CVE-2018-12892

Concretely, CVE-2018-12892 affects Xen 4.7–4.10.x when using libxl with qemu-xen: libxl fails to pass the readonly flag to QEMU for emulated SCSI disks (disk type sd) due to an erroneous merge conflict resolution. This can allow malicious guest administrators or certain users to write to original...

CVE-2018-16758

CVE-2018-16758 affects the tinc VPN daemon up to version 1.0.34. The root cause is missing message authentication in the meta-protocol, enabling a man-in-the-middle to disable VPN packet encryption. Public sources (NVD, CNVD) describe a MITM-based impact that decrypts or disrupts traffic. Fedora ...

CVE-2019-17565

CVE-2019-17565 affects Apache Traffic Server. Affected versions include 6.0.0–6.2.3, 7.0.0–7.1.8, and 8.0.0–8.0.5, with a smuggling attack via chunked encoding. Remediation per sources: upgrade to 7.1.9 or 8.0.6 or later. The vulnerability exists in ATS’s handling of HTTP requests and could allow...

CVE-2020-22036

CVE-2020-22036 is a heap-based Buffer Overflow in FFmpeg 4.2, specifically in filter_intra (libavfilter/vf_bwdif.c), which may cause memory corruption. Connected advisories confirm FFmpeg 4.2 is affected and describe multiple related CVEs; Debian and Ubuntu advisories list FFmpeg as the vulnerabl...

CVE-2020-35479

CVE-2020-35479 affects MediaWiki prior to 1.35.1. The vulnerability is due to XSS through BlockLogFormatter.php, caused by Language::translateBlockExpiry not escaping in all code paths (e.g., Language::userTimeAndDate returns HTML-unsafe month values). Affected versions include MediaWiki 1.12.0 a...

CVE-2020-36658

CVE-2020-36658 affects Apache::Session::LDAP prior to 0.5, where validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends because the Net::LDAPS Perl module default is used. This can enable spoofing or exposure of sensitive information if an attacker tri...

CVE-2021-21844

GPAC Project on Advanced Content library v1.0.1 contains multiple exploitable integer overflow vulnerabilities in its MPEG-4 decoding path. Specifically, the stco FourCC handling can trigger unchecked arithmetic, causing a heap-based buffer overflow and memory corruption when processing crafted M...

CVE-2021-21846

The CVE-2021-21846 issue affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A specially crafted MPEG-4 input in the stsz decoder triggers an unchecked arithmetic path that can overflow and lead to a heap-based buffer overflow, causing memory...

CVE-2021-21861

GPAC (Project on Advanced Content) library v1.0.1 contains an exploitable integer truncation in MPEG-4 decoding, specifically when processing the hdlr FOURCC, leading to improper memory allocation and a heap-based buffer overflow that can cause memory corruption when a user opens a crafted video....

CVE-2021-28704

CVE-2021-28704 is a Xen hypervisor PoD-related vulnerability. PoD mode can start x86 HVM/PVH guests with on-demand memory and allow domains to issue P2M hypercalls that operate on page ranges; the base page frame number (PFN) alignment isn’t enforced for certain orders, enabling misalignment in X...

CVE-2021-28709

The connected documents confirm CVE-2021-28709 affects the Xen hypervisor where PoD-mode HVM/PVH guests can request P2M page updates via hypercalls on page ranges; the hypervisor may split requests into chunks and error handling for partial success on PoD operations is incomplete. This relates to...

CVE-2021-37147

CVE-2021-37147 affects Apache Traffic Server: improper input validation in header parsing allows HTTP request smuggling. Affected versions are 8.0.0–8.1.2 and 9.0.0–9.1.0. Public sources describe risk of request smuggling and potential MITM. Patches/updates exist in Debian advisories (e.g., Bulls...

CVE-2021-40732

CVE-2021-40732 concerns Exempi’s XMP Toolkit (versions 2020.1 and earlier). The connected sources confirm a NULL pointer dereference in the Exempi library when processing certain files, allowing leakage of memory contents and enabling local denial of service within the current user context. Explo...

CVE-2022-38850

CVE-2022-38850, 38851, 38855, 38858, 38860, 38861, 38863, 38864, 38865, 38866 affect MPlayer and mencoder (SVN-r38374-13.0.1). The issues span Divide By Zero in llibmpcodecs/vf_scale.c (CVE-38850) and other problems including Out-of-bounds Read (CVE-38851), Buffer Overflow (CVE-38855, 38858, 3886...

CVE-2022-42310

CVE-2022-42310 – Xenstore corruption in Xen : A bug where creating multiple Xenstore nodes inside a transaction and an error prevents cleanup from removing all nodes. Upon commit, nodes without a valid parent can become permanent in the Xenstore database, enabling persistent orphaned nodes. This ...

CVE-2022-42334

CVE-2022-42334 concerns the Xen hypervisor: a mis-handling in the HVM cache attributes interface used to override defaults for passed‑through devices. The root cause described across connected sources is unbounded control region creation and a lack of proper serialization for installation/removal...

CVE-2022-42906

Technical details about CVE-2022-42906 are not publicly provided in the supplied documents. Monitor for updates in external sources.

CVE-2025-38102

The CVE CVE-2025-38102 describes a race in VMCI within the Linux kernel between vmci_host_setup_notify and vmci_ctx_unset_notify. A warning can be triggered in try_grab_folio due to a still-in-progress get_user_pages_fast writing to context->notify_page, which may be observed and mismanaged du...

CVE-2025-38124

CVE-2025-38124 pertains to the Linux kernel UDP/GSO path. The vulnerability arises when UDP GSO fragments within a frag_list are not correctly linearized after a pull from frag_list, causing invalid geometry for skb_segment. The fix, as described in commit a1e40ac5b5e9, redirects and then lineari...

CVE-2025-38215

In CVE-2025-38215, the Linux kernel fbdev subsystem had a null-ptr-deref risk in fb_videomode_to_var when do_register_framebuffer allocated fb_videomode memory unsuccessfully. The fix prevents registering fb_info unless its mode is set and moves fb_add_videomode() earlier in do_register_framebuff...

CVE-2025-38251

CVE-2025-38251 refers to a NULL-dereference in the Linux kernel ATM clip subsystem (clip_push) when clip_devs is NULL, caused by vcc_destroy_socket() calling clip_push() with a NULL skb. The vulnerability is fixed by upstream commits cited in the CVE entry and is reflected in multiple advisories ...

CVE-2025-38410

CVE-2025-38410 affects the Linux kernel; specifically, the drm/msm fence leak in the submit error path could fail to call drm_sched_entity_push_job() and msm_job_free(), allowing a stale s_fence reference to persist. The issue is fixed in kernel updates (the Debian/openSUSE/Ubuntu advisories indi...

CVE-2025-38420

CVE-2025-38420 ffecting the Linux kernel’s wifi Carl9170 driver. The issue occurs when the device that failed firmware loading is pinged; since ieee80211_register_hw() fails, the internal workqueue created by ieee80211_queue_work() is not yet present, causing a null pointer dereference if a queue...

CVE-2025-38422

CVE-2025-38422 affects the Linux kernel lan743x PCI1xxxx device support. The fix modifies EEPROM and OTP size handling: maximum OTP size is now 8 KB and EEPROM size 64 KB for hearthstone PCI1xxxx devices, updates max size definitions, and ensures the correct EEPROM length is returned depending on...

CVE-2025-38458

The CVE-2025-38458 entry concerns the Linux kernel vulnerability in atm/clip: a NULL pointer dereference in vcc_sendmsg(), which can lead to a kernel crash (OOPS) when atmarpd_dev_ops does not implement the send method. The provided trace shows a NULL address dereference and a call path through v...

CVE-2025-38467

CVE-2025-38467 affects the Linux kernel DRM/Exynos driver (exynos7_drm_decon). A race condition could cause a kernel NULL pointer dereference during boot when a secondary console device (e.g., TTY serial) is present, leading to a panic. The fix adds a guard to validate that the DRM device can han...

CVE-2004-0434

The CVE-2004-0434 vulnerability is confirmed by connected advisories: in Heimdal kadmind (Kerberos 5 with Kerberos 4 support), a remote attacker can send a Kerberos 4 framing length of less than 2, triggering a heap-based buffer overflow. This affects kadmind components when Kerberos 4 support is...

CVE-2004-0456

CVE-2004-0456 affects Pavuk (versions including 0.9pl28 and 0.9pl27) where processing a long HTTP Location header can trigger a stack-based overflow, potentially allowing remote code execution. The OpenVAS/Gentoo advisories (GLSA 200406-22, GLSA 200411-19, and related entries) document the vulner...

CVE-2007-6601

CVE-2007-6601 is a privilege-escalation flaw in PostgreSQL via the DBLink module when local trust or ident authentication is configured. The issue stems from an incomplete fix for CVE-2007-3278, allowing a user with access to DBLink to gain superuser privileges. The connected advisories indicate ...

CVE-2008-4058

CVE-2008-4058 affects Mozilla-based products (Firefox, SeaMonkey, Thunderbird) where XPConnect could be abused to pollute XPCNativeWrappers via chrome XBL/chrome JS, enabling remote arbitrary-code execution with chrome privileges. Publicly documented affected ranges include Firefox before 2.0.0.1...

CVE-2008-4065

CVE-2008-4065 affects Mozilla Firefox (≤2.0.0.16, and ≤3.0.1/3.0.x before 3.0.2), Thunderbird (≤2.0.0.16), and SeaMonkey (≤1.1.11) with a BOM-based stripping issue that can bypass cross‑site scripting (XSS) protections. The root cause is removal of Stripped BOM characters from JavaScript code pri...

CVE-2010-2498

The CVE-2010-2498 entry involves FreeType (pSHinter/pshalgo.c) where the function psh_glyph_find_strong_points fails to implement hinting masks correctly. This can lead to heap memory corruption and a crash, with potential arbitrary code execution via a crafted font file that triggers an invalid ...

CVE-2010-2527

CVE-2010-2527 affects the FreeType 2 font engine (before 2.4.0). The issue is buffer overflows in the FreeType demo programs, which could cause an application crash or potentially allow arbitrary code execution via a crafted font file. Public references in connected documents confirm multiple adv...

CVE-2011-1408

The CVE-2011-1408 entry applies to ikiwiki prior to version 3.20110608. The vulnerability enables remote attackers to hijack the root user’s tty and perform symlink attacks. From the description, the attack is remote and does not require authentication, with network access identified as the attac...

CVE-2013-6410

CVE-2013-6410 affects the NBD server (nbd) prior to version 3.5, where IP address checking can be bypassed by using an IP with a partial match in the authfile. The vulnerability allows remote attackers to bypass access restrictions. Affected product: nbd server in Network Block Device; vulnerable...

CVE-2014-2326

CVE-2014-2326 is an XSS vulnerability in Cacti, affecting 0.8.7g, 0.8.8b and earlier, via cdef.php (CDEF editing). Exploitation could inject arbitrary script in web context. Remediation per connected docs: upgrade to the patched release (e.g., Cacti 0.8.8d or later; vendors list updates such as 0...

CVE-2014-9221

CVE-2014-9221 affects strongSwan’s IKEv2 KE handling with DH group 1025, causing a NULL pointer dereference and potential denial of service. Public details in connected advisories confirm the flaw exists in strongSwan 4.5.x–5.2.x (before 5.2.1) and can crash the IKE daemon on receiving a crafted ...

CVE-2015-1235

CVE-2015-1235 affects the Blink HTML parser: ContainerNode::parserRemoveChild in core/dom/ContainerNode.cpp allows a Same Origin Policy bypass via a crafted HTML document with an IFRAME in Chrome before 42.0.2311.90. The vulnerability stems from the HTML parser logic in Blink, enabling cross-orig...

CVE-2015-1245

The connected documents confirm CVE-2015-1245 in Google Chrome is a use-after-free in pdfium from OpenPDFInReaderView::Update, caused by a pdfium button with an invalid tab association. This can lead to a denial of service via heap memory corruption, with the potential for unspecified impact. The...

CVE-2015-1248

CVE-2015-1248 affects Google Chrome's FileSystem API prior to 40.0.2214.91, enabling a SafeBrowsing bypass by placing an .exe in a temporary filesystem and referencing it via a filesystem:http: URL. The issue is referenced in multiple advisories (Debian DSA-3238-1, Gentoo GLSA-201506-04, CNVD-201...

CVE-2015-1250

Google Chrome prior to 42.0.2311.135 contained multiple vulnerabilities that were fixed by the Chrome team during internal auditing; affecting Chrome/Chromium prior to the 42.0.2311.135 release and potentially enabling denial of service or other impacts via unknown vectors. Remediation observed i...

CVE-2015-1253

CVE-2015-1253 affects Google Chrome (Blink DOM implementation). The vulnerability lies in core/html/parser/HTMLConstructionSite.cpp, allowing a cross-origin policy bypass by crafted JavaScript that appends to a SCRIPT element, related to insert and executeReparentTask. Impact is a Same Origin Pol...

CVE-2015-1280

Affected software: Google Chrome (Skia). CVE-2015-1280 is a memory corruption issue in SkPictureShader.cpp within Skia used by Chrome before 44.0.2403.89. Root cause: crafted serialized data provided to the renderer can trigger memory corruption, leading to a possible denial of service and unspec...

CVE-2015-1289

CVE-2015-1289 refers to multiple vulnerabilities found in Google Chrome prior to 44.0.2403.89. The connected records confirm this CVE as part of the Chromium/Chrome fixes, with the Chrome 44 stable update (44.0.2403.89) addressing these issues. The user-visible impact from the sources is a denial...

CVE-2015-1822

Chrony CVE-2015-1822 affects chrony before 1.31.1, where the last “next” pointer is not initialized when saving unacknowledged replies to authenticated command requests. This uninitialized pointer can cause a denial of service (daemon crash) and may allow arbitrary code execution under heavy comm...

CVE-2015-3417

CVE-2015-3417 describes a use-after-free in FFmpeg's libavcodec/h264.c (ff_h264_free_tables) that can be triggered by crafted H.264 data in an MP4, potentially causing a denial of service. The vulnerability affects FFmpeg/libav prior to a fixed version referenced in multiple advisories. Publicly ...

CVE-2015-4047

The CVE-2015-4047 vulnerability affects ipsec-tools, specifically the racoon daemon's code path in racoon/gssapi.c. A remote attacker can send crafted UDP requests to trigger a NULL pointer dereference, causing the IKE daemon to crash and resulting in DoS. The issue is associated with IPsec-Tools...

CVE-2016-1623

CVE-2016-1623 affects Google Chrome before 48.0.2564.109. The DOM implementation does not properly restrict frame-attach operations during or after frame-detach, allowing remote attackers to bypass the Same Origin Policy via a crafted site. Root cause involves functions/files cited: FrameLoader.c...

CVE-2016-1625

CVE-2016-1625 affects Google Chrome prior to 48.0.2564.109. The vulnerability arises because the Chrome Instant feature does not reliably ensure that a New Tab Page navigation target is on the most-visited or suggestions list, enabling a remote bypass of restrictions. Root cause references to ins...

CVE-2016-1703

CVE-2016-1703 refers to multiple unspecified vulnerabilities in Google Chrome/Chromium up to version 51.0.2704.79, which could allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The Mageia advisory explicitly ties CVE-2016-1703 to Chromium 51.0.2...