CVE-2025-38305

CVE-2025-38305 affects the Linux kernel: the advisory describes removing the ptp->n_vclocks check logic in ptp_vclock_in_use() to avoid a recursive locking scenario. The trigger involves reading ptp->n_vclocks under the n_vclocks_mux while another path holds the same mutex, causing a potent...

CVE-2025-38409

CVE-2025-38409 affects the Linux kernel, specifically the drm/msm path. The issue is a leak in the submit error path where put_unused_fd() fails to free the installed file if fd_install() has already occurred, leading to a leaked resource (sync_file). The patch fixes the leak by freeing the sync_...

CVE-2025-38430

This CVE-2025-38430 affects the Linux kernel and is addressed by a patch that makes nfsd4_spo_must_allow() verify that the RPC procedure is NFSPROC4_COMPOUND. If the request is not a v4 compound, examining cstate could yield undefined results; the patch enforces the proper rq_procinfo for v4 comp...

CVE-2025-38439

CVE-2025-38439 (bnxt_en, Linux kernel): Affects the bnxt_en driver when transmitting XDP_REDIRECT packets. The underlying bug was that dma_unmap_len_set() was called with length 0 instead of the actual length, triggering a warning under IOMMU-enabled systems (warning shown in kernel stack trace)....

CVE-2025-38707

CVE-2025-38707 is a Linux-kernel NTFS3 file-name sanity-check vulnerability. The issue arises from a too-long file name not being validated against the directory-entry size, potentially enabling local escalation when processing NTFS names. The CVE entry in the initial doc shows a HIGH impact with...

CVE-2001-0279

The CVE-2001-0279 entry concerns a buffer overflow in sudo prior to version 1.6.3p6 that could allow a local user to gain root privileges. Multiple connected advisories confirm this vulnerability and reference updating to a fixed package (e.g., 1.6.3p6 or newer) as the remedy. Affected documents ...

CVE-2001-0886

Mode C: The CVE-2001-0886 issue is a buffer overflow in the glibc glob(3) implementation. The vulnerability affects glibc’s globbing code and can lead to a crash (DoS) and potentially arbitrary code execution when processing a glob pattern that ends with the brace character “{”. The OpenVAS/DEBIA...

CVE-2006-1531

CVE-2006-1531 concerns an unspecified vulnerability in Firefox and Thunderbird prior to 1.5.0.2 and SeaMonkey prior to 1.0.1 that could allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via unknown DHTML-related attack vectors. Public vendor details ...

CVE-2008-0063

CVE-2008-0063 affects MIT Kerberos 5 (krb5kdc) where Kerberos v4 support leaves an unused buffer uncleared when generating error messages. This can allow remote attackers to read sensitive information from memory. Public advisories across multiple vendors (e.g., MiracleLinux AXSA-2008-345/AXSA-20...

CVE-2008-4068

CVE-2008-4068 is a directory-traversal vulnerability in Mozilla Firefox (pre-2.0.0.17 and 3.x pre-3.0.2), Thunderbird (pre-2.0.0.17), and SeaMonkey (pre-1.1.12) triggered by crafted resource: URIs. The flaw lets remote attackers bypass local HTML restrictions, read sensitive information, and prom...

CVE-2009-4895

CVE-2009-4895 describes a race condition in the Linux kernel's tty_fasync path (drivers/char/tty_io.c) prior to 2.6.32.6, enabling local users to cause a denial of service via a NULL pointer dereference and system crash. The issue is tied to put_tty_queue and __f_setown, with a note that it was a...

CVE-2010-0136

CVE-2010-0136 affects OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 where VBA macro security settings are not properly enforced, enabling remote attackers to execute arbitrary macros via crafted documents. The issue stems from insufficient enforcement of VBA macro security in the ooo-build/OpenOff...

CVE-2011-1293

The CVE-2011-1293 entry concerns a use-after-free vulnerability in Google Chrome’s HTMLCollection implementation, affecting Chrome versions prior to 10.0.648.204. The vulnerability allows remote attackers to cause a denial of service and potentially other impact via unknown vectors. The provided ...

CVE-2012-1186

CVE-2012-1186 affects ImageMagick 6.7.5-8 and earlier. The issue is an integer overflow in the SyncImageProfiles function in profile.c, leading to a remote denial of service (infinite loop) when processing crafted IOP tag offsets in the IFD of an image. This vulnerability exists because of an inc...

CVE-2014-8595

Technical details for CVE-2014-8595 are not publicly available in the provided documents. The connected sources reference the CVE but do not disclose affected products, versions, root cause, or fixes. Monitor for official updates.

CVE-2015-1259

The CVE-2015-1259 entry is confirmed in connected sources as a PDFium memory initialization issue in Google Chrome/Chromium prior to 43.0.2357.65. The root cause is an uninitialized memory condition in the PDFium component, which can allow a remote attacker to cause a denial of service or potenti...

CVE-2015-5623

CVE-2015-5623 affects WordPress prior to 4.2.3, where edit_posts capability was not properly verified. This allowed remote authenticated users (Subscriber) to bypass restrictions and create drafts via Quick Draft (wp-admin/post.php). Root cause: inadequate capability check. Impact: privilege esca...

CVE-2015-8916

CVE-2015-8916 affects libarchive’s RAR parsing: a NULL pointer dereference can crash the application when encountering a crafted RAR header (split file in multivolume). IBM notes PowerKVM 3.1 is affected; remediation is to update PowerKVM systems (yum update) and apply the 3.1.0.2 update or later...

CVE-2016-3630

CVE-2016-3630 : Mercurial versions before 3.7.3 are affected by a binary delta decoder vulnerability that could allow remote code execution via clone, push, or pull due to a list sizing rounding error and short records. Connected advisories indicate the fix is to upgrade Mercurial to 3.7.3 or new...

CVE-2016-7446

CVE-2016-7446 affects GraphicsMagick; a buffer overflow in the MVG and SVG rendering code (GraphicsMagick 1.3.24) can be triggered by crafted SVG/malformed input, allowing remote attackers to cause unspecified impact. The vulnerability is noted as resulting from an incomplete patch for CVE-2016-2...

CVE-2017-14440

SDL2_image-2.0.2 contains an exploitable vulnerability in ILBM image rendering that can trigger a stack overflow and lead to code execution when processing a crafted ILBM image. This vulnerability is corroborated across multiple sources (e.g., Debian DSA-4184-1, GLSA-201903-17, Mageia MGASA-2018-...

CVE-2017-14448

CVE-2017-14448 affects SDL2_image-2.0.2: the XCF image rendering path can overflow the heap, enabling code execution when a specially crafted XCF image is displayed. Public advisories indicate upgrading to SDL2_image-2.0.4 (or newer) to fix this issue; other sources note related advisories upgrad...

CVE-2017-15427

CVE-2017-15427 is a Chrome Omnibox cross-site scripting vulnerability reported as: insufficient policy enforcement in Omnibox allowed a user to XSS themselves by dragging and dropping a javascript: URL into the URL bar, affecting Chrome versions before 63.0.3239.84. Connected sources confirm the ...

CVE-2017-17915

CVE-2017-17915 affects GraphicsMagick (notably the GraphicsMagick 1.4 snapshot-20171217 Q8) where a heap-based buffer over-read occurs in ReadMNGImage (coders/png.c) due to accessing one byte before testing a limit. This aligns with multiple advisories noting GraphicsMagick vulnerabilities and CV...

CVE-2017-18026

CVE-2017-18026 affects Redmine: versions prior to 3.2.9, 3.3.x prior to 3.3.6, and 3.4.x prior to 3.4.4 fail to block the Mercurial hg flags --config and --debugger, enabling remote command execution via the Mercurial adapter when a branch name starts with --config= or --debugger=. Root cause is ...

CVE-2017-2903

CVE-2017-2903 affects Blender 2.78c, where an exploitable integer overflow in the DPX loading path (triggered by crafted .cin files via the sequencer) can cause a buffer overflow and code execution under the application. Public sources linked to Debian/Mageia/OSV advisories indicate fixes by upgr...

CVE-2017-5118

CVE-2017-5118 describes a CSP bypass in Blink used by Google Chrome (Mac/Win/Linux) and Chromium builds, where CSP restrictions were not correctly propagated to javascript: scheme pages. The underlying issue allowed a remote attacker to bypass the Content Security Policy via a crafted HTML page. ...

CVE-2017-5125

CVE-2017-5125 affects Chromium/Chromium‑Browser (Skia) prior to 62.0.3202.62. Root cause: a heap overflow in the Skia component that can be triggered by a crafted HTML page. Impact: remote attacker could potentially execute arbitrary code within the browser context; impact details are cited acros...

CVE-2017-5132

CVE-2017-5132 —In Chrome/Chromium, an incorrect WebAssembly stack manipulation in the WebAssembly component before version 62.0.3202.62 can allow a remote attacker to trigger arbitrary code execution via a crafted HTML page. The issue is associated with a heap/stack manipulation flaw in the Chrom...

CVE-2017-5507

CVE-2017-5507 refers to a memory leak in ImageMagick's coders/mpc.c, affecting ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4. The issue allows remote attackers to trigger a denial of service via vectors involving a pixel cache, leading to memory consumption. Connected advisories and CVE recor...

CVE-2017-7863

CVE-2017-7863 is a FFmpeg vulnerability: an out-of-bounds write caused by a heap-based buffer overflow in libavcodec/pngdec.c (decode_frame_common). The impact is an out-of-bounds write that could affect affected FFmpeg builds. Public documents confirm the issue and reference FFmpeg/libav demuxer...

CVE-2017-7865

CVE-2017-7865 affects FFmpeg/libavcodec: an out-of-bounds write caused by a heap-based buffer overflow in ipvideo_decode_block_opcode_0xA (libavcodec/interplayvideo.c) and a related issue in avcodec_align_dimensions2 (libavcodec/utils.c). Public sources reference FFmpeg/libav demuxers/decoders im...

CVE-2017-7941

CVE-2017-7941 entry rejected/not used; not an active vulnerability.

CVE-2018-1000097

CVE-2018-1000097 affects Sharutils’ unshar utility. The buffer-overflow vulnerability in unshar.c (line 75, looks_like_c_code) allows an attacker-controlled input file to cause arbitrary code execution or crash. Debian reports fixes: 4.15.2-2+deb9u1 for Stretch (stable) and 4.14-2+deb8u1 for olds...

CVE-2018-11563

OTRS 6.0.x–6.0.7 contains a vulnerability where a crafted email can inject and execute arbitrary stylesheet or JavaScript in a logged-in customer’s browser within the OTRS customer panel. The issue is a client-side impact (UI/script execution) driven by user-supplied content (email) processed by ...

CVE-2018-1318

CVE-2018-1318 affects Apache Traffic Server. The issue arises when adding method ACLs in remap.config, which can cause a segmentation fault under crafted requests. Vulnerable ATS versions: 6.0.0–6.2.2 and 7.0.0–7.1.3. Impact described as a segfault when handling certain inputs; no exploit details...

CVE-2018-14432

Summary of CVE-2018-14432 (OpenStack Keystone federation) : An authenticated GET to /v3/OS-FEDERATION/projects could bypass access controls and disclose all projects and their attributes when Keystone’s /v3/OS-FEDERATION endpoint is enabled via policy.json. Affected releases include OpenStack Key...

CVE-2018-15469

CVE-2018-15469 affects Xen 4.11.x and earlier where ARM grant table v2 is not properly implemented in the hypervisor or Linux. An unprivileged ARM guest can request v2 grant tables that are not correctly set up, causing grant-related hypercalls to trigger a BUG() and crash the hypervisor, i.e., D...

CVE-2018-5704

CVE-2018-5704 affects OpenOCD 0.10.0, enabling cross‑protocol scripting via crafted web content that can trigger arbitrary command execution on the host (targeted by HTTP POST to 127.0.0.1:4444). Public advisories note a remedy: OpenOCD defaults bound to localhost and patches/upstream fixes have ...

CVE-2018-7711

CVE-2018-7711 affects the SimpleSAMLphp saml2 library, specifically HTTPRedirect.php in versions prior to 1.15.4. The root cause is an incorrect check of return values in the signature validation utilities, caused by a dependency on PHP behavior that interprets a -1 error code as true. This lets ...

CVE-2019-17340

CVE-2019-17340 is a Xen hypervisor issue (affecting Xen through 4.11.x) where grant-table transfer requests are mishandled, enabling a local x86 guest OS user to cause a Denial of Service or potentially gain privileges. The root cause is incorrect handling of grant-table transfer pages, which can...

CVE-2019-17350

CVE-2019-17350 affects the Xen hypervisor (Arm domU) with a vulnerability in a compare-and-exchange operation that can cause an infinite loop, leading to a local DoS. Affected releases include Xen up to 4.12.x. Exploitation requires local access and is bound to the Arm domain. Remediation: patche...

CVE-2019-3461

CVE-2019-3461 affects Debian tmpreaper 1.6.13+nmu1, due to a race condition during a (bind) mount via rename(). If the directory being cleaned is on the same filesystem, a mount could cause a file to land elsewhere in the hierarchy (e.g., /etc/cron.d/), enabling local privilege elevation. The iss...

CVE-2020-22035

The CVE-2020-22035 case is a heap-based Buffer Overflow in FFmpeg 4.2 (get_block_row in libavfilter/vf_bm3d.c) that may cause memory corruption. Connected documents corroborate FFmpeg as the affected component and cite multiple advisories (USN-5472-1, Debian DSA-4990, etc.) that demand upgrading ...

CVE-2020-28616

CVE-2020-28616 concerns CGAL-5.1.1 Nef polygon-parsing; an out-of-bounds read in SNC_io_parser/EW::read_vertex() (vh->sfaces_begin()) can lead to code execution. Multiple connected advisories confirm memory-access/OB read paths across Nef_2/PM_io_parser.h, Nef_S2/SNC_io_parser.h, and related P...

CVE-2021-22895

CVE-2021-22895 refers to a vulnerability in Nextcloud Desktop Client prior to 3.3.1 where SSL certificate validation is not performed during the “Register with a Provider” flow, due to missing certificate verification. The root cause is improper certificate validation in the provider enrollment p...

CVE-2021-31598

CVE-2021-31598 affects ezXML 0.8.6 (libezxml.a) and arises from incorrect memory handling in ezxml_decode() while parsing crafted XML files, causing a heap-based buffer overflow. The issue is consistently cited across multiple advisories (SUSE/OpenSUSE SUSE-SU-2021:3815/3804/3805, 3873-1, openSUS...

CVE-2021-3909

CVE-2021-3909 affects OctoRPKI: the vulnerable component does not bound connection length, enabling a slowloris-style DOS where the target repository keeps the HTTP connection open (up to about a day) while drip-feeding data. This can cause the OctoRPKI service to hang, impacting availability. Co...

CVE-2023-25221

CVE-2023-25221 affects libde265 v1.0.10, with a heap-buffer-overflow in derive_spatial_luma_vector_prediction (motion.cc). The vulnerability is tracked across multiple advisories and Debian notes, with the issue fixed in libde265-1.0.11 (per Debian DLA-3352-1) and showcased in Mageia's update to ...

CVE-2024-55581

CVE-2024-55581 affects AdaCore Ada Web Server 25.0.0 when linked with GnuTLS, where AWS.Client defaults do not verify the HTTPS server certificate, enabling MITM attacks if TLS configuration is not explicitly set. Root cause: insecure defaults in AWS.Client with GnuTLS. Impact: potential compromi...