10003 matches found
CVE-2025-38346
CVE-2025-38346: Linux kernel ftrace UAF when lookup kallsyms after ftrace is disabled. Root cause: use-after-free accessing mod->name during module removal when ftrace_disable is active. Impact per CVSS: Local access with Low privileges required, High confidentiality/integrity/availability imp...
CVE-2018-6596
CVE-2018-6596 affects Anymail (django-anymail) webhooks/base.py, where a timing attack on the WEBHOOK_AUTHORIZATION secret can let remote attackers post arbitrary email tracking events. Affected versions are before 1.2.1. Remediation as per sources: upgrade to Django-Anymail 1.2.1 or later; Debia...
CVE-2018-7033
CVE-2018-7033 affects Slurm/SlurmDBD: SQL injection in SlurmDBD is possible on Slurm versions before 17.02.10 and 17.11.x before 17.11.5. Public records reference CVE-2018-7033 across multiple advisories. Remediation per the connected sources is to upgrade Slurm/SlurmDBD to a version where the is...
CVE-2018-7051
CVE-2018-7051 affects the IRC client Irssi . The issue exists in Irssi builds prior to 1.0.7 and prior to 1.1.1 (1.1.x) where certain nicknames can trigger an out‑of‑bounds access when printing theme strings. The connected documents describe it as an out‑of‑bounds read/access vulnerability withou...
CVE-2018-9265
Wireshark has a vulnerability CVE-2018-9265: in the tn3270 dissector there is a memory leak affecting Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. Advisories indicate this memory-leak issue was fixed in Wireshark 2.2.14 and 2.4.6 (e.g., SUSE openSUSE advisories for 2018:0980/0981 and related notes). A...
CVE-2018-9270
Wireshark vulnerability CVE-2018-9270: memory leak in epan/oids.c affects Wireshark versions 2.4.0–2.4.5 and 2.2.0–2.2.13. The provided documents specify the faulty module but do not include a remediation or patch details. No connected documents with additional technical specifics are provided.
CVE-2019-15296
FAAD2 vulnerability CVE-2019-15296 affects Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c can read a negative remaining buffer size (ld->buffer_size - words*4), leading to a buffer overflow via getdword_n, with the impact described as potential d...
CVE-2020-1774
CVE-2020-1774 affects the Open-Source Ticket Request System (OTRS) versions: Community Edition 5.0.42 and earlier, 6.0.27 and earlier, and OTRS 7.0.16 and earlier. The issue arises when downloading PGP or S/MIME keys/certificates: the exported files share the same name for private and public keys...
CVE-2020-29050
CVE-2020-29050 affects SphinxSearch in Sphinx Technologies Sphinx up to version 3.1.1, enabling directory traversal via the mysql client for CALL SNIPPETS and load_file with full pathnames (unrelated to CMUSphinx). The issue, often discussed with CVE-2019-14511, has been addressed in multiple Lin...
CVE-2020-29668
CVE-2020-29668 affects Sympa prior to 6.2.59b.2. The issue allows remote attackers to obtain full SOAP API access by sending an arbitrary string (except one from an expired cookie) as the cookie value to the authenticateAndRun endpoint. The public description in the initial document confirms the ...
CVE-2021-21897
CVE-2021-21897 relates to a heap buffer overflow in DL_Dxf::handleLWPolylineData in Ribbonsoft dxflib 3.17.0, triggered by a crafted DXF file. Impact is code execution potential as described; no exploit details provided in the initial documents. Connected sources corroborate that multiple distrib...
CVE-2021-46671
Summary: CVE-2021-46671 affects atftp; options.c reads past the end of an array, causing disclosure of server-side /etc/group data to a remote client. This affects atftp versions before 0.7.5. Impact: remote information disclosure (server data) without authentication; no exploitation details prov...
CVE-2022-34670
CVE-2022-34670 affects NVIDIA GPU Display Driver for Linux. The kernel-mode layer handler vulnerability allows an unprivileged user to trigger truncation when casting a primitive to a smaller primitive, potentially causing denial of service or information disclosure. Debian LTS advisory DLA-3418 ...
CVE-2022-42323
CVE-2022-42323 concerns Xenstore in the Xen hypervisor. The issue arises after the XSA-322 fix: any Xenstore node owned by a removed domain is reassigned to Dom0, enabling two cooperating guests to create an unbounded number of Xenstore nodes. This can exhaust Xenstore quota and lead to denial of...
CVE-2025-37951
CVE-2025-37951 affects the Linux kernel DRM/V3D path. When a CL/CSD job times out, if the GPU progressed, the kernel may skip the reset, keeping the job running; however, timedout_job() removes the job from the pending list, so it may not be freed, causing a memory leak. A patch adds the job back...
CVE-2025-38005
CVE-2025-38005 affects the Linux kernel DMA engine TI k3-udma driver. The root cause is a missing locking in k3-udma.c; the provided docs note that a commit adding the missing locking resolves the issue. Remediation: apply the kernel patch/updated driver version that includes the locking fix (as ...
CVE-2025-38035
CVE-2025-38035 affects the Linux kernel NVMe over Fabrics target code (nvmet-tcp). The fix prevents restoring sock->sk->sk_state_change when queue->state_change is NULL, avoiding a NULL pointer dereference in nvmet_tcp_set_queue_sock() / nvmet_tcp_set_queue_sock() call paths. Impact is a...
CVE-2025-38174
CVE-2025-38174 affects the Linux kernel Thunderbolt configuration path. The issue occurs in tb_cfg_request_dequeue() where a request could be dequeued twice (triggered via frame.callback and tb_cfg_request()), risking a double list_del in ctl->request_queue and a general protection fault due t...
CVE-2025-38204
CVE-2025-38204 affects the Linux kernel’s JFS filesystem. The issue is an array-index-out-of-bounds read in add_missing_indices, where stbl (s8) must map to offsets 0–127. A bound check was added and -EIO is returned if the check fails; jfs_readdir is also updated to propagate errors from add_mis...
CVE-2025-38206
CVE-2025-38206 concerns the Linux kernel exfat subsystem, where a double free could occur in the delayed_free pathway during exfat_kill_sb() via exfat_free_upcase_table(). The vulnerability arises when freeing vol_utbl twice due to an error return path in exfat_create_upcase_table() leading to a ...
CVE-2025-38219
CVE-2025-38219 affects the Linux kernel F2FS code path. The issue is a downgrade-related negative i_nlink scenario that could trigger a kernel warning; the vulnerability was resolved in the cited upstream code path (f2fs_i_links_write -> f2fs_drop_nlink -> f2fs_unlink), as shown in the conn...
CVE-2025-38262
In CVE-2025-38262, the Linux kernel's tty: serial: uartlite driver had a concurrency race during probing when two uart instances probe simultaneously. The race could let a second path call ulite_assign while uart_driver is not fully initialized, causing uart_add_one_port to dereference a null uar...
CVE-2004-0594
The CVE-2004-0594 issue affects PHP memory_limit in PHP 4.x (up to 4.3.7) and 5.x (up to 5.0.0RC3), particularly when register_globals is enabled. The vulnerability allows a remote attacker to execute arbitrary code by triggering a memory_limit abort during zend_hash_init and overwriting a HashTa...
CVE-2004-0642
MIT Kerberos 5 (krb5) is affected by CVE-2004-0642 due to double-free vulnerabilities in the ASN.1 decoder error handling for both the KDC library and the krb5 client library (versions 1.3.4 and earlier). The issue can allow remote attackers to execute arbitrary code, potentially compromising the...
CVE-2005-1920
The CVE-2005-1920 issue affects KDE 3.2.x–3.4.0 (kdelibs3/kdebase); backup files could have improper permissions, allowing local users to access sensitive data. Connected advisories (e.g., Debian DSA-804-2, Red Hat RHSA-2005:612, Ubuntu USN-150-1, Gentoo GLSA 200611-21) document security updates ...
CVE-2007-1216
CVE-2007-1216 is a double-free vulnerability in the MIT Kerberos 5 GSS-API library (libgssapi/krb5/k5unseal.c) used by kadmind, exploitable when the RPCSEC_GSS authentication method is involved. It affects MIT krb5 prior to version 1.6.1, enabling remote authenticated users to execute arbitrary c...
CVE-2007-2834
The CVE describes a heap-based buffer overflow in the TIFF parser of OpenOffice.org (and StarOffice/StarSuite) caused by an integer overflow when processing TIFF files, enabling remote arbitrary code execution. The issue affects OpenOffice.org-based suites prior to version 2.3 and StarOffice/Star...
CVE-2008-5508
CVE-2008-5508 affects Mozilla Firefox (3.x prior to 3.0.5 and 2.x prior to 2.0.0.19), Mozilla Thunderbird (2.x prior to 2.0.0.19), and SeaMonkey (1.x prior to 1.1.14). The issue stems from improper parsing of URLs that start with leading whitespace or control characters, which can allow a remote ...
CVE-2008-5513
CVE-2008-5513 affects Mozilla Firefox. The issue arises in the session-restore feature, where restoration of SessionStore data can bypass the Same Origin Policy, enabling content injection and cross-site scripting (XSS) via unknown vectors. Affected products/versions include Firefox 3.x prior to ...
CVE-2011-2692
CVE-2011-2692 affects libpng: the png_handle_sCAL function in libpng versions 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not correctly handle invalid sCAL chunks. This can allow a remote attacker to cause a denial of service (memory corruption and cr...
CVE-2012-3571
ISC DHCP CVE-2012-3571 affects DHCP servers using ISC DHCP versions 4.1.2–4.2.4 and 4.1-ESV prior to 4.1-ESV-R6. A malformed client identifier can cause a remote denial of service (infinite loop and high CPU). The connected advisories indicate remediation through updates to fix this issue; e.g., ...
CVE-2013-2483
CVE-2013-2483 affects the ACN dissector in Wireshark (epan/dissectors/packet-acn.c). The issue occurs when processing ACN_DMP_ADT_D_RE DMP data with an invalid count value, leading to a divide-by-zero error that can cause a denial of service (application crash). Connected advisories confirm the r...
CVE-2013-2855
CVE-2013-2855 affects Chromium/Google Chrome via the Developer Tools API. The flaw allows remote attackers to trigger memory corruption, resulting in a denial of service or potentially other impact, using unknown vectors. Affected products/versions: Chromium before 27.0.1453.110 (Chrome prior to ...
CVE-2013-3718
CVE-2013-3718 affects the Evince document viewer. The root cause described across connected sources is a missing check on the number of pages, which can lead to a segmentation fault. Public references note this vulnerability across multiple distributions (Red Hat, SUSE, Debian, Ubuntu, etc.). The...
CVE-2013-6632
Google Chrome/Chromium affected: Chrome versions prior to 31.0.1650.57 (Chromium-based) show multiple memory corruption issues, including CVE-2013-6632. The initial entry cites an integer overflow as a trigger vector that could lead to remote code execution or memory corruption (DoS), demonstrate...
CVE-2014-2327
CVE-2014-2327 affects Cacti 0.8.7g, 0.8.8b and earlier, introducing a cross-site request forgery (CSRF) vulnerability that can hijack a logged-in user’s authentication to perform actions such as modifying binaries, configurations, or adding users. Root cause: CSRF in the web application’s handlin...
CVE-2014-8102
CVE-2014-8102 affects the X.Org X Window System's XFixes extension: SProcXFixesSelectSelectionInput in the XFixes extension of X.Org X Server versions before 1.16.3. A remote authenticated user can trigger an out-of-bounds read or write, leading to denial of service or potentially executing arbit...
CVE-2014-9745
CVE-2014-9745 affects FreeType: the parse_encoding path in type1/t1load.c (before 2.5.3) can be triggered by a crafted PostScript stream (e.g., 8#garbage) to cause a denial of service. Public docs consistently cite this as a DoS via broken number-with-base; affected versions are
CVE-2015-1247
The CVE-2015-1247 issue affects Google Chrome’s OpenSearch handling: the SearchEngineTabHelper::OnPageHasOSDD function did not sanitize file: URLs in OpenSearch descriptor XML, potentially allowing a remote site to read local files via a crafted http/https page. Affected: Chrome before 42.0.2311....
CVE-2015-1592
CVE-2015-1592 affects Movable Type Pro/Open Source/Advanced before 5.2.12 and 6.0.x before 6.0.7. Root cause: improper use of Storable::thaw enabling remote inclusion and execution of arbitrary local Perl files via crafted input. Public references (Metasploit module, OpenVAS/Nessus entries, Debia...
CVE-2015-3231
Drupal 7.x (before 7.38) renders cache data by user role in its Render caching system. Affected component is the Render cache, which can leak private content viewed by user 1 to remote authenticated users by reading the cache. Root cause described across multiple sources: caching by user role inc...
CVE-2016-1674
CVE-2016-1674 is a cross‑origin bypass vulnerability in Chrome/Chromium extensions bindings. The issue is described in the official Chrome security release notes for Chrome 51 (51.0.2704.63) and is listed among multiple CVEs fixed in that build. Debian security advisories also note fixes for chro...
CVE-2016-1690
CVE-2016-1690 affects Google Chrome Autofill: the interaction between field updates and JavaScript that triggers a frame deletion allows remote attackers to cause a use-after-free DoS (and possibly other impact) via a crafted website. Affected versions are prior to 51.0.2704.63 (and related advis...
CVE-2016-2198
CVE-2016-2198 affects QEMU when built with USB EHCI emulation. The root cause is a null pointer dereference in ehci_caps_write during writes to EHCI capability registers, which could be triggered by a privileged user inside the guest and may crash the QEMU process, causing a DoS. Technical detail...
CVE-2016-2858
CVE-2016-2858 – QEMU PRNG back-end: Local guest OS users can trigger a denial of service by requesting entropy, causing arbitrary stack-based allocations and memory corruption. The issue is specific to builds with PRNG back-end support and results in a QEMU process crash. Connected documents conf...
CVE-2016-4029
WordPress before 4.5 is vulnerable to SSRF bypass because it does not recognize octal/hex IP formats when determining intranet addresses, allowing remote attackers to bypass the SSRF protection mechanism via a crafted address. Affected software: WordPress core; root cause: IP parsing/validation g...
CVE-2017-12640
CVE-2017-12640: ImageMagick 7.0.6-1 has an out-of-bounds read in ReadOneMNGImage (coders/png.c). This can cause crash or information disclosure; the Nessus entry for unpatched ImageMagick 7.0.6-1 confirms lack of vendor patch. No further details are provided in the connected docs.
CVE-2017-14975
CVE-2017-14975 involves Poppler 0.59.0 where FoFiType1C::convertToType0 dereferences an uninitialized data structure, enabling a denial-of-service attack. Connected advisories confirm the issue as a NULL pointer dereference in FoFiType1C.cc and document remediation through patches (e.g., openSUSE...
CVE-2017-15398
Chromium (Chrome) before version 62.0.3202.89 is affected by CVE-2017-15398 and CVE-2017-15399 per the connected Arch Linux advisory. The issue for CVE-2017-15398 is a stack-based buffer overflow in the QUIC component, enabling remote code execution. CVE-2017-15399 is a use-after-free in the V8 J...