10003 matches found
CVE-2025-38086
CVE-2025-38086 involves a Linux kernel vulnerability in net/ch9200 where mii_nway_restart() can trigger an uninitialised access through ch9200_mdio_read() due to not checking control_read() return value. The bug stems from an uninitialised local buffer (buff) being accessed when control_read() do...
CVE-2025-38118
CVE-2025-38118 affects the Linux kernel Bluetooth MGMT subsystem. The flaw is a use-after-free in mgmt_remove_adv_monitor_complete (MGMT_OP_REMOVE_ADV_MONITOR path) caused by using mgmt_pending_add, leading to KASAN crashes. The issue is resolved by reworking MGMT_OP_REMOVE_ADV_MONITOR to avoid m...
CVE-2025-38193
CVE-2025-38193 affects the Linux kernel net_sched SFQ (sch_sfq). The issue is a missing range check on perturb_period, which can enable a race condition; patches fix perturb_period overflow/invalid values. Public demonstrations show negative, oversized, and a valid perturb value (2000000), with t...
CVE-2025-38375
CVE-2025-38375: In the Linux kernel, virtio-net could trigger an out-of-bounds read due to not validating the received length against the allocated size when reading buffers from the ring in xdp_linearize_page. The fix adds the missing length check. Affected entries in Debian/Amazon/RH advisories...
CVE-2002-2185
The CVE-2002-2185 issue concerns a flaw in IGMP processing in the Linux kernel that could let a local attacker cause a denial of service by sending an IGMP membership report addressed to a target’s Ethernet address rather than the multicast group address. Public advisories (e.g., RHSA-2006:0101 a...
CVE-2005-0077
CVE-2005-0077 affects the perl-DBI (libdbi-perl) library. The issue is insecure handling of temporary files via a symlink attack on a temporary PID file, enabling local users to overwrite arbitrary files. Multiple connected advisories reference updates or patches addressing this vulnerability (e....
CVE-2005-3626
CVE-2005-3626 affects Xpdf and related components (gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The vulnerability arises from a crafted FlateDecode stream that triggers a null dereference, leading to a denial of service (crash). The connected Nessus entry (NEWSTART_CGSL_NS-SA...
CVE-2011-3631
CVE-2011-3631 describes a vulnerability in hardlink before 0.1.2 where multiple integer overflows lead to heap-based buffer overflows during memory space calculation due to how string lengths are concatenated. A remote attacker could craft a directory tree and persuade a local user to consolidate...
CVE-2011-4915
CVE-2011-4915 affects the Linux kernel, specifically the file fs/proc/base.c, up to version 3.1. It enables a local attacker to disclose sensitive keystroke information by accessing /proc/interrupts, constituting an information-disclosure vulnerability. Root cause: improper exposure of keystroke-...
CVE-2012-3867
CVE-2012-3867 affects Puppet modules where CSR Common Name validation is lax in Puppet before 2.6.17 and in 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2. This allows user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequenc...
CVE-2013-6424
CVE-2013-6424 : Integer underflow in the xTrapezoidValid macro of render/picture.h in X.org X Server can cause a denial of service (crash) via a negative bottom value. Concrete references across Nessus/Gentoo advisories confirm X.Org Server exposure and the need to upgrade; GLSA-201701-64 recomme...
CVE-2014-4343
CVE-2014-4343 is a double-free flaw in MIT Kerberos SPNEGO: the SPNEGO initiator’s init_ctx_reselect can be corrupted by crafted traffic from an impersonating acceptor, leading to memory corruption or denial of service and potentially code execution. Affected: MIT Kerberos 5 (krb5) 1.10.x through...
CVE-2014-9657
CVE-2014-9657 affects FreeType before 2.5.4, where tt_face_load_hdmx does not enforce a minimum record size, enabling a remote attacker to trigger a denial of service (out-of-bounds read) or other impact via a crafted TrueType font. Connected sources corroborate multiple FreeType flaws and link r...
CVE-2015-1278
Google Chrome up to 44.0.2403.89 is affected by CVE-2015-1278 due to content/browser/web_contents/web_contents_impl.cc not closing a PDF document's modal dialog when navigating to an interstitial page, enabling URL spoofing via a crafted PDF (alert_dialog.pdf). Remediation: upgrade to Chrome 44.0...
CVE-2015-2189
Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 are affected by CVE-2015-2189 due to an off-by-one error in pcapng_read in wiretap/pcapng.c. This causes an out-of-bounds read and potential denial of service when processing crafted packets with an invalid Interface Statistics Block (ISB) ...
CVE-2015-8345
CVE-2015-8345 affects the eepro100 emulator in QEMU/qemu-kvm. The flaw occurs while processing Command Blocks, which can cause an infinite loop and lead to denial-of-service via application crash. Public advisories (Debian DSA-3471/3470/3469 and related entries) document this vulnerability and st...
CVE-2015-8666
CVE-2015-8666 : Heap-based buffer overflow in QEMU when built with the Q35-chipset PC system emulator. Affects QEMU’s VM migration path; Debian security advisory and Debian LTS note the issue among a broader set of QEMU vulnerabilities and indicate a security update is available (Jessie fixed in ...
CVE-2016-1254
Tor before 0.2.8.12 is affected by CVE-2016-1254. The vulnerability arises from parsing hidden service descriptors and can cause a denial-of-service client crash. Affected products are Tor releases prior to 0.2.8.12; exploitation details are not provided beyond the crash condition. Remediation is...
CVE-2016-1698
In CVE-2016-1698, Google Chrome’s extensions/renderer/resources/binding.js createCustomType did not validate module types, causing an information disclosure via a poisoned definition. Affected is Chrome before 51.0.2704.79; the issue could allow loading arbitrary modules or exposing sensitive dat...
CVE-2016-3068
Mercurial before 3.7.3 is vulnerable to remote code execution via a crafted git ext:: URL when cloning a subrepository, enabling an attacker to run arbitrary code. Public advisories (ALAS-2016-697; CentOS/RH/Fedora updates) confirm this CVE-2016-3068 issue and indicate the fix is mercurial 3.7.3....
CVE-2016-4001
The CVE-2016-4001 vulnerability affects QEMU’s Stellaris Ethernet controller emulation ( Stellaris_enet_receive in hw/net/stellaris_enet.c ). It describes a buffer overflow when the controller is configured to accept large packets, allowing remote attackers to trigger a denial of service via a la...
CVE-2016-4002
CVE-2016-4002 entry is rejected/not used per the Initial Description.
CVE-2016-7448
CVE-2016-7448 affects GraphicsMagick (Utah RLE reader) up to version 1.3.25. The vulnerability allows remote attackers to cause a denial of service via header information and file size handling, leading to CPU consumption or large memory allocations. This is caused by improper handling in the Uta...
CVE-2017-17682
CVE-2017-17682 is rejected/not used; this CVE entry is not an active vulnerability.
CVE-2017-2669
CVE-2017-2669 affects Dovecot before 2.2.29.1. When dict passdb/userdb is used, a crafted username may cause DoS by double-expanding %variables via var_expand(), leading to excessive memory or CPU usage. Public fixes exist: upgrading to Dovecot 2.2.29.1 (or later, e.g., 2.2.30.x per distributors)...
CVE-2017-5133
CVE-2017-5133 is an out-of-bounds write vulnerability in the Skia component of the Chromium browser prior to 62.0.3202.62. The connected Debian security advisory notes this CVE as part of a collection affecting chromium-browser, with the Skia bug allowing arbitrary code execution in remote scenar...
CVE-2017-6473
Wireshark CVE-2017-6473 affects Wireshark 2.2.0–2.2.4 and 2.0.0–2.0.10, where a K12 file parser crash could be triggered by a malformed capture file. The root cause is unsafe handling of lengths/offset relations in the K12 parser; the issue was addressed in wiretap/k12.c by validating these relat...
CVE-2017-7377
CVE-2017-7377 affects QEMU’s 9pfs (hw/9pfs/9p.c): the functions v9fs_create and v9fs_lcreate allow local guest OS privileged users to cause denial of service (file descriptor or memory consumption) when an in-use fid is referenced. The issue is triggered by vectors related to an already in-use fi...
CVE-2017-7757
CVE-2017-7757 is a use-after-free vulnerability in IndexedDB that can occur when an IndexedDB object is destroyed while a method on it is executing, potentially causing a crash. Affected products include Firefox versions before 54, Firefox ESR before 52.2, and Thunderbird before 52.2. The issue a...
CVE-2018-14055
ZNC vulnerability CVE-2018-14055 (and related CVEs) affects ZNC before 1.7.1-rc1, where untrusted network input is not properly validated, allowing a non-admin user to escalate privileges, inject rogue values into znc.conf, and potentially gain shell access. A separate issue (CVE-2018-14056) enab...
CVE-2018-6113
This CVE (CVE-2018-6113) concerns Google Chrome on iOS (pre-66.0.3359.117) where improper handling of pending navigation entries in Navigation allows a remote attacker to spoof the domain via a crafted HTML page. The issue is categorized as a URL spoofing/domain spoofing vulnerability in the Navi...
CVE-2018-9259
Wireshark vulnerability CVE-2018-9259 affects Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The MP4 dissector could crash due to unbounded box recursion; the issue was fixed by restricting recursion depth in epan/dissectors/file-mp4.c. Remediations include upgrading to Wireshark 2.4.6 or 2.2.14 (per SU...
CVE-2018-9269
Wireshark is affected by CVE-2018-9269: memory leak in epan/dissectors/packet-giop.c across Wireshark versions 2.4.0–2.4.5 and 2.2.0–2.2.13. The CVE has CVSS v3 base score 7.5 (HIGH) and CVSS v2 base score 5.0 (MEDIUM); impact is limited to availability (PARTIAL for CVSS2, HIGH for CVSS3) with no...
CVE-2019-12046
Summary: CVE-2019-12046 affects LemonLDAP::NG -2.0.3 and is due to Incorrect Access Control. The issue has been observed across multiple advisories and OSV/Red Hat entries, confirming a vulnerability in the 2.0.3 line. The NVD/NIST entry notes high severity (CVSS v3: CRITICAL, 9.8) with network i...
CVE-2019-20326
The CVE-2019-20326 issue affects gThumb (image viewer) across multiple distros, caused by a heap-based buffer overflow in cairo_image_surface_create_from_jpeg() inside extensions/cairo_io/cairo-image-surface-jpeg.c. In Debian 9 (DLA-2749), the fix is in gthumb 3:3.4.4.1-5+deb9u2. Ubuntu advisorie...
CVE-2019-3465
CVE-2019-3465 affects Rob Richards XmlSecLibs (all versions before 3.0.3) used by SimpleSAMLphp, where XML signature validation is incorrect. An authenticated attacker can impersonate others or elevate privileges via crafted XML messages. The issue is mitigated by upgrading XmlSecLibs to v3.0.3 o...
CVE-2020-11935
CVE-2020-11935 concerns the aufs filesystem implementation in the Linux kernel, where inode reference counts are improperly managed in the vfsub_dentry_open() method. This defect can allow a local attacker to trigger a denial-of-service condition. The connected documents consistently describe the...
CVE-2020-12279
CVE-2020-12279 affects libgit2 before 0.28.4 and 0.9x before 0.99.0. The flaw resides in checkout.c where NTFS short-name handling can cause remote code execution when cloning a repository. This is the NTFS-name handling variant related to CVE-2019-1353 family. Debian LTS and CNVD/Amazon advisori...
CVE-2020-20740
CVE-2020-20740 affects PDFResurrect. The issue is a heap-buffer-overflow in pdf_get_version() caused by lack of header validation in PDFs processed by PDFResurrect before version 0.20. Multiple distributions document the vulnerability and its fix, with patches released (e.g., PDFResurrect 0.20+; ...
CVE-2020-28984
CVE-2020-28984 affects SPIP before 3.2.8: prive/formulaires/configurer_preferences.php fails to properly validate couleur, display, display_navigation, display_outils, imessage, and spip_ecran parameters. Public advisories (Ubuntu/Debian) map this to remote code execution or arbitrary data handli...
CVE-2021-28834
Kramdown before 2.3.1 does not constrain Rouge formatters to Rouge::Formatters, allowing arbitrary class instantiation and potential code execution. Exploitation details are not provided in the documents; affected packages include kramdown/ruby-kramdown across Linux distros (e.g., Fedora, Debian,...
CVE-2021-3907
CVE-2021-3907 affects OctoRPKI: a URI containing a filename with ".." can cause a repository to write a file outside the base cache folder, potentially enabling remote code execution on the host running OctoRPKI. The connected documents indicate this is a path/traversal issue in the OctoRPKI impl...
CVE-2021-43332
CVE-2021-43332 affects GNU Mailman before 2.1.36. The CSRF token on Cgi/admindb.py admindb page contains an encrypted version of the list admin password, which could potentially be cracked by a moderator via offline brute-force. Documents correlate this with other Mailman issues (e.g., CVE-2021-4...
CVE-2022-41981
CVE-2022-41981: OpenImageIO v2.3.19.0 contains a stack-based buffer overflow in the TGA file format parser. A crafted TGA can cause out-of-bounds reads/writes on the process stack, enabling arbitrary code execution. Affected component: OpenImageIO’s TGA parser (targa files). Connected sources cor...
CVE-2022-41988
CVE-2022-41988 describes an information disclosure in OpenImageIO’s decode_iptc_iim() for OpenImageIO v2.3.19.0. A specially-crafted TIFF can disclose sensitive information. Connected sources corroborate this OpenImageIO information disclosure vulnerability and tie it to multiple advisories acros...
CVE-2022-42257
CVE-2022-42257 affects the NVIDIA GPU Display Driver for Linux, specifically the kernel mode layer (nvidia.ko). The public description states an integer overflow in this component may lead to information disclosure, data tampering, or denial of service. Connected sources corroborate affected fami...
CVE-2022-42326
CVE-2022-42326 : Xenstore vulnerability in the Xen hypervisor allows a guest to create an arbitrary number of Xenstore nodes when a node is created in a transaction and later deleted in the same transaction; the transaction finalization error can cause partial execution and accounting mismatch. T...
CVE-2023-52694
CVE-2023-52694 relates to the Linux kernel drm/bridge tpd12s015 driver. The issue arises from marking tpd12s015_remove() with __exit, which causes the function to be discarded when the driver is built-in; on unbind, cleanup may be skipped, leading to resource leakage. The vulnerability was resolv...
CVE-2024-35988
CVE-2024-35988 concerns the Linux kernel RISCV NOMMU patch that corrects TASK_SIZE for 64-bit NOMMU. The current TASK_SIZE definition caused spurious failures in userspace memory access when any RAM above 4 GiB existed, leading to incorrect memory access behavior. The vulnerability is resolved by...