CVE-2017-0918

GitLab CE 10.3 is affected by a path traversal vulnerability in the GitLab CI runner that allows remote code execution. This CVE-2017-0918 entry is supported by multiple sources (NVD details, OSV/Ubuntu, Debian DSA-4145). Impact: high (CVSSv3: 8.8) with network vector, unauthenticated user intera...

CVE-2017-11139

GraphicsMagick 1.3.26 contains a double-free vulnerability in ReadOneJNGImage() (coders/png.c), tracked as CVE-2017-11139. Connected advisories indicate multiple distributions published fixes; e.g., Debian/DSA-4321-1 and Fedora advisories include GraphicsMagick updates to 1.3.28+ to address this ...

CVE-2017-12877

ImageMagick vulnerability CVE-2017-12877: Use-after-free in DestroyImage (image.c) prior to 7.0.6-6 can lead to remote denial of service via a crafted file.

CVE-2017-14864

CVE-2017-14864 : An invalid memory address dereference in Exiv2::getULong (types.cpp) of Exiv2 0.26 can cause a segmentation fault and denial of service. Connected advisories confirm Exiv2 exposure in multiple Linux distros and vendor advisories, with mitigations/patches released. The Debian LTS ...

CVE-2017-15389

CVE-2017-15389 is a URL-spoofing vulnerability in the Omnibox (URL bar) of Chromium/Google Chrome prior to 62.0.3202.62. The root cause is an insufficient watchdog timer in navigation, enabling a remote attacker to spoof the contents of the Omnibox via a crafted HTML page. Affected software inclu...

CVE-2017-15953

CVE-2017-15953 affects the bchunk component (BinChunker) up to version 1.2.1. Multiple sources describe a heap-based buffer overflow that can cause a crash when processing malformed CUE files, with the Fedora/Arch/Linux advisories and NASL entries noting remediation by upgrading to 1.2.2 or newer...

CVE-2017-16840

CVE-2017-16840 affects FFmpeg 3.0 and 3.4, where the VC-2 video encoder (libavcodec/vc2enc.c and vc2enc_dwt.c) allows a remote attacker to trigger a denial of service via an out-of-bounds read caused by incorrect buffer padding for non-Haar wavelets. The issue has been fixed in FFmpeg 3.4.x relea...

CVE-2017-4965

CVE-2017-4965: Several forms in the RabbitMQ management UI are vulnerable to XSS in affected releases (RabbitMQ: 3.4.x, 3.5.x, 3.6.x before 3.6.9; RabbitMQ for PCF: 1.5.x, 1.6.x before 1.6.18, 1.7.x before 1.7.15). Debian DLA-2710 lists this alongside CVEs 4966/4967 with a fix for 3.6.6-1+deb9u1;...

CVE-2017-5042

CVE-2017-5042 affects Chromium/Google Chrome before version 57.0.2987.98 (desktop) and 57.0.2987.108 (Android) due to incorrect handling of cookies in Cast, enabling a local‑network attacker to cause connections to arbitrary URLs and observe plaintext cookies. Public advisories (Debian, openSUSE)...

CVE-2017-5113

CVE-2017-5113 describes a buffer overflow in the Skia component of Chromium/Chrome that could allow a remote attacker to execute arbitrary code via a crafted HTML page. Affected products include Chromium/Chrome before version 61.0.3163.79 (Chrome desktop/mac/win/linux) and 61.0.3163.81 (Android),...

CVE-2017-7652

CVE-2017-7652 affects Eclipse Mosquitto (notably around version 1.4.14) where reloading configuration on SIGHUP can exhaust file descriptors/sockets, preventing opening the config file. Publicly documented impact includes potential configuration reload failures due to FD exhaustion. Remediation g...

CVE-2017-8344

CVE-2017-8344 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-8353

CVE-2017-8353 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-0492

Beep is affected by CVE-2018-0492: a race condition in the setuid-beep path allows local privilege escalation in the beep package (version around 1.3.4). Public disclosures reference Gentoo GLSA-201805-15 and Debian/DLA-1338-1; Fedora also released an update (beep-1.3-26.fc28). Mitigation in the ...

CVE-2018-14056

ZNC prior to version 1.7.1-rc1 is affected by CVE-2018-14056, a path-traversal flaw triggered by a crafted web skin name via ../ that can access files outside the skins directory. CVE-2018-14055 (also cited in the sources) covers privilege-escalation issues related to processing untrusted network...

CVE-2018-16336

CVE-2018-16336 affects Exiv2 (v0.26) via Exiv2::Internal::PngChunk::parseTXTChunk. The vulnerability is a heap-based buffer over-read caused by processing crafted TXT chunks in PNG files, enabling a remote denial of service. Connected sources corroborate this issue within Exiv2’s PNG/text parsing...

CVE-2018-20185

GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit hosts is affected by a heap-based buffer over-read in ReadBMPImage (bmp.c) that can cause denial of service when processing crafted BMP files, limited to installations with customized BMP limits. Public advisories reference patches: Debian fixes 1...

CVE-2018-8099

CVE-2018-8099 affects the libgit2 library. The issue comes from an incorrect error code return in index.c:read_entry(), which can cause a double free and thus a denial of service when processing a crafted repository index file. The vulnerability is present in libgit2 releases before v0.26.2; mult...

CVE-2019-12216

CVE-2019-12216 affects the SDL ecosystem when using libSDL2.a (SDL 2.0.9) with libSDL2_image.a (SDL2_image 2.0.4). The issue is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW (at IMG_pcx.c). The connected documents list this CVE among SDL_image-related advisories, but do n...

CVE-2020-35475

CVE-2020-35475 affects MediaWiki before 1.35.1. The vulnerability arises when certain messages, specifically userrights-expiry-current and userrights-expiry-none, contain raw HTML, allowing cross-site scripting (XSS) if a user visits Special:UserRights and cannot change all userrights; the left-h...

CVE-2020-35479

CVE-2020-35479 affects MediaWiki prior to 1.35.1. The vulnerability is due to XSS through BlockLogFormatter.php, caused by Language::translateBlockExpiry not escaping in all code paths (e.g., Language::userTimeAndDate returns HTML-unsafe month values). Affected versions include MediaWiki 1.12.0 a...

CVE-2021-32565

Apache Traffic Server is affected by CVE-2021-32565 due to invalid values in the Content-Length header, enabling HTTP request smuggling. Affected releases: 7.0.0–7.1.12, 8.0.0–8.1.1, and 9.0.0–9.0.1. The issue’s root cause is improper handling of Content-Length values. Debian/DSA-4957-1 notes a f...

CVE-2022-38864

CVE-2022-38864 affects The MPlayer Project: the buffer overflow in mp_unescape03() in libmpdemux/mpeg_hdr.c impacts mplayer and mencoder SVN-r38374-13.0.1. The Connected documents also enumerate related issues (CVE-2022-38850, -38851, -38853, -38855, -38858, -38860, -38861, -38863, -38864, -38865...

CVE-2023-52159

CVE-2023-52159 affects gross server (grossd) and stems from a stack-based buffer overflow triggered by crafted SMTP transaction parameters, leading to a denial of service (grossd crash) and potentially arbitrary code execution. Affected versions range from 0.9.3 up to, but not including, 1.0.4. P...

CVE-2025-38020

In the Linux kernel issue CVE-2025-38020, MACsec offload is not supported in switchdev mode for uplink representors. The vulnerability stems from NETIF_F_HW_MACSEC remaining set when switching to the uplink representor profile, allowing a null pointer dereference when offloads are added. The fix ...

CVE-2025-38031

CVE-2025-38031 is a Linux kernel issue in the padata subsystem where a parallel_data refcount is incremented unconditionally by a patch, allowing a refcount leak if queue_work() returns that the work is already queued. The described fix is to check queue_work()’s return value and decrement the re...

CVE-2025-38067

CVE-2025-38067 : In the Linux kernel, the rseq registration path could segfault if the user-space rseq_cs field is non-zero. The field is supposed to be set to 0 before registration, but this wasn’t enforced, allowing a faulty rseq_cs value to cause a segfault when returning to user-space. The fi...

CVE-2025-38126

CVE-2025-38126 affects the Linux kernel’s stmmac driver in timestamp configuration. The root cause is that clk_ptp_rate can become 0 (if clk_get_rate returns 0 and the driver does not override it), leading to a division by zero during PTP initialization. The issue is fixed by adding an explicit c...

CVE-2025-38135

CVE-2025-38135 – Linux kernel (serial/mlb_usio_probe) NULL pointer dereference fix : The vulnerability arises when devm_ioremap() returns NULL on error and mlb_usio_probe() fails to check it, potentially leading to a NULL pointer dereference. The fix adds a NULL check after devm_ioremap() to prev...

CVE-2025-38142

The CVE-2025-38142 issue affects the Linux kernel hwmon path (asus-ec-sensors) where read_string() could read a non-existent sensor because find_ec_sensor_index() returned a negative value (for example -ENOENT) and was used without validation. The fix introduces a check to ensure sensor_index is ...

CVE-2025-38167

The CVE-2025-38167 entry pertains to the Linux kernel, specifically the ntfs3 filesystem driver. Root cause: hdr_first_de() may return NULL, and error handling for this return value should be implemented consistently. The description notes that error handling already exists at other call sites. I...

CVE-2025-38214

CVE-2025-38214 affects the Linux kernel fbdev path. The issue arises when fb_add_videomode() in fb_set_var() fails to allocate fb_videomode, potentially causing a null pointer dereference in fb_videomode_to_var() because fb_info->var is modified before modelist validation. The debug trace show...

CVE-2025-38400

No additional technical details about CVE-2025-38400 are provided in the connected documents beyond the initial description. Monitor for updates.

CVE-2025-38448

CVE-2025-38448 is a Linux kernel vulnerability in the USB gadget u_serial wakeup path. The issue is a race condition where gs_start_io() may call gs_start_rx() or gs_start_tx() after briefly dropping port_lock for usb_ep_queue(), allowing gs_close() or gserial_disconnect() to clear port.tty and p...

CVE-2025-38470

CVE-2025-38470 affects the Linux kernel VLAN handling when 8021q rx-vlan-filter is enabled. It can cause VLAN 0 to be emulated on NETDEV_UP/DC_DOWN, leading to a memory leak if VLAN 0 is not removed, or a potential null-vlan_info path triggering a BUG_ON during device teardown. Root cause: refcnt...

CVE-2025-38478

Technical details for CVE-2025-38478 are not publicly available in the provided documents. The initial report describes Linux kernel Comedi instruction data initialization issues; monitor for updates.

CVE-2025-38487

CVE-2025-38487 relates to the Linux kernel ASPEED SoC LPC snoop driver. The vulnerability arises from disabling channels that aren’t enabled, which can lead to a NULL pointer dereference and a kernel Oops on ARM systems, as illustrated by the provided trace. The Ubuntu/Astra Linux advisory confir...

CVE-2004-0643

CVE-2004-0643 describes a double-free vulnerability in MIT Kerberos 5 (krb5) prior to or at 1.3.1, specifically in krb5_rd_cred, potentially allowing arbitrary code execution on vulnerable KDC/clients. Connected advisories extend this class of issues to Kerberos KDC and libraries (double-free bug...

CVE-2004-0837

CVE-2004-0837 affects MySQL 4.x up to 4.0.21 and 3.x up to 3.23.49. The issue is a denial-of-service via multiple threads that simultaneously alter MERGE table UNIONs, leading to a crash or hang. Connected advisories note patches from multiple vendors (e.g., SLES9, Solaris, Ubuntu) and general se...

CVE-2008-0017

CVE-2008-0017 is a buffer overflow in the http-index-format parser (nsDirIndexParser) that could lead to remote arbitrary code execution. Public advisories show affected Mozilla-family products (Firefox/Iceweasel/Iceape/SeaMonkey/XULRunner) with fixes in Firefox 3.0.4 and corresponding Mozilla/NS...

CVE-2008-5024

CVE-2008-5024 concerns Mozilla Firefox 3.x prior to 3.0.4, Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior to 2.0.0.18, and SeaMonkey 1.x prior to 1.1.13. The issue arises from improper escaping of quote characters in XML processing via E4X (default namespace), enabling remote XML injection....

CVE-2010-2499

CVE-2010-2499 is a FreeType buffer overflow in the PS/PFB handling path (Mac_Read_POST_Resource in base/ftobjs.c) that can cause an application crash or possibly allow remote code execution when processing a crafted LaserWriter PS font. Public advisories note multiple vendor updates fixing this i...

CVE-2010-2547

GnuPG 2.x is affected by CVE-2010-2547: a use-after-free in gpgsm/kbx-blob.c when importing or verifying a certificate with a large number of Subject Alternative Names can be exploited to crash the process or possibly execute arbitrary code. Impact is a denial of service with potential remote cod...

CVE-2013-2901

CVE-2013-2901 corresponds to an integer overflow in ANGLE used by Google Chrome (renderer code paths libGLESv2/renderer/Renderer9.cpp and Renderer11.cpp). The issue arises in ANGLE, and, per the description, could enable a remote attacker to cause a denial of service or potentially other impact v...

CVE-2014-9087

CVE-2014-9087: Libksba’s ksba_oid_to_str() has an integer underflow pre-1.3.2, used by GnuPG, enabling a crafted OID in S/MIME or ECC OpenPGP data to trigger a crash (DoS) or potential overflow. Affected: Libksba/libksba_oid_to_str; Fix: upgrade to Libksba 1.3.2 or newer. No exploit details in pr...

CVE-2015-1236

The CVE-2015-1236 entry refers to a Chrome/Blink vulnerability in the Web Audio API: MediaElementAudioSourceNode::process in Blink’s Web Audio implementation allows a remote site with a media element to bypass Same Origin Policy and access sensitive audio samples. Impact data from the sources con...

CVE-2015-1260

CVE-2015-1260 affects Google Chrome up to version 43.0.2357.65, where multiple use-after-free vulnerabilities exist in the WebRTC interface (content/renderer/media/user_media_client_impl.cc). Exploitation via crafted JavaScript after getUserMedia can lead to denial of service and possibly other i...

CVE-2015-5261

CVE-2015-5261 is a heap-based buffer overflow in SPICE before 0.12.6 that allows local guest OS users to read from or write to arbitrary host memory via guest QXL surface-creation parameters. This is a local vulnerability affecting SPICE/QXL components used in virtualized environments. See connec...

CVE-2016-10711

Pound (reverse proxy/load balancer) before 2.8a is exposed to HTTP request smuggling via crafted headers (CVE-2016-10711). The issue is documented across multiple feeds (NVD/NIST, Debian, USN) as a related vulnerability to CVE-2016-10711; affected versions include Pound up to 2.8a. Exploitation d...

CVE-2016-1625

CVE-2016-1625 affects Google Chrome prior to 48.0.2564.109. The vulnerability arises because the Chrome Instant feature does not reliably ensure that a New Tab Page navigation target is on the most-visited or suggestions list, enabling a remote bypass of restrictions. Root cause references to ins...