CVE-2025-38075

CVE-2025-38075 affects the Linux kernel iscsi target/scsi subsystem. A NOPIN response timer could be restarted on expiration for a deleted connection, causing a NULL pointer dereference and a crash in iscsit_fill_cxn_timeout_err_stats during timeout handling. The root cause is the nopin timer bei...

CVE-2025-38107

CVE-2025-38107: In the Linux kernel, a race in net_sched:ets (ets_qdisc_change) was fixed. The race occurs when a SFQ perturb timer fires at an inopportune moment, enabling underflow of a parent qlen during qdisc operations. The corrective action is to purge the qdisc with qdisc_purge_queue() bef...

CVE-2025-38334

In CVE-2025-38334, the Linux kernel SGX path could reclaim EPC pages that are poisoned. Root cause: epc_page->poison is set during memory failure but the reclaimer logic does not check it, so poisoned EPC pages could be reclaimed and written out with EWB microcode operations, risking enclosure...

CVE-2025-38382

The CVE-2025-38382 entry concerns a Linux kernel bug in btrfs related to iterating extrefs during log replay. Specifically, in __inode_add_ref(), processing extrefs could jump to a next label with victim_name.len uninitialized, causing undefined memory access in the next loop iteration. The docum...

CVE-2025-38395

CVE-2025-38395 involves the Linux kernel regulator GPIO driver. The root cause is an out-of-bounds access in drvdata::gpiods because memory was allocated for only one pointer, while config::ngpios can exceed 1. The vulnerability can occur when more than one GPIO descriptor is configured. The fix ...

CVE-2025-38399

CVE-2025-38399 describes a NULL pointer dereference in the Linux kernel SCSI target code. Specifically, core_scsi3_decode_spec_i_port() may call core_scsi3_lunacl_undepend_item() with dest_se_deve, which could be NULL in an error path, potentially leading to a kernel crash. The fix implemented ad...

CVE-2004-0809

CVE-2004-0809 affects the Apache mod_dav WebDAV module in Apache 2.0.50 and earlier, allowing remote attackers to cause a denial of service (child process crash) via a particular sequence of LOCK requests for locations with WebDAV access. Connected documents in OpenVAS/Tenable references corrobor...

CVE-2006-1244

CVE-2006-1244 describes an unspecified vulnerability in certain xpdf-using components after version 3.00 (affecting pdfkit.framework, gpdf, pdftohtml, and libextractor) with unknown impact and user-assisted attack vectors. The description cites possible issues in gmem.c, SplashXPathScanner.cc, JB...

CVE-2007-2798

CVE-2007-2798 : Stack-based buffer overflow in the kadmind rename_principal_2_svc function of MIT Kerberos (krb5) 1.5.3, 1.6.1 and related builds. An authenticated remote attacker could execute arbitrary code by sending a crafted request to rename a principal. Connected advisories (MiracleLinux A...

CVE-2009-0029

This CVE affects the Linux kernel 2.6.28 and earlier on s390, powerpc, sparc64, and mips 64-bit platforms. The root cause is that a 32-bit user-space argument in a 64‑bit register was not verifiably sign-extended when passed to a system call, allowing local users to crash the kernel or potentiall...

CVE-2009-1186

CVE-2009-1186 affects udev prior to version 1.4.1, where a buffer overflow in util_path_encode in udev/lib/libudev-util.c can be triggered by crafted arguments, enabling a local denial of service. Public reports tie this with the same issue as CVE-2009-1185/1186; multiple advisories (Mandriva, Ma...

CVE-2009-1837

CVE-2009-1837 describes a race condition in Mozilla Firefox 3 before 3.0.11 within NPObjWrapper_NewResolve in nsJSNPRuntime.cpp of xul.dll. The vulnerability could allow remote code execution via a page transition during Java applet loading, related to a use-after-free involving memory tied to a ...

CVE-2010-2497

FreeType vulnerability CVE-2010-2497 arises from an integer underflow in glyph handling in versions before 2.4.0, enabling remote crash or possibly arbitrary code execution via crafted fonts. Multiple advisories ( Gentoo GLSA, openSUSE, Nessus plugins, OSV) list CVE-2010-2497 among a set of FreeT...

CVE-2011-4613

The CVE-2011-4613 issue affects the X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux, where input TTY verification can bypass access restrictions by misinterpreting stdin as the console TTY. This is a local vulnerability that could allow bypassing restrictions during X sta...

CVE-2012-3180

CVE-2012-3180 is an unspecified vulnerability in Oracle MySQL Server that affects MySQL 5.1.65 and earlier and 5.5.27 and earlier. The issue allows remote authenticated users to impact availability via unknown vectors related to the Server Optimizer. Publicly referenced feeds in connected documen...

CVE-2012-4182

CVE-2012-4182 is a Use-after-free in Mozilla Firefox’s nsTextEditRules::WillInsert, affecting Firefox <= 16.0 and Firefox ESR <= 10.x <= 10.0.8, Thunderbird <= 16.0 and ESR 10.x <= 10.0.8, and SeaMonkey

CVE-2013-1817

CVE-2013-1817 affects MediaWiki prior to 1.19.4 and 1.20.x prior to 1.20.3. The vulnerability is in the api.php script and leads to an information disclosure where remote attackers can obtain sensitive information. The OSV and NVD records confirm the affected versions and the nature of the impact...

CVE-2013-5807

CVE-2013-5807 is described as an unspecified vulnerability in the Oracle MySQL Server replication path. The connected Red Hat/Gentoo/OpenVAS-derived entries confirm the affected products/versions include MySQL/MariaDB lineage: Oracle MySQL Server 5.5.x up to 5.5.32 and 5.6.x up to 5.6.12 are affe...

CVE-2014-3469

CVE-2014-3469 affects GNU libtasn1 before 3.6, where the functions asn1_read_value_type and asn1_read_value may dereference a NULL ivalue. In this context, crafted ASN.1 data can trigger a NULL pointer dereference in the library, leading to a denial of service (crash). The vulnerability is noted ...

CVE-2014-3580

CVE-2014-3580 affects the mod_dav_svn component of Apache Subversion (1.x) prior to 1.7.19 and 1.8.x prior to 1.8.11. A remote attacker can trigger a NULL pointer dereference via a REPORT request for a non-existent resource , causing a denial of service and server crash. Connected sources documen...

CVE-2014-5240

CVE-2014-5240 is an XSS in WordPress prior to 3.9.2 (Multisite enabled) affecting wp-includes/pluggable.php via a crafted avatar URL. The vulnerability allows remote authenticated administrators to inject arbitrary script/HTML and can enable a Super Admin privilege escalation. The issue is docume...

CVE-2014-8561

CVE-2014-8561 affects ImageMagick 6.8.9.6 with a remote denial-of-service via an infinite loop. The connected documents confirm the DoS impact, but do not provide explicit root-cause details, affected product variants beyond 6.8.9.6, or any remediation (patch/version) information. Documented expl...

CVE-2014-8602

CVE-2014-8602 affects NLnet Labs Unbound prior to 1.5.1. The vulnerability stems from iterator.c not limiting delegation chaining, allowing remote attackers to trigger an endless sequence of referrals and cause memory and CPU exhaustion (DoS). Multiple connected advisories confirm impact and prov...

CVE-2014-9157

Summary (CVE-2014-9157): Affected software is Graphviz, specifically the format string vulnerability in the yyerror function (lib/cgraph/scan.l). The issue allows remote attackers to cause unspecified impact via format string specifiers in error strings. Connected documents reference multiple ven...

CVE-2015-1254

CVE-2015-1254 affects Blink (core/dom/Document.cpp) used in Google Chrome before 43.0.2357.65. Root cause: inheritance of the designMode attribute, enabling a Same Origin Policy bypass via editing capabilities. Impact: cross-origin bypass potential in the DOM editing feature. Affected product lin...

CVE-2015-1256

CVE-2015-1256 is a use-after-free in Blink’s SVG implementation (shadow tree handling for use elements) affecting Google Chrome prior to 43.0.2357.65. A remote attacker could trigger a denial of service or potentially other impact by a crafted document. Public advisories from multiple vendors con...

CVE-2015-1285

The CVE-2015-1285 issue affects the Blink XSS auditor (XSSAuditor.cpp) used by Google Chrome up to version 44.0.2403.89. Root cause: the XSSAuditor::canonicalize function fails to properly select a truncation point, enabling an information leak via an unspecified linear-time attack. Impact: remot...

CVE-2015-8917

CVE-2015-8917 affects libarchive (bsdtar/cab parser). A malformed CAB file name can trigger a NULL pointer dereference, leading to remote denial of service (crash). Affected product: libarchive (CAB parser in bsdtar/libarchive). Root cause: NULL pointer dereference when encountering an invalid CA...

CVE-2016-1628

CVE-2016-1628 affects OpenJPEG (pi.c) as used in PDFium within Google Chrome prior to 48.0.2564.109. The vulnerability arises from not validating a precision value in opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl, leading to an out-of-bounds read or potentially arbitrary code execution...

CVE-2016-1668

CVE-2016-1668 concerns a cross-origin bypass in the V8 bindings to Blink/WebKit via the forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h. Affected software is Google Chrome prior to 50.0.2661.102, with the impact described as bypassing the Same Origin Policy through a craft...

CVE-2016-1696

CVE-2016-1696 affects Google Chrome prior to 51.0.2704.79, where the extensions subsystem did not properly restrict bindings access, enabling a cross-origin bypass of the Same Origin Policy via unspecified vectors. Multiple connected sources (Chromium security advisories and Debian/arch updates) ...

CVE-2016-3069

CVE-2016-3069 affects Mercurial up to version 3.7.2, where a crafted Git repository name used during conversion can cause remote code execution. The root cause is insufficient sanitization in the convert path when handling Git sub-repository URLs/names, enabling arbitrary code execution. Impact i...

CVE-2016-3168

The CVE-2016-3168 issue affects Drupal: System module in Drupal 6.x prior to 6.38 and 7.x prior to 7.43 is vulnerable to a reflected file download that can allow remote attackers to hijack the authentication of site administrators when downloading and executing files containing arbitrary JSON-enc...

CVE-2016-6254

CVE-2016-6254 is a heap-based buffer overflow in the parse_packet function of network.c in collectd, exploitable via crafted network packets. Affected versions are collectd before 5.4.3 and 5.x before 5.5.2, enabling remote denial of service (daemon crash) and potentially arbitrary code execution...

CVE-2016-9914

CVE-2016-9914 is a memory leak in QEMU's 9pfs:9p.c due to a missing cleanup in FileOperations (handle and proxy backends). This can cause host memory consumption and potentially QEMU process crashes when exploited by a local privileged guest user. Public documents describe the impact in the 9pfs ...

CVE-2017-13145

This CVE (CVE-2017-13145) affects ImageMagick’s JP2 coder ReadJP2Image in coders/jp2.c. The vulnerability stems from insufficient validation of channel geometry, which can cause a crash when processing JP2 images. Affected products/versions per the provided description: ImageMagick 6.x up to 6.9....

CVE-2017-15394

CVE-2017-15394 affects the Chromium/Google Chrome extensions UI prior to 62.0.3202.62. The issue is described as a URL spoofing/domain spoofing vulnerability in permission dialogs caused by insufficient policy enforcement and IDN homographs in a crafted extension. The known remediation is to upgr...

CVE-2017-15419

CVE-2017-15419 describes an information-disclosure vulnerability in Google Chrome’s Resource Timing API before 63.0.3239.84. The root cause is insufficient policy enforcement, allowing a remote attacker to leak cross-origin URLs via a crafted HTML page and infer browsing history. Affected product...

CVE-2017-17439

CVE-2017-17439 affects Heimdal (libheimdal) up to version 7.4, where a vulnerability in the ASN.1/DER handling can be triggered by a crafted UDP packet with empty client name or realm data. The issue causes the KDC to dereference NULL pointers in kdc/kerberos5.c and der_length.c, leading to a seg...

CVE-2017-17504

CVE-2017-17504 affects ImageMagick prior to 7.0.7-12. The vulnerability is a heap-based buffer over-read in the PNG coder (png.c: Magick_png_read_raw_profile), triggered by a crafted file, related to ReadOneMNGImage. Exploitation could allow memory access beyond bounds when processing a malicious...

CVE-2017-5208

CVE-2017-5208 affects the icoutils wrestool tool. An integer overflow when parsing a crafted binary can cause memory corruption, leading to a denial of service or potentially arbitrary code execution. The issue exists in icoutils prior to 0.31.1. Remediation: upgrade to icoutils 0.31.1 or newer (...

CVE-2017-6010

CVE-2017-6010 affects icoutils: a buffer overflow in the extract_icons function (extract.c) can be triggered by processing a corrupted ICO file, causing icotool to crash (DoS). Documented across multiple advisories (Debian DSA-3807-1; DLA-854-1; CentOS/CESA-2017:0837; IBM PowerKVM bulletin; Gento...

CVE-2017-8343

CVE-2017-8343 is rejected; not used; this entry does not represent an active vulnerability.

CVE-2018-0490

Affected software: Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10.** What’s vulnerable: The directory-authority protocol-list subprotocol handling mishandles a misformatted relay descriptor during voting, enabling a remote attacker to trigger a NULL pointer dereference ...

CVE-2018-12227

CVE-2018-12227 affects Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 (including Certified Asterisk 13.18-cert4/13.21-cert2). The issue is an information-disclosure in SIP ACL handling: when endpoint-specific ACLs block a request, a 403 is returned; if the en...

CVE-2018-5702

Transmission 2.92 and earlier versions rely on X-Transmission-Session-Id for access control, which is not a forbidden header for Fetch. This allows remote attackers to execute arbitrary RPC commands and write arbitrary files via POST to /transmission/rpc when combined with a DNS rebinding attack....

CVE-2018-6596

CVE-2018-6596 affects Anymail (django-anymail) webhooks/base.py, where a timing attack on the WEBHOOK_AUTHORIZATION secret can let remote attackers post arbitrary email tracking events. Affected versions are before 1.2.1. Remediation as per sources: upgrade to Django-Anymail 1.2.1 or later; Debia...

CVE-2018-7033

CVE-2018-7033 affects Slurm/SlurmDBD: SQL injection in SlurmDBD is possible on Slurm versions before 17.02.10 and 17.11.x before 17.11.5. Public records reference CVE-2018-7033 across multiple advisories. Remediation per the connected sources is to upgrade Slurm/SlurmDBD to a version where the is...

CVE-2018-7051

CVE-2018-7051 affects the IRC client Irssi . The issue exists in Irssi builds prior to 1.0.7 and prior to 1.1.1 (1.1.x) where certain nicknames can trigger an out‑of‑bounds access when printing theme strings. The connected documents describe it as an out‑of‑bounds read/access vulnerability withou...

CVE-2018-9270

Wireshark vulnerability CVE-2018-9270: memory leak in epan/oids.c affects Wireshark versions 2.4.0–2.4.5 and 2.2.0–2.2.13. The provided documents specify the faulty module but do not include a remediation or patch details. No connected documents with additional technical specifics are provided.