CVE-2025-38181

CVE-2025-38181 affects the CALIPSO path in the Linux kernel. The root cause is a null pointer dereference in calipso_req_setattr() when CALIPSO option handling fetches a sock via sk_to_full_sk(), which could leave reqsk->rsk_listener NULL. The issue is tied to a previous commit around SYN Cook...

CVE-2025-38227

CVE-2025-38227 concerns a slab-use-after-free in the Linux kernel’s vidtv driver, specifically in vidtv_mux_pid_ctx_init and vidtv_mux_init. The root cause, as reported by syzbot, is a use-after-free that occurs when PSI initialization fails and the si member is accessed again, leading to a 8-byt...

CVE-2025-38460

CVE-2025-38460 relates to the Linux kernel, fixing a potential null pointer dereference in the ATM clip path (to_atmarpd()). The issue arises because to_atmarpd() can be called without RTNL protection, notably via clip_neigh_solicit() / neigh_ops->solicit(), and there is no RTNL dependency aro...

CVE-2026-41082

OCaml opam before 2.5.1 is affected: a .install field containing a destination filepath can traverse to a parent directory via ../, enabling potential path traversal. The issue is fixed in opam 2.5.1 (see OCaml/opam release 2.5.1). Affected component: opam’s packaging/install logic; root cause: i...

CVE-2007-0957

CVE-2007-0957 involves a stack-based buffer overflow in the krb5_klog_syslog function of the MIT Kerberos 5 kadm5 library used by kadmind and the KDC. The vulnerability arises from a boundary/format handling issue, enabling remote authenticated users to execute arbitrary code and modify the Kerbe...

CVE-2007-3278

CVE-2007-3278 affects PostgreSQL with local trust and the dblink module installed, enabling a local attacker to proxy a connection from 127.0.0.1 to access arbitrary accounts and execute arbitrary SQL. Connected advisories indicate this was addressed by PostgreSQL and related vendor updates (e.g....

CVE-2008-5507

CVE-2008-5507 affects Mozilla products: Firefox 2.x before 2.0.0.19, Firefox 3.x before 3.0.5, SeaMonkey 1.x before 1.1.14, and Thunderbird 2.x before 2.0.0.19. Root cause: bypass of the same-origin policy via a JavaScript URL that redirects to a target resource, triggering an error if the target...

CVE-2009-0115

CVE-2009-0115 affects the device-mapper-multipath tool (multipath-tools) version 0.4.8 used in multiple Linux distributions (SUSE openSUSE, SLES, Fedora, etc.). The underlying issue is world-writable permissions on the socket file /var/run/multipathd.sock, which allows a local user to send arbitr...

CVE-2013-1951

CVE-2013-1951 affects MediaWiki: specific XSS vulnerability where an attacker can inject arbitrary script/HTML via Lua function names. Affected software includes MediaWiki prior to 1.19.5 and 1.20.x prior to 1.20.4; the underlying issue is triggered through Lua function name handling. The public ...

CVE-2013-2167

CVE-2013-2167 affects python-keystoneclient versions 0.2.3 through 0.2.5, where the middleware memcache signing bypass creates a security feature bypass vulnerability. Connected sources confirm the issue is described as a middleware signing bypass in that range of versions, with related advisorie...

CVE-2013-5123

The CVE-2013-5123 issue affects Python-pip prior to 1.5, where the mirroring support (-M/--use-mirrors) performs insecure DNS queries and lacks proper authenticity checks, enabling MITM-like download tampering. Connected advisories confirm this vulnerability and describe the fix as removing the m...

CVE-2014-6052

CVE-2014-6052 affects LibVNCServer (0.9.9 and earlier) where LibVNCClient’s HandleRFBServerMessage in libvncclient/rfbproto.c fails to validate certain malloc return values. This can allow a remote VNC server to trigger a denial of service (application crash) or potentially execute arbitrary code...

CVE-2015-0838

Dulwich (Python Git library) is affected by a buffer overflow in the C implementation of apply_delta in _pack.c, impacting versions before 0.9.9 and enabling remote code execution via a crafted pack file. Mitigation: upgrade to Dulwich 0.9.9+ (e.g., 0.10.0 per Mageia advisory) or apply provided s...

CVE-2015-1264

CVE-2015-1264 is a cross-site scripting vulnerability in Google Chrome prior to 43.0.2357.65, triggered when data is mishandled by the Bookmarks feature. The connected documents confirm this flaw affects Chrome and emphasize that exploitation could arise from user-assisted actions to inject scrip...

CVE-2015-1276

The CVE-2015-1276 issue affects Google Chrome’s IndexedDB implementation (content/browser/indexed_db/indexed_db_backing_store.cc). Description: a use-after-free in IndexedDB can allow remote attackers to cause a denials of service or potentially other impact by leveraging an abort action before a...

CVE-2015-1281

CVE-2015-1281 is documented in multiple connected sources as a CSP bypass in Blink (core/loader/ImageLoader.cpp) used by Google Chrome/Chromium prior to 44.0.2403.89. The root cause is a failure to correctly determine the V8 context of a microtask, enabling remote CSP restrictions bypass via an i...

CVE-2015-5522

CVE-2015-5522 is a heap-based buffer overflow in the ParseValue function of lexer.c in tidy before 4.9.31 that allows remote attackers to crash the program via a vector involving a command character in an href. The vulnerability affects tidy/libtidy and can lead to a denial of service. A fix is a...

CVE-2016-1231

Prosody 0.9.x contains a directory traversal vulnerability in the HTTP file-serving module (mod_http_files) that allows remote attackers to read arbitrary files via a .. path. The issue affects versions before 0.9.9. Impact is Confidentiality with partial exposure as described in CVE-2016-1231; n...

CVE-2016-1622

CVE-2016-1622 affects Google Chrome prior to 48.0.2564.109. The Extensions subsystem does not prevent use of Object.defineProperty to override intended extension behavior, enabling remote attackers to bypass the Same Origin Policy via crafted JavaScript. Connected sources (e.g., Debian/Debian sec...

CVE-2016-1681

The CVE-2016-1681 issue is a heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function (j2k.c) in OpenJPEG, as used by PDFium in Google Chrome. Exploitation could allow a remote attacker to cause a denial of service or potentially other impact via a crafted PDF document. Connected advis...

CVE-2016-3981

OptiPNG (before 0.7.6) is affected by CVE-2016-3981 due to a heap-based overflow in bmp_read_rows (pngxrbmp.c), enabling potential out-of-bounds access and possible code execution or crash.iva Attack vector: crafted image file; impact: DoS or code execution. Mitigation: upgrade to OptiPNG 0.7.6+ ...

CVE-2016-5177

CVE-2016-5177 is a use-after-free in Chrome/Chromium’s V8 engine prior to 53.0.2785.143. Public records (Debian, Arch, Gentoo, Gentoo GLSA) describe it as enabling remote arbitrary code execution with a remote attacker potentially gaining code execution, and in some sources a possible crash. The ...

CVE-2016-5178

CVE-2016-5178 concerns Chromium/Chrome prior to 53.0.2785.143. Connected sources confirm multiple vulnerabilities in Chromium leading to arbitrary code execution (remote) and that CVE-2016-5178 involved various fixes from internal audits, fuzzing, and related initiatives. Arch Linux advisory expl...

CVE-2016-9915

CVE-2016-9915 is a memory leak in QEMU’s 9pfs handle backend (hw/9pfs/9p-handle.c). The flaw allows a local privileged guest attacker to cause host memory consumption and potentially QEMU process crash due to a missing cleanup operation in the handle backend. Public documentation confirms the iss...

CVE-2017-14990

CVE-2017-14990 is confirmed in the connected documents. WordPress 4.8.2 stores cleartext values in wp_signups.activation_key, while wp_users.user_activation_key is stored as a hash, which could enable an attacker with database read access (for example via an unspecified SQL injection) to hijack u...

CVE-2017-15413

CVE-2017-15413 corresponds to a type confusion in WebAssembly within Google Chrome’s V8 engine. The vulnerability affects Chrome before version 63.0.3239.84 and is described as enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. The root cause is a type conf...

CVE-2017-17913

CVE-2017-17913 affects GraphicsMagick, specifically a stack-based buffer over-read in WriteWEBPImage (coders/webp.c) caused by incompatibility with libwebp versions 0.5.0 and later. The description in the initial document notes GraphicsMagick 1.4 snapshot-20171217 Q8 as affected. Connected docume...

CVE-2017-8809

MediaWiki is affected by CVE-2017-8809: a Reflected File Download vulnerability in api.php affecting versions prior to 1.27.4, 1.28.x prior to 1.28.3, and 1.29.x prior to 1.29.2. The issue arises from insufficient input validation in api.php, allowing a remote attacker to trigger a file download ...

CVE-2017-9726

CVE-2017-9726 affects Ghostscript GhostXPS 9.21. The Ins_MDRP function in base/ttinterp.c is vulnerable, allowing remote attackers to trigger a heap-based buffer over-read, causing an application crash and potentially other impact. Exploitation would involve a crafted document; CVSS v3.0 vector: ...

CVE-2018-0486

CVE-2018-0486 affects Shibboleth XMLTooling-C prior to 1.6.3, as used in Shibboleth Service Provider prior to 2.6.0, on Windows and other platforms. The flaw arises from mishandling digital signatures of user attribute data, enabling remote attackers to read sensitive information or impersonate u...

CVE-2018-17141

CVE-2018-17141 affects HylaFAX and HylaFAX+ where specially crafted JPEG input during fax page reception could trigger remote code execution due to missing input sanitising in the FaxModem data path. Public fixes exist: HylaFAX+ 5.6.1 (and later) mitigates the issue; Debian LTS advisory notes a f...

CVE-2018-7443

CVE-2018-7443 affects ImageMagick (ReadTIFFImage in coders/tiff.c) where improper validation of image data can trigger a memory allocation failure in AcquireMagickMemory, leading to denial of service. The issue is associated with ImageMagick 7.0.7-23 Q16 and relates to TIFF image processing. Conn...

CVE-2018-8741

SquirrelMail 1.4.22 contains a directory traversal flaw in Deliver.class.php (att_local_name field) that can allow an authenticated attacker to exfiltrate or delete files on the hosting server. Public reports reference CVE-2018-8741 across multiple advisories (Debian DLA-1344-1; Fedora updates fo...

CVE-2019-12466

MediaWiki before 1.32.2 is affected by CVE-2019-12466: a cross‑site request forgery in the logout feature that can occur without a token. The initial description states CSRF in MediaWiki 1.32.1 and prior. Connected advisories confirm fixes in newer releases (e.g., Mageia lists 1.32.2-alt1; Debian...

CVE-2019-12471

MediaWiki CVE-2019-12471: A cross-site scripting flaw exists in MediaWiki 1.30.0–1.32.1 when loading user JavaScript from a non-existent account, allowing XSS on users who load that script. Affected: 1.30.0–1.32.1. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6. Upgrade to a fixed release to mitigate.

CVE-2020-19716

CVE-2020-19716 is a confirmed Exiv2 vulnerability affecting the Databuf function in types.cpp (Exiv2 v0.27.1). The issue is a buffer overflow that can lead to a denial of service. Public sources in connected docs (e.g., Debian/DLA-3186 and SUSE advisories) explicitly reference this CVE and note r...

CVE-2021-29376

CVE-2021-29376 affects ircII (IRC client) where a crafted CTCP UTC message can cause a denial of service via segmentation fault and client crash, disconnecting the victim from an IRC server. Public advisories and Debian/OSS sources note the issue in ircii prior to 20210314 and state remediation i...

CVE-2021-30159

In MediaWiki, CVE-2021-30159 affects

CVE-2021-33054

CVE-2021-33054 affects SOGo 2.x (before 2.4.1) and 3.x–5.x (before 5.1.1); the issue is that SOGo does not validate signatures of any SAML assertions, allowing an attacker with network access to impersonate users via SAML authentication. The root cause is the lack of SAML signature validation. Pu...

CVE-2022-35410

CVE-2022-35410 affects mat2 (metadata anonymisation toolkit) prior to version 0.13.0, where a directory traversal in the ZIP archive cleaning process could lead to information disclosure, primarily impacting mat2 web deployments. The issue is a path traversal vulnerability exploitable via crafted...

CVE-2022-3633

CVE-2022-3633 affects the Linux kernel, specifically the function j1939_session_destroy in net/can/j1939/transport.c. The issue is a memory leak caused by the manipulation of this routine. Multiple connected sources (e.g., Chainguard security.json entry, Astra Linux bulletin, CNVD/CNNVD entries, ...

CVE-2022-42315

CVE-2022-42315 pertains to Xenstore in the Xen hypervisor. The issue is that malicious guests can cause xenstored to allocate large amounts of memory, leading to a DoS. The documented vectors include: issuing requests without reading responses (buffered in memory), generating many watch events, c...

CVE-2022-43249

Libde265 1.0.8 contains a heap-buffer-overflow in put_epel_hv_fallback (fallback-motion.cc), enabling DoS via a crafted video file. Affected software/version: libde265 v1.0.8. Root cause and impact are as described in multiple connected advisories, which consistently cite Denial of Service when p...

CVE-2025-25475

CVE-2025-25475 affects DCMTK v3.6.9+ DEV and is caused by a NULL pointer dereference in /libsrc/dcrleccd.cc, enabling a crafted DICOM file to trigger a Denial of Service. Connected advisories confirm this issue and note fixes in various Linux distros (e.g., Debian DLA-4227, openSUSE SUSE advisory...

CVE-2025-38009

CVE-2025-38009 : In the Linux kernel, the wifi driver mt76 initializes and cleans up TX NAPI on removal. A fix disables TX NAPI before deleting the NAPI instance in mt76_dma_cleanup() to prevent a warning observed after commit 9dd05df8403b. The issue arises when driving removal of mt7921e/mt76 dr...

CVE-2025-38074

CVE-2025-38074 affects the Linux kernel vhost-scsi path. The issue arises when the vhost-scsi completion path accesses vq->log_base after vq->log_used has been set to false, due to a race around vq->mutex protecting vq->log_used. The fix adds a mutex around vq->log_used checks to p...

CVE-2025-38103

CVE-2025-38103 relates to the Linux kernel HID path (usbhid). The issue, described in connected sources, is an out-of-bounds bug in usbhid_parse() that could arise from HID descriptor handling. The fix updates the HID descriptor struct to align with USB HID 1.11 (reflecting mandatory vs. optional...

CVE-2025-38113

CVE-2025-38113 affects the Linux kernel: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used. With nosmp in the kernel command line, CPUs aren’t brought up and their cpc_desc_ptr can be NULL, leading to NULL dereferences when CPU0 iterates over possible CPUs and panics. The issue is docum...

CVE-2025-38146

The CVE CVE-2025-38146 concerns the Linux kernel net/openvswitch MPLS parsing dead loop when handling MPLS stacks, where the label count may wrap and an invalid index (-1) can occur in key_extract_l3l4, causing a potential soft lockup/CPU stall. Affected: Linux kernel with openvswitch MPLS flow p...

CVE-2025-38362

The CVE-2025-38362 issue is in the Linux kernel’s DRM AMD display path. The function get_first_active_display() could return NULL when the display list is empty, and mod_hdcp_hdcp1_enable_encryption() did not check this return value, risking a NULL pointer dereference in mod_hdcp_hdcp2_enable_enc...