CVE-2020-16...

CVE-2020-23226

CVE-2020-23226 is documented across multiple feeds as a set of Cross Site Scripting (XSS) vulnerabilities in Cacti 1.2.12 . The affected components include (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, and (6) data_input.php (noting dupl...

CVE-2021-30152

CVE-2021-30152 affects MediaWiki prior to 1.31.13 and 1.32.x through 1.35.x before 1.35.2. Root cause: via the MediaWiki API to “protect” a page, a user could elevate protection beyond their current permissions. Impact: potential unauthorized page protection that exceeds user privileges. Remediat...

CVE-2021-32728

The CVE describes a vulnerability in Nextcloud Desktop Client prior to 3.3.0 where the client does not verify that a private key matches the previously downloaded public certificate when obtaining keys via the API. If a server serves a malicious public key, user data could be encrypted for that k...

CVE-2021-44759

CVE-2021-44759 affects Apache Traffic Server 8.0.0–8.1.0. The root cause is improper authentication in the TLS origin validation, enabling a man-in-the-middle attack. Impact is partial confidentiality, integrity, and availability. Publicly documented references indicate MITM risk via TLS origin v...

CVE-2021-45943

GDAL 3.3.0–3.4.0 contains a heap-based buffer overflow in PCIDSKFile::ReadFromFile (invoked via PCIDSKSegment::ReadFromFile and PCIDSKBinarySegment::CPCIDSKBinarySegment). This can cause denial of service and may permit arbitrary code execution when processing crafted PCIDSK data. Public advisori...

CVE-2022-31088

The CVE-2022-31088 issue affects LDAP Account Manager (LAM). In versions prior to 8.0, the username field at login could be used to enumerate LDAP data during LDAP search configuration. This is limited to enumeration during login and does not mention broader code execution paths. The vulnerabilit...

CVE-2022-43245

CVE-2022-43245 affects libde265 v1.0.8 and is a segmentation fault in apply_sao_internal (sao.cc) that enables Denial of Service via a crafted video file. Public documents tie this to multiple distributions and advisories (Debian DSA 5346-1, USN/LTS notes, Gentoo GLSA, AstraLinux, Alpine Linux, F...

CVE-2023-2854

CVE-2023-2854 is a denial-of-service vulnerability in Wireshark caused by a crash in the BLF file parser when processing crafted capture files. Affected releases include Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13. Public references in multiple advisories note the issue as part of a broader set of Wir...

CVE-2023-36823

CVE-2023-36823 affects the Ruby sanitizer library (Sanitize). Older releases (3.0.0–6.0.1) could allow crafted HTML/CSS to bypass allowlisting when using the built-in relaxed config or a custom config permitting style elements and CSS at‑rules, enabling cross‑site scripting. Sanitize 6.0.2 fixes ...

CVE-2024-35785

CVE-2024-35785 affects the Linux kernel: a bug in the error path when registering devices on the TEE bus could trigger a kernel panic due to an incorrect error handling flow, specifically following the supplicant-based device enumeration change (commit 7269cba53d90). The issue manifests as a tran...

CVE-2024-35837

CVE-2024-35837 is tied to a Linux kernel issue in the mvpp2 driver where BM pool registers could persist values after a kexec boot, potentially triggering a kernel panic. The published fix requires clearing the BM pool before initialization. Connected documents (e.g., OESA-2024-2182) confirm the ...

CVE-2025-37959

CVE-2025-37959 – Linux kernel : Vulnerability in bpf_redirect_peer where redirecting a packet to a device in another network namespace could leave skb metadata (namespace-bound state) from the host in the container namespace, enabling potential information leakage. The patch scrubs the packet on ...

CVE-2025-38078

The CVE-2025-38078 issue affects the Linux kernel ALSA PCM OSS layer. A race occurs when clearing the buffer with silence data during initialization/reconfiguration via snd_pcm_format_set_silence() using runtime->dma_area, which may be freed concurrently outside PCM ops, causing a use-after-fr...