CVE-2025-38285

CVE-2025-38285 – Linux kernel : The issue stems from a WARN_ON_ONCE in the BPF tracing path (get_bpf_raw_tp_regs) triggered by a corner case involving trace_mmap_lock and stack maps. The issue surfaces during BPF stack retrieval and is reported in kernel/bpf_trace.c, with inline calls in bpf_get_...

CVE-2025-38304

CVE-2025-38304 : In the Linux kernel, a NULL pointer dereference in Bluetooth eir_get_service_data (len parameter can be NULL) is fixed. The vulnerability affects the Bluetooth EIR handling path and is rated with LOCAL attack vector and HIGH availability impact, implying potential kernel crash or...

CVE-2025-38337

CVE-2025-38337 : Linux kernel data-race in jbd2_journal_dirty_metadata leading to potential null dereference of handle->h_transaction. The issue arises because handle may be NULL and is not checked before dereferencing, allowing a data race between jbd2_journal_dirty_metadata and ext4/jbd2 han...

CVE-2025-38344

CVE-2025-38344 relates to ACPICA in the Linux kernel where ACPI cache leaks were fixed. Technical details in connected docs show memory leaks in Acpi-State, Acpi-Parse, and Acpi-parse_ext caches due to merging of slabs and use of KMEM cache flags (SLAB_NEVER_MERGE). The root cause was leaks in ea...

CVE-2025-38403

Summary (CVE-2025-38403) : In the Linux kernel, the vmci transport path (vsock/vmci) had a fix to clear the vmci_transport_packet before populating fields in vmci_transport_packet_init to avoid leaving uninitialised data. This change addresses an information leakage/contamination risk related to ...

CVE-2025-38428

CVE-2025-38428 : In the Linux kernel, the vulnerability affects the ims-pcu path where the firmware-provided length (len) is used in memcpy to fragment data in ims_pcu_flash_firmware(). If len is too large, memory corruption can occur. The issue arises from trusting firmware input; the fixed vers...

CVE-2025-38441

CVE-2025-38441 affects the Linux kernel netfilter flowtable nf_flow_pppoe_proto() where the Ethernet header was not accounted for in PPPoE offload logic, leading to potential use of uninitialized data (KMSAN). The vulnerability is locally exploitable; CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/I:N/A:H with...

CVE-2025-38444

CVE-2025-38444 affects the Linux kernel raid10 path. When raid10_read_request or raid10_write_request registers a new request with REQ_NOWAIT, a malloc from the mempool may not be freed, causing a memory leak. Connected docs confirm concrete fix in raid10_make_request and related raid10 handling ...

CVE-2025-38473

CVE-2025-38473 affects the Linux kernel Bluetooth subsystem. A null-ptr-deref in l2cap_sock_resume_cb() can occur when handling l2cap sockets during resume/kill sequences. The fix adds a guard to ensure chan->data is not NULL, avoiding use-after-free/killed-socket access. The description refer...

CVE-2007-0994

CVE-2007-0994 affects Mozilla Firefox 2.x before 2.0.0.2 and Firefox 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8. A regression in handling HTML mail with javascript: URIs in , (link), or tags could bypass access checks and allow remote JavaScript execution with chro...

CVE-2007-1321

CVE-2007-1321 is a local heap-based buffer overflow in the QEMU NE2000 emulator (NE2000 network device) used by Xen and possibly other products. It stems from an integer signedness error that lets crafted register values bypass sanity checks and trigger overflow. Public references indicate relate...

CVE-2007-3409

CVE-2007-3409 affects the Perl module Net::DNS prior to version 0.60. The vulnerability stems from parsing a malformed compressed DNS packet with self-referencing pointers, which can trigger an infinite loop and cause denial of service (stack consumption/availability impact). Connected advisories...

CVE-2008-4062

Summary: CVE-2008-4062 covers multiple /unspecified / vulnerabilities in Mozilla Firefox (before 2.0.0.17 and 3.x before 3.0.2), Thunderbird (before 2.0.0.17), and SeaMonkey (before 1.1.12). The flaws involve the JavaScript engine and are triggered by vectors related to (1) misinterpretation of N...

CVE-2008-5023

CVE-2008-5023 affects Mozilla-based browsers as described in the initial entry: Firefox 3.x prior to 3.0.4, Firefox 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13. The issue allows remote attackers to bypass the codebase-principal protection and execute arbitrary script via the -moz-bin...

CVE-2009-1242

CVE-2009-1242: In the Linux kernel, the vmx_set_msr function of the KVM VMX implementation (arch/x86/kvm/vmx.c) on i386 allowed a local guest OS user to trigger a denial of service (OOPS) by setting the EFER_LME bit in the EFER MSR. The issue affects kernel versions before 2.6.29.1 and is tied to...

CVE-2010-0291

CVE-2010-0291 is a Linux kernel local privilege/escalation/DoS issue described in connected advisories as affecting the kernel before 2.6.32.4. The vulnerability stems from the do_mremap/mmap handling, allowing local users to gain privileges or trigger a panic. The MiracleLinux AXSA:2010-377:12 a...

CVE-2010-4074

CVE-2010-4074 affects Linux kernel USB subsystem prior to 2.6.36-rc5, where several structure members were not properly initialized. This can let local users read potentially sensitive data from kernel stack memory via TIOCGICOUNT-related ioctl paths, specifically mos7720_ioctl and mos7840_ioctl ...

CVE-2012-2239

CVE-2012-2239 affects Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3, enabling a remote XXE injection that can read arbitrary files (e.g., config.php) or cause TCP connections. The root cause is an XML external entity flaw in Mahara’s handling of XML input. Public references in connected adviso...

CVE-2012-4388

CVE-2012-4388 affects PHP’s sapi_header_op in main/SAPI.c, where the pointer handling for %0D (carriage return) sequences can bypass HTTP response-splitting protections via crafted URLs. Affected are PHP 5.4.0RC2 through 5.4.0 (and related branches noted in downstream advisories), with remediatio...

CVE-2013-4081

CVE-2013-4081 affects Wireshark 1.6.x (before 1.6.16) and 1.8.x (before 1.8.8). The http_payload_subdissector in Wireshark’s HTTP dissector may recurse incorrectly, enabling a remote attacker to cause a denial of service through crafted traffic that consumes stack space. Remediation per the sourc...

CVE-2013-6422

Summary of CVE-2013-6422 : The GnuTLS backend in libcurl for versions 7.21.4 through 7.33.0 disables host name verification (CURLOPT_SSL_VERIFYHOST) when CURLOPT_SSL_VERIFYPEER is off, making it easier for remote attackers to spoof servers and perform man-in-the-middle attacks. Affected component...

CVE-2014-10077

CVE-2014-10077 – i18n gem (Ruby): The vulnerability is in Hash#slice implemented in lib/i18n/core_ext/hash.rb, affecting i18n before 0.8.0. A remote attacker can trigger a denial of service (application crash) when a key (:some_key) is present in keep_keys but absent from the hash. This is due to...

CVE-2014-5255

CVE-2014-5255 affects xcfa prior to 5.0.1. The vulnerability stems from insecure creation of temporary files, enabling a local attacker to perform a symlink attack and overwrite arbitrary files. The provided documents do not specify a patch version or remediation steps, and do not indicate whethe...

CVE-2015-1257

CVE-2015-1257 affects Blink’s SVG FEColorMatrix.cpp. The vulnerability arises from insufficient values handling in an feColorMatrix filter, enabling remote attackers to cause a Denial of Service (container overflow) via a crafted document. The issue is documented across multiple sources (Chromium...

CVE-2015-1262

CVE-2015-1262 affects Blink (HarfBuzzShaper.cpp) in Google Chrome before 43.0.2357.65, where a width field is not initialized. This can lead to a denial of service or potentially other impact via crafted Unicode text. Affected software is Chrome (Blink) prior to the fixed build; remediation is to...

CVE-2016-1645

CVE-2016-1645 is an out-of-bounds write issue in the pdfium library derived from OpenJPEG’s opj_j2k_update_image_data, used by Google Chrome’s PDF rendering path. Multiple connected advisories confirm the vulnerability in Chrome before 49.0.2623.87 and link it to a vulnerability class described a...

CVE-2016-1652

CVE-2016-1652 is a Chrome/Chromium vulnerability: a Cross-site scripting (UXSS) in the Extension bindings via ModuleSystem::RequireForJsInner in extensions/renderer/module_system.cc. The issue allows remote attackers to inject arbitrary web script or HTML through a crafted website. Affected produ...

CVE-2016-1670

CVE-2016-1670 is a race-condition flaw in Google Chrome (Chromium core) prior to 50.0.2661.102. The issue affects ResourceDispatcherHostImpl::BeginRequest in content/browser/loader/resource_dispatcher_host_impl.cc, where a renderer process could cause the loader to reuse request IDs, enabling a r...

CVE-2016-1679

CVE-2016-1679 affects Google Chrome prior to 51.0.2704.63, specifically the ToV8Value function in content/child/v8_value_converter_impl.cc used by the V8 bindings. The issue improperly restricts use of getters and setters, enabling remote attackers to trigger a denial-of-service via a use-after-f...

CVE-2016-1680

CVE-2016-1680 is a use-after-free in Skia (SkFontHost_FreeType.cpp) used by Google Chrome prior to 51.0.2704.63. The vulnerability could cause a denial of service via heap memory corruption. Chrome 51.0.2704.63 (and later) includes fixes for this issue. The available documents provide the vulnera...

CVE-2016-1689

CVE-2016-1689 refers to a heap-based buffer overflow in Google Chrome before 51.0.2704.63, specifically in content/renderer/media/canvas_capture_handler.cc. The vulnerability could allow a remote attacker to cause a denial of service or other impact via a crafted web site. The public records in t...

CVE-2016-1692

CVE-2016-1692 concerns WebKit/Blink: StyleSheetContents.cpp in Blink, used by Google Chrome prior to 51.0.2704.63, allows a ServiceWorker to cause cross-origin loading of CSS stylesheets even when the stylesheet has an incorrect MIME type. This enables bypassing the Same Origin Policy via a craft...

CVE-2016-1699

CVE-2016-1699 affects WebKit/Blink DevTools front_end/devtools.js in Google Chrome prior to 51.0.2704.79. The vulnerability is a parameter sanitization failure in DevTools that could allow a remote attacker to bypass access restrictions by using a crafted URL (remoteFrontendUrl not properly valid...

CVE-2016-2375

CVE-2016-2375 affects Pidgin via an out-of-bounds read in MXIT handling that can disclose memory contents. The connected references confirm this CVE is tied to Pidgin’s MXIT processing and memory disclosure. No specific patch version or remediation details are provided in the supplied documents; ...

CVE-2016-9775

The CVE-2016-9775 entry concerns the postrm script in the tomcat6, tomcat7, and tomcat8 packages across Debian/Ubuntu releases, where a misconfigured setgid program in the Catalina directory could allow local users with tomcat access to gain root privileges. Specifically, vulnerable versions incl...

CVE-2016-9928

CVE-2016-9928 affects MCabber prior to 1.0.4. The vulnerability arises from improper handling of roster pushes in XMPP, allowing a remote attacker to intercept communications or add themselves as another user in a third party’s roster, potentially gaining privileges. Multiple advisories reference...

CVE-2017-0918

GitLab CE 10.3 is affected by a path traversal vulnerability in the GitLab CI runner that allows remote code execution. This CVE-2017-0918 entry is supported by multiple sources (NVD details, OSV/Ubuntu, Debian DSA-4145). Impact: high (CVSSv3: 8.8) with network vector, unauthenticated user intera...

CVE-2017-12100

Blender 2.78c is affected by CVE-2017-12100 due to an integer overflow in multires_load_old_dm that can cause a buffer overflow and code execution when a user opens a crafted .blend file. The issue is triggered by processing specially crafted blends and requires user interaction. Public advisorie...

CVE-2017-12105

Blender vulnerability CVE-2017-12105 (and related CVEs) arises from an integer overflow in applying a specific object modifier to a Mesh, leading to a buffer overflow and potential code execution when a crafted .blend is opened or used as a library. Affects Blender versions around v2.78c (and old...

CVE-2017-18030

Technical details (affected product, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates.

CVE-2017-18234

Exempi (before 2.4.3) is vulnerable to a denial of service via a PDF file containing JPEG data, caused by an invalid memcpy leading to use-after-free in XMPFiles sources (ReconcileTIFF.cpp, TIFF_MemoryReader.cpp, TIFF_Support.hpp). Products built on Exempi prior to 2.4.3 are affected; upgrade to ...

CVE-2017-5081

CVE-2017-5081 concerns a Chromium/Chrome extension verification bypass due to lack of validation of an extension’s locale folder. The issue permits a locally privileged attacker (local write access) to modify extension files, bypassing extension verification and potentially manipulating extension...

CVE-2017-5099

Google Chrome for Mac PPAPI Plugins were vulnerable due to insufficient validation of untrusted input, enabling privilege elevation via a crafted HTML page. Affected component: PPAPI Plugins in Chrome on macOS; root cause: input validation failure; impact: remote privilege elevation with user int...

CVE-2017-5100

CVE-2017-5100 is a use-after-free in Chrome Apps within Chromium/Google Chrome for Windows, allowing a remote attacker to cause an out-of-bounds memory read via a crafted HTML page. Connected advisories confirm the issue affects Chromium-based Chrome and Chromium before version 60.0.3112.78, with...

CVE-2017-5131

CVE-2017-5131 is an out-of-bounds write in the Skia component of Chromium/Google Chrome (pre-62.0.3202.62). The vulnerability was used to enable potential remote code execution in the browser via a crafted page. Mitigation: upgrade to Chromium/Chrome version 62.0.3202.62 or newer (Debian Arch Gen...

CVE-2017-6500

CVE-2017-6500 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-6929

CVE-2017-6929 is a jQuery-based cross-site scripting vulnerability that affects Drupal’s Ajax requests to untrusted domains. Concrete details from connected documents: Drupal 8 was fixed in 8.4.0 via a core upgrade to jQuery 3; Drupal 7 was fixed in the current release (7.57) with jQuery 1.4.4 (t...

CVE-2017-8357

CVE-2017-8357 affects ImageMagick 7.0.5-5 where ReadEPTImage (ept.c) can be triggered by a crafted file to cause a denial of service via memory leak. The description specifies the vulnerable component and the impact as stated in the CVE entry. No remediation or patch information is provided in th...

CVE-2018-12029

CVE-2018-12029 describes a race condition in the Phusion Passenger nginx module (3.x–5.x) before 5.3.2. If a non-standard passenger_instance_registry_dir with weak permissions is configured, a race can occur after a file is created but before chown, where replacing the file with a symlink targets...

CVE-2018-12458

FFmpeg vulnerability CVE-2018-12458: An improper integer type in libavcodec/mpeg4videoenc.c (mpeg4_encode_gop_header) can trigger an assertion, leading to denial of service when converting crafted AVI to MPEG4. Affected: FFmpeg 2.8 and 4.0. Public disclosures in multiple feeds (e.g., Debian DSA-4...