CVE-2017-6802

CVE-2017-6802 applies to libytnef/ytnef (affecting ytnef prior to 1.9.2 and addressed in later releases). The issue is described as a heap-based over-read related to RTF stream decompression (DecompressRTF()) in libytnef, with related vulnerabilities in the same libytnef set (CVE-2017-6298..6306,...

CVE-2017-8347

CVE-2017-8347 is rejected; this CVE is not an active vulnerability entry.

CVE-2017-8352

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-10995

CVE-2018-10995 affects Slurm where user_name and gid fields are mishandled in versions before 17.02.11 and 17.1x.y before 17.11.7. This issue was fixed in 17.11.7 (and corresponding upstream advisories across distributions). Connected notes show multiple advisories (USN/opensuse/SUSE SU-2020/2021...

CVE-2018-11406

The CVE-2018-11406 issue affects Symfony's Security component across multiple branches (2.7.x < 2.7.48, 2.8.x < 2.8.41, 3.3.x < 3.3.17, 3.4.x < 3.4.11, 4.0.x

CVE-2018-16430

CVE-2018-16430 affects GNU Libextractor up to 1.7, with an out-of-bounds read in EXTRACTOR_zip_extract_method() implemented in zip_extractor.c. The vulnerability arises from handling ZIP File Comment fields, as indicated by multiple advisories and vendor notices (Debian, Mageia, Ubuntu). Impact i...

CVE-2018-19274

CVE-2018-19274 affects phpBB < 3.2.4: remote code execution via Phar deserialization when an attacker with founder permissions can access the Admin Control Panel. The issue arises from using an absolute path in a file_exists check, enabling Object Injection. NVD data shows CVSSv3.1 base score ...

CVE-2019-17348

CVE-2019-17348 affects the Xen hypervisor (up to 4.11.x) and is triggered on x86 PV guests. The root cause is an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching, allowing a local x86 PV guest to cause a Denial of Service or potentially gain privileges. Pu...

CVE-2020-36281

Leptonica libraries before 1.80.0 are affected by a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed (colorquant1.c). The CVE-2020-36281 entry is corroborated by multiple connected advisories stating the issue exists in Leptonica up to

CVE-2020-36475

The CVE-2020-36475 issue affects Mbed TLS prior to 2.25.0 (and <2.16.9 LTS,

CVE-2021-21853

GPAC library vulnerability CVE-2021-21853 affects the MPEG-4 decoding code path in GPAC 1.0.1, where unchecked addition can trigger an integer overflow leading to a heap-based buffer overflow and memory corruption. Exploitation requires a user to open a malicious MPEG-4 video. Public advisories (...

CVE-2021-41125

CVE-2021-41125 affects Scrapy (Python): when using HttpAuthMiddleware (http_user/http_pass spider attributes), credentials may be exposed in requests, including robots.txt checks and redirects. Affected versions include older Scrapy releases prior to fixes. Mitigation per sources: upgrade to Scra...

CVE-2021-4214

CVE-2021-4214 describes a heap overflow in libpng’s pngimage.c. The flaw can be triggered by an attacker who has local network access and must supply a specially crafted PNG to the pngimage utility, causing an application crash and resulting in a denial of service. The vulnerability details speci...

CVE-2022-39957

CVE-2022-39957 affects the OWASP ModSecurity Core Rule Set (CRS). The issue is a response body bypass: a client can send an HTTP Accept header with an optional charset parameter, causing the WAF to deliver a form that may not be decoded correctly, potentially bypassing detection of restricted res...

CVE-2022-41751

CVE-2022-41751 affects JHead (v3.06.0.1). The vulnerability allows an attacker to execute arbitrary OS commands by embedding them in a JPEG filename and using the -rgt50 regeneration option, via a local attack vector (verified in multiple advisories). Public‑facing details confirm affected packag...

CVE-2022-42322

CVE-2022-42322 concerns Xenstore: cooperating guests can create an arbitrary number of Xenstore nodes. The issue arises after the XSA-322 fix, where any Xenstore node owned by a removed domain can be reassigned to Dom0. A malicious pair of guests can exploit this by: (1) host A lets host B write ...

CVE-2023-45363

The CVE-2023-45363 issue affects MediaWiki and specifically the ApiPageSet.php path. Affected variants include MediaWiki releases before 1.35.12, 1.36.x–1.39.x before 1.39.5, and 1.40.x before 1.40.1. The vulnerability allows a denial of service via an unbounded loop when querying pages redirecte...

CVE-2025-38037

The CVE-2025-38037 issue affects the Linux kernel’s VXLAN FDB handling. The root cause is a data race where the FDB entry’s fields used and updated may be concurrently accessed by multiple threads, triggering KCSAN reports in vxlan_xmit paths. The fix is to annotate these accesses with READ_ONCE(...

CVE-2025-38040

CVE-2025-38040 affects the Linux kernel’s serial/mctrl_gpio path. The advisory reports a fix for a denial of service/privilege implications by splitting the disabling of modem lines (disable_ms) into two APIs: sync and no_sync, addressing a sleeping function being called from an atomic context (d...

CVE-2025-38065

CVE-2025-38065: In the Linux kernel’s OrangeFS inode handling, the len variable used to store the result of i_size_read() becomes a size_t, causing truncation to 4 GiB on 32-bit systems. This can lead to incorrect file size handling and potential impact on local processes that rely on accurate si...

CVE-2025-38148

CVE-2025-38148 affects the Linux kernel network driver path: net: phy: mscc. The issue is a memory leak when using one-step timestamping, where frames (skb) were not freed because the hardware may not generate an interrupt to signal timestamping. The described fix frees the frame in the one-step ...

CVE-2025-38163

CVE-2025-38163: A fault in the Linux kernel’s F2FS truncation path caused a kernel BUG due to an inconsistent sbi->total_valid_block_count versus mapped blocks, potentially leading to a crash/denial of service. The issue is in f2fs: with sbi->total_valid_block_count not matching inode-index...

CVE-2025-38231

CVE-2025-38231 affects the Linux kernel nfsd component. The vulnerability arises when laundromat_work starts before nfsd_ssc is initialized, risking a NULL pointer dereference in nfs4_state_start_net() via nfs4_laundromat -> nfsd4_ssc_expire_umount. The documented fix moves nfsd_ssc initializa...

CVE-2025-38354

CVE-2025-38354 (Linux kernel, DRM/MSM GPU): A crash can occur when throttling GPU immediately during boot if the GPU is already hot, because of an early call to of_devfreq_cooling_register() that may access GMU registers before initialization. The root cause is that msm_devfreq_init may suspend d...

CVE-2025-38466

CVE-2025-38466 is a Linux kernel security issue where uprobes could be abused due to inability to reliably verify instruction boundaries in the middle of an instruction, and on some architectures (e.g., arm64) when data words are misinterpreted as instructions. The fix reverts to requiring CAP_SY...

CVE-2025-38480

CVE-2025-38480 : In the Linux kernel's Comedi subsystem, insn_rw_emulate_bits() may read uninitialized data for INSN_READ/INSN_WRITE when insn->n is 0, causing an incorrect write to digital outputs and potentially corrupting channel state. The fix returns 0 early when insn->n == 0, aligning...

CVE-2006-5170

CVE-2006-5170 affects pam_ldap in nss_ldap; a PasswordPolicyResponse control could cause pam_authenticate to return success even if authentication failed. Affected platforms include Red Hat Enterprise Linux 4 and Fedora Core 3 and earlier. The issue arises when applications do not properly proces...

CVE-2007-0956

The MIT Kerberos 5 telnet daemon (telnetd) flaw CVE-2007-0956 allows remote authentication bypass by a login attempt with a username starting with a '-' character. Public advisories (Debian, CentOS, RH/others) state this affects krb5 telnetd prior to fixed releases and that updates/patches are av...

CVE-2007-2172

CVE-2007-2172 affects the Linux kernel 2.6 (before 2.6.21-rc6) and 2.4 (before 2.4.35). A typo causes RTA_MAX to be used as an array size instead of RTN_MAX, leading to out-of-bounds access in dn_fib_props (dn_fib.c, DECNet) and fib_props (fib_semantics.c, IPv4). Connected advisories corroborate ...

CVE-2008-2826

The vulnerability CVE-2008-2826 is present in the Linux kernel prior to 2.6.25.9, where an integer overflow in sctp_getsockopt_local_addrs_old (net/sctp/socket.c) allows local users to trigger a denial of service through a large addr_num in the sctp_getaddrs_old structure. The issue is mitigated ...

CVE-2008-5022

CVE-2008-5022 affects multiple Mozilla-based browsers: nsXMLHttpRequest::NotifyEventListeners in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13. Root cause: bypass of the same-origin policy due to bypassed inner window check...

CVE-2009-1961

CVE-2009-1961 is a local-denial-of-service vulnerability in the Linux kernel related to the inode double-locking path in fs/ocfs2/file.c. A sequence of splice system calls can deadlock between generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write, preventing file creation/remov...

CVE-2010-1086

The CVE-2010-1086 entry concerns the Linux kernel (dvb-core) ULE decapsulation code in dvb_net.c. A vulnerability in the ULE Payload Pointer handling allows an attacker to induce an infinite-loop denial of service via a crafted MPEG-2 TS frame, affecting kernel 2.6.33 and earlier. Connected advis...

CVE-2012-0037

The CVE-2012-0037 issue affects Redland Raptor (libraptor) and is triggered when parsing RDF/XML with an XXE declaration. The vulnerability allows user-assisted remote attackers to read arbitrary files via crafted RDF documents, as observed in libraptor versions used by OpenOffice/LibreOffice lin...

CVE-2013-6425

Pixman before 0.32.0 contains an integer underflow in the pixman_trapezoid_valid macro (pixman.h), used by X.Org server and cairo, which can crash a context-dependent attacker’s application via a negative bottom value. Multiple advisories and Nessus plugins reference CVE-2013-6425 and describe fi...

CVE-2013-6643

The CVE-2013-6643 issue affects Google Chrome prior to 32.0.1700.76 on Windows and 32.0.1700.77 on macOS/Linux. It stems from improper handling of the closing of an untrusted signin confirmation dialog in OneClickSigninBubbleView::WindowClosing, allowing an attacker to trigger a sync with an arbi...

CVE-2014-3160

CVE-2014-3160 affects Chromium/Blink: the ResourceFetcher::canRequest logic allowed subresource SVG requests to bypass Same Origin Policy. This is a remote-origin bypass via crafted SVG files in Chrome prior to 36.0.1985.125. Public advisories (Debian, openSUSE, Gentoo, Ubuntu) document the issue...

CVE-2014-8096

CVE-2014-8096 affects the X.Org X Server (XC-MISC SProcXCMiscGetXIDList function) prior to 1.16.3. A crafted length or index value by a remote, authenticated client can cause an out-of-bounds read/write, potentially leading to denial of service or arbitrary code execution. Remediation: upgrade to...

CVE-2014-9666

CVE-2014-9666 affects FreeType up to version 2.5.3 and 2.5.4 before the patch. The tt_sbit_decoder_init function can proceed with a crafted embedded bitmap without restricting the count, causing integer overflow and out-of-bounds read, leading to DoS (and possibly other impact). A fix is availabl...

CVE-2015-0564

CVE-2015-0564 detail (Wireshark): A buffer underflow in the ssl_decrypt_record function (epan/dissectors/packet-ssl-utils.c) affects Wireshark 1.10.x prior to 1.10.12 and 1.12.x prior to 1.12.3. A crafted SSL packet can be improperly handled during decryption, enabling a remote attacker to cause ...

CVE-2015-2695

CVE-2015-2695 affects MIT Kerberos 5 (krb5) where the krb5 GSS-API SPNEGO mechanism mishandles a context, relying on an inappropriate context handle. This can enable a remote attacker to cause a denial of service via a crafted gss_inquire_context call on a partially-established SPNEGO context, le...

CVE-2015-2696

MIT Kerberos 5 (krb5) vulnerability CVE-2015-2696 arises from an inappropriate context handle in iakerb.c, enabling remote denial of service via crafted IAKERB packets during gss_inquire_context. IBM CP4S remediation in the connected materials shows affected Cloud Pak for Security versions 1.8.0....

CVE-2015-8607

CVE-2015-8607 affects the Perl PathTools package, specifically the File::Spec::canonpath() function. The taint propagation bug can cause tainted input to be treated as untainted, potentially allowing unvalidated user data to reach sensitive code paths. The issue is observed in Perl environments u...

CVE-2015-8744

CVE-2015-8744 affects QEMU when built with a VMXNET3 paravirtual NIC; the issue arises from improper/layer-2 header handling for very small frames (less than 22 bytes), which could be exploited by a privileged guest to crash the QEMU process and cause DoS. Public details in Debian/related advisor...

CVE-2015-8837

CVE-2015-8837 concerns FuseISO’s isofs.c in isofs_real_readdir, where a stack-based buffer overflow can be triggered by a long pathname in an ISO file, potentially leading to denial of service or arbitrary code execution. Related issue CVE-2015-8836 is an integer overflow in isofs_real_read_zf (i...

CVE-2016-1624

CVE-2016-1624 refers to an Integer underflow in the Brotli decoder (ProcessCommandsInternal in dec/decode.c) used by Google Chrome prior to 48.0.2564.109, which can cause a denial of service (buffer overflow) or related impact via crafted brotli data. Public advisories confirm the same-vulnerabil...

CVE-2016-1647

CVE-2016-1647 is a use-after-free in Chrome’s Navigation path, specifically in RenderWidgetHostImpl::Destroy within content/browser/renderer_host/render_widget_host_impl.cc, before version 49.0.2623.108. The vulnerability allows remote attackers to cause a denial of service and potentially other ...

CVE-2016-1675

CVE-2016-1675 affects Google Chrome/Chromium up to 51.0.2704.63. It is a Same Origin Policy bypass in Blink/WebKit caused by mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp. The Chrome/Chromium 51 stable update (51.0.2704.63) fixes this and r...

CVE-2016-2856

CVE-2016-2856 affects glibc//pt_chown and related packages across Debian/Ubuntu releases. Root cause: pt_chown lacks a namespace check for file-descriptor passing, enabling a local attacker to capture keystrokes, spoof data, and potentially gain privileges via pts read/write. Affected: Debian jes...

CVE-2016-7170

CVE-2016-7170 affects QEMU’s VMware SVGA path (hw/display/vmware_vga.c). Local privileged guests can trigger an out-of-bounds access in DEFINE_CURSOR handling (cursor.mask/image), leading to DoS via QEMU crash. Connected advisories (OpenSUSE, Debian DLA) confirm a fix in patched QEMU releases; up...