CVE-2012-0248

CVE-2012-0248 affects ImageMagick 6.7.5-7 and earlier, enabling remote DoS (infinite loop/hang) via a crafted image whose IFD contains IOP tags referencing the start of the IDF. The connected sources confirm the affected version range and the attack vector is remote, with impact limited to denial...

CVE-2012-0260

CVE-2012-0260 affects ImageMagick prior to 6.7.6-3: the JPEGWarningHandler in coders/jpeg.c can be triggered by a crafted JPEG with specific restart marker sequences, causing memory consumption DoS. Affected versions are ImageMagick before 6.7.6-3; remediation is to upgrade to a fixed release (6....

CVE-2013-1934

The CVE-2013-1934 issue affects MantisBT 1.2.0rc1 and earlier, where the configuration report page adm_config_report.php allows remote authenticated users to inject arbitrary script/HTML via a complex value, enabling cross-site scripting. Root cause: insufficient input sanitization on the adm_con...

CVE-2013-2024

In Chicken, CVE-2013-2024 describes an OS command injection vulnerability in the qs procedure from the utils module, affecting versions before 4.9.0. The root cause is unsafely handling or composing OS commands within that path, enabling an attacker to execute arbitrary commands on the host. The ...

CVE-2013-6646

CVE-2013-6646 is a use-after-free vulnerability in Google Chrome’s Web Workers implementation. The flaw affects Chrome on Windows (pre-32.0.1700.76) and macOS/Linux (pre-32.0.1700.77), enabling remote denial of service and potentially other unspecified impacts via worker shutdown-related vectors....

CVE-2013-6650

CVE-2013-6650 affects Google V8 before 3.22.24.16, used in Google Chrome up to 32.0.1700.102. The StoreBuffer::ExemptPopularPages function may trigger memory corruption via handling of "popular pages", potentially enabling remote denial of service. Connected sources confirm a patched Chrome/OpenS...

CVE-2014-2328

CVE-2014-2328 affects Cacti 0.8.7g, 0.8.8b and earlier. The flaw in lib/graph_export.php allows remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors, enabling remote command execution. Multiple connected advisories note remediation by upgrading ...

CVE-2014-3167

CVE-2014-3167 refers to multiple vulnerabilities in Google Chrome/Chromium prior to version 36.0.1985.143 that could allow a denial of service or other impact via unknown vectors. The connected documents confirm the issue is part of a set of Chromium flaws fixed in subsequent Chromium/Chrome upda...

CVE-2014-6272

Libevent’s evbuffer API contains multiple integer overflows in affected versions: 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta. An attacker providing insanely large inputs to evbuffer_add, evbuffer_expand, or bufferevent_write can trigger a heap-based buffer overflow or a...

CVE-2015-1252

Chrome CVE-2015-1252 affects the common/partial_circular_buffer.cc vulnerability in Google Chrome before 43.0.2357.65. The issue is an out-of-bounds write when handling wraps in PartialCircularBuffer::Write/PartialCircularBuffer::DoWrite, which could allow a sandbox escape or cause a denial of se...

CVE-2015-1279

CVE-2015-1279 : Integer overflow in CJBig2_Image::expand within PDFium (fxcodec/jbig2/JBig2_Image.cpp) used by Google Chrome before 44.0.2403.89 leads to a heap-based buffer overflow when processing large height/stride values. Impact described as remote denial of service (and unspecified other im...

CVE-2015-1854

CVE-2015-1854 affects 389-ds-base (Directory Server). The flaw allows an unauthenticated attacker to bypass access controls by issuing an ldapmodrdn call, enabling unauthorized modifications of directory entries. Connected sources (Debian DLA-1428, Debian tracker, Amazon ALAS-2015-538, Fedora 201...

CVE-2015-2750

CVE-2015-2750 is an open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 that allows remote attackers to redirect users to arbitrary sites and facilitate phishing via the // sequence. The issue affects Drupal’s URL-related API functions; there is no exploitation detail in the...

CVE-2015-5343

CVE-2015-5343 affects Apache Subversion (mod_dav_svn). An integer overflow in util.c can trigger an out-of-bounds read and heap overflow via a skel-encoded request body, allowing remote authenticated users to cause a DoS or possibly execute arbitrary code. Affected versions: Subversion 1.7.x; 1.8...

CVE-2016-1653

CVE-2016-1653 is an out-of-bounds write in Google V8 used by Chrome up to version 50.0.2661.75. The issue, tied to compiler/pipeline.cc and compiler/simplified-lowering.cc, could cause a denial of service and possibly other impact via crafted JavaScript. Affected software includes Google Chrome/C...

CVE-2016-1657

CVE-2016-1657 affects Google Chrome/Chromium. The WebContentsImpl::FocusLocationBarByDefault function mishandles focus for certain about:blank pages, allowing a remote attacker to spoof the address bar via a crafted URL. Affected version range is before 50.0.2661.75 (Chrome/Chromium). Public advi...

CVE-2016-2194

CVE-2016-2194 affects Botan: the ressol function (Tonelli–Shanks) can enter an infinite loop when given a composite modulus, exposed through ECC point decompression (OS2ECP). This enables a remote DoS condition. Several advisories (Debian DSA-3565, Gentoo GLSA-201612-38, Mageia MGASA-2016-0102, F...

CVE-2016-4952

CVE-2016-4952 affects QEMU when built with VMWARE PVSCSI paravirtual SCSI bus emulation; it allows a local privileged guest OS user to trigger an out-of-bounds access in PVSCSI_CMD_SETUP_RINGS or PVSCSI_CMD_SETUP_MSG_RING, causing a denial of service. OpenVAS/Nessus entries in related advisories ...

CVE-2016-7177

CVE-2016-7177 affects Wireshark 2.x up to 2.0.5 (Catapult DCT2000 dissector). The dissector does not restrict the number of channels, allowing a remote attacker to cause a denial of service via a crafted packet, via a buffer over-read that crashes the application. Affected component: Catapult DCT...

CVE-2016-9532

CVE-2016-9532 concerns LibTIFF. An integer overflow in the writeBufferToSeparateStrips function (tiffcrop.c) in LibTIFF before 4.0.7 can be triggered by a crafted TIFF file, causing denial of service via an out-of-bounds read. Affected versions are LibTIFF

CVE-2017-11173

The vulnerability CVE-2017-11173 affects rack-cors before 0.4.1, where a missing anchor in the generated regex can under-validate domain restrictions. This can allow a malicious third party to perform cross-origin requests through CORS by tricking configurations that intended to allow only truste...

CVE-2017-15572

Vulnerability overview (CVE-2017-15572): Redmine before 3.2.6 and 3.3.x before 3.3.3 exposes password reset tokens via an information disclosure in the account/lost_password flow, because the redirect is not used and Referer logs can leak tokens. Affected software: Redmine web application; vulner...

CVE-2017-2825

CVE-2017-2825 affects Zabbix Server 2.4.x in the trapper functionality. Specifically crafted trapper packets can bypass database logic checks, leading to unauthorized database writes. An attacker could leverage a MitM position to modify trapper requests between an active Zabbix proxy and the Serv...

CVE-2017-5102

CVE-2017-5102 affects Google Chrome (Skia) prior to 60.0.3112.78 on Linux, Windows, macOS, and Android. The issue is caused by use of an uninitialized value in Skia, allowing a remote attacker to read potentially sensitive information from a process’s memory via a crafted HTML page. Public refere...

CVE-2017-6816

CVE-2017-6816 affects WordPress prior to 4.7.3 (wp-admin/plugins.php) where the plugin deletion functionality could allow an administrator to delete unintended files. The vulnerability is tied to the plugin deletion flow and is not described with additional exploit vectors in the provided documen...

CVE-2017-8312

CVE-2017-8312 affects VideoLAN VLC (2.2.x) due to a heap out-of-bounds read in ParseJSS caused by a missing string-length check in subtitle parsing. A crafted subtitles file can read heap-uninitialized data, with potential crash or code execution. Public advisories (Arch Linux ASA-201706-1, Debia...

CVE-2017-8348

CVE-2017-8348 entry is rejected/not used; not an active vulnerability.

CVE-2017-9144

CVE-2017-9144 affects ImageMagick 7.0.5-5 where crafted RLE images trigger a crash due to incorrect EOF handling in coders/rle.c. The connected Mageia advisory MGASA-2018-0229 notes a patch in imagemagick to version 6.9.9.41 addressing several vulnerabilities, including memory handling issues and...

CVE-2018-3837

CVE-2018-3837 describes an information-disclosure flaw in the PCX image handling of SDL2_image-2.0.2. A specially crafted PCX image can trigger an out-of-bounds read on the heap, allowing partial disclosure when the image is processed. The vulnerability affects SDL2_image’s PCX rendering path and...

CVE-2018-5704

CVE-2018-5704 affects OpenOCD 0.10.0, enabling cross‑protocol scripting via crafted web content that can trigger arbitrary command execution on the host (targeted by HTTP POST to 127.0.0.1:4444). Public advisories note a remedy: OpenOCD defaults bound to localhost and patches/upstream fixes have ...

CVE-2018-5786

CVE-2018-5786 affects Long Range ZIP (lrzip). The flaw is in lrzip 0.631’s get_fileinfo routine, which can enter an infinite loop when processing a crafted lrz file, leading to denial of service via remote input. Public advisories confirm impact across lrzip deployments and list patched versions:...

CVE-2018-7437

CVE-2018-7437 affects FreeXL (library used to read Excel files). The issue is a heap-based buffer over-read in a memcpy call within parse_SST, fixed in FreeXL versions 1.0.5 and later. Impact is potential memory safety violation; exploitation details are not provided in the available documents. R...

CVE-2019-10868

CVE-2019-10868 affects Trytond (modelstorage.py) with multiple branches: Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6. An authenticated user can order records based on a field for which they have no access right, potentially enabling valu...

CVE-2019-11187

CVE-2019-11187 concerns the GOsa LDAP class in GONICUS GOsa up to 2019-04-11, where an incorrect access-control flaw can allow login to any account whose username contains the case-insensitive substring “success” when an arbitrary password is provided. The issue is described as an authorization b...

CVE-2019-14586

CVE-2019-14586 is a use-after-free vulnerability in the EDK II firmware component. The connected documents confirm the issue affects the edk2 package within EulerOS/Oracle Linux environments, and that an authenticated user could potentially escalate privileges, disclose information, or cause deni...

CVE-2019-3467

CVE-2019-3467 affects Debian-LAN-related components used with Debian Edu: Debian-edu-config versions earlier than 2.11.10 and debian-lan-config earlier than 0.26 were configured with overly permissive ACLs on the Kerberos admin server. This misconfiguration allowed password changes for other Kerb...

CVE-2020-28635

CVE-2020-28635 affects CGAL’s Nef polygon-parsing in the CGAL-5.1.1 package. The entry describes multiple out-of-bounds read vulnerabilities in the Nef parser that can lead to code execution when processing crafted input, specifically mentioning the SNC_io_parser and read_sedge()/facet() paths, a...

CVE-2020-35634

CVE-2020-35634 affects CGAL-5.1.1, specifically the Nef polygon-parsing paths in Nef_S2/SNC_io_parser.h. A malformed CGAL input file can trigger an out-of-bounds read in read_sface(), causing type confusion and potential code execution. Connected advisories corroborate multiple related CVEs in CG...

CVE-2020-9760

WeeChat prior to 2.7.1 (affecting 0.3.4–2.7) contains a buffer overflow in handling IRC message 005 when longer nick prefixes trigger a new nick mode; this can crash the client (denial of service). Upgrading to WeeChat 2.7.1 or newer is the stated mitigation. Related advisories reference CVE-2020...

CVE-2021-31229

CVE-2021-31229 : Affects ezXML 0.8.6 (libezxml.a). The root cause is improper memory handling in ezxml_internal_dtd() during parsing of crafted XML, leading to an out-of-bounds write of a single byte. Public details on exploitation, affected platforms beyond ezXML 0.8.6, and concrete remediation ...

CVE-2021-36053

CVE-2021-36053 affects Exempi (XMP Toolkit SDK) versions through 2020.1 and earlier, due to an out-of-bounds read that could disclose arbitrary memory. Exploitation requires user interaction (victim opens a malicious file), potentially bypassing ASLR. Connected advisories (Debian LTS, Mageia, Ubu...

CVE-2021-3693

LedgerSMB vulnerabilities (CVE-2021-3693 among others) arise from LedgerSMB not checking the origin of HTML fragments, enabling an authenticated user to receive a specially crafted URL that could lead to remote code execution or information disclosure. Public docs cover multiple advisories across...

CVE-2021-3761

CVE-2021-3761 affects Cloudflare’s RPKI validator (OctoRPKI) prior to 1.3.0, where any CA issuer can trigger an invalid VRP MaxLength value, causing RTR sessions to terminate. This can disable RPKI Origin Validation in a victim network and potentially enable a subsequent BGP hijack; RTR session f...

CVE-2021-40394

Gerbv versions 2.7.0 and its development forks are affected by CVE-2021-40394 due to an out-of-bounds write in RS-274X aperture macro variables handling and an integer overflow in the outline primitive. A specially crafted Gerber file could lead to code execution. Debian’s DLA-3593-1 (and related...

CVE-2021-43579

HTMLDOC contains a stack-based buffer overflow in image_load_bmp() that can cause remote code execution when a crafted BMP file is linked from an HTML document, affecting HTMLDOC

CVE-2021-46837

CVE-2021-46837 affects res_pjsip_t38 in Sangoma Asterisk 16.x prior to 16.16.2, 17.x prior to 17.9.3, 18.x prior to 18.2.2, and Certified Asterisk before 16.8-cert7. A crash can be triggered by an m=image line with zero port in a response to a T.38 re-invite initiated by Asterisk; the crash is du...

CVE-2022-25763

CVE-2022-25763 affects Apache Traffic Server 8.0.0–9.1.2 due to improper HTTP/2 request validation, enabling potential smuggle or cache-poison attacks. The initial document lists CVSS metrics (base 7.5/ HIGH) and impact as I:H, with no exploitation status provided. Remediation references exist in...

CVE-2022-41639

OpenImageIO CVE-2022-41639 is a heap-based buffer overflow in the TIFF tile decoding code, present in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially crafted TIFF file can trigger out-of-bounds memory corruption, potentially leading to arbitrary code execution. Public advisories (De...

CVE-2022-41838

CVE-2022-41838: OpenImageIO v2.4.4.2 DDS scanline parsing contains a heap buffer overflow when processing a specially crafted .dds, enabling code execution as described in multiple advisories. Connected sources indicate remediation via upgrading to OpenImageIO 2.4.6.0 or newer (e.g., Gentoo/Magei...

CVE-2022-43594

OpenImageIO OpenImageIO v2.4.4.2 contains multiple CVEs (including CVE-2022-43594) leading to denial of service via image output closing, with null pointer dereferences when writing BMP/other formats. Affected component is the ImageOutput close/format handling; root cause relates to memory safety...