CVE-2006-6500

CVE-2006-6500 describes a heap-based buffer overflow in Mozilla-related products. A remote attacker could crash the application or possibly execute arbitrary code by crafting CSS cursor images that trigger an incorrect Windows bitmap size calculation during conversion. Affected software per the d...

CVE-2008-1945

CVE-2008-1945 is documented in multiple advisories linked to QEMU 0.9.0 used within MiracleLinux/Xen deployments. The vulnerability arises when a guest OS alters the removable media header via the -usbdevice diskformat option, enabling the guest to read arbitrary files from the host by identifyin...

CVE-2013-4532

CVE-2013-4532 affects QEMU 1.1.2+dfsg through 2.1+dfsg. The issue is a buffer overrun that could allow arbitrary code execution on the host with the QEMU process privileges. The connected resources corroborate the same impact. The provided materials do not specify a fixed version or remediation; ...

CVE-2014-3168

CVE-2014-3168 is a use-after-free in Blink's SVG image handling for Chrome/Chromium prior to 37.0.2062.94, caused by improper caching of animated SVG content. Exploitation could lead to denial of service and possibly other impacts. Patches are present in Chrome/Chromium 37.0.2062.94 and newer (e....

CVE-2014-8594

CVE-2014-8594 affects Xen 4.x up to 4.4.x (Xen hypervisor) where do_mmu_update in arch/x86/mm.c does not properly restrict updates to PV page tables. This enables remote PV guests to trigger a denial of service via a NULL pointer dereference by leveraging hardware emulation services for HVM guest...

CVE-2014-9039

CVE-2014-9039 affects WordPress versions prior to 4.0.1 for the 4.x line and older 3.x branches: remote password resets could be triggered if an attacker gains access to the email account that received the reset message. The explicit vulnerable ranges are WordPress before 3.7.5, 3.8.x before 3.8....

CVE-2015-1249

CVE-2015-1249 corresponds to multiple issues in Google Chrome prior to 42.0.2311.90. Connected advisories indicate these were among several vulnerabilities discovered through internal audits, fuzzing, and other initiatives and fixed in Chrome 42.0.2311.90 (e.g., Debian/Mageia/BSD advisories list ...

CVE-2015-2749

CVE-2015-2749 is an open redirect vulnerability in Drupal. The affected software is Drupal 6.x prior to 6.35 and Drupal 7.x prior to 7.35. The vulnerability enables remote attackers to redirect users to arbitrary websites and potentially facilitate phishing through a destination parameter. Exploi...

CVE-2016-1650

The CVE-2016-1650 issue affects Google Chrome prior to 49.0.2623.108, where PageCaptureSaveAsMHTMLFunction::ReturnFailure in browser/extensions/api/page_capture/page_capture_api.cc could trigger a denial of service by failing to create MHTML documents. Public reports (CNVD/ Debian security adviso...

CVE-2016-1701

CVE-2016-1701 concerns Google Chrome’s Autofill implementation. The vulnerability arises from how field updates interact with JavaScript triggering a frame deletion, leading to a use-after-free and potential denial of service (and possibly other impact) via a crafted web site. Affected software i...

CVE-2016-5108

CVE-2016-5108 affects VideoLAN VLC media player prior to 2.2.4. A buffer overflow in DecodeAdpcmImaQT (modules/codec/adpcm.c) can be triggered by a crafted QuickTime IMA file, leading to denial of service (crash) and, potentially, arbitrary code execution. Exploitation is possible remotely and do...

CVE-2016-7156

CVE-2016-7156 affects QEMU pvscsi driver: local privileged users can trigger an infinite loop via an incorrect cast in pvscsi_convert_sglist, causing denial of service. Connected advisories confirm the issue across Linux distros; Debian's DLA-1599 notes fixes for this and other CVEs, stating Jess...

CVE-2016-7966

CVE-2016-7966 affects KDE’s KMail plaintext viewer. A crafted URL containing a quote character can inject HTML code due to the URL parser’s handling, limiting inclusion of characters like = or space, but allowing an HTML comment indicator to hide content. This creates a potential HTML injection r...

CVE-2016-9376

CVE-2016-9376 affects Wireshark 2.2.0–2.2.1 and 2.0.0–2.0.7. The OpenFlow dissector (epan/dissectors/packet-openflow_v5.c) could crash due to memory exhaustion triggered by crafted network traffic or a capture file. The root cause involved unsafe length handling, leading to excessive memory usage...

CVE-2016-9559

CVE-2016-9559 is rejected/not used per description; not an active vulnerability entry.

CVE-2017-12869

CVE-2017-12869 affects SimpleSAMLphp multiauth module (1.14.13 and earlier) and allows remote attackers to bypass authentication context restrictions by using an authentication source defined in config/authsources.php due to improper input validation. Public advisories (e.g., Debian DSA-4127/DSA-...

CVE-2017-15395

The CVE-2017-15395 entry concerns a null-pointer dereference in the ImageCapture component of Chromium/Blink, leading to a potential denial of service or instability. Affected products include Chromium-based browsers (Chromium/Chromium-browser and Google Chrome) with versions prior to 62.0.3202.6...

CVE-2017-18238

CVE-2017-18238 affects Exempi (before 2.4.4). The issue lies in TradQT_Manager::ParseCachedBoxes in XMPFiles/source/FormatSupport/QuickTime_Support.cpp, which allows remote attackers to trigger a denial of service (infinite loop) via crafted XMP data in a .qt file. This vulnerability is documente...

CVE-2017-2826

CVE-2017-2826 describes an information-disclosure vulnerability in Zabbix Server 2.4.x where the iConfig proxy request can cause the server to reveal the configuration of any Zabbix proxy. The attacker can trigger this by sending crafted requests from an active Zabbix proxy. The connected documen...

CVE-2017-2908

Blender 2.78c contains an exploitable integer overflow in the thumbnail generation path (triggered while rendering a .blend in File->Open dialog), leading to a buffer overflow and potential code execution under the application. Public advisories (e.g., Debian Mageia/OpenVAS records) show this ...

CVE-2017-5106

Chromium-based Omnibox domain spoofing vulnerability CVE-2017-5106 in Google Chrome pre-60.0.3112.78 (Mac/Windows/Linux/Android). Root cause: insufficient policy enforcement allowing IDN homograph-based domain spoofing. Impact: remote attacker could spoof domain names via crafted domain names; re...

CVE-2017-7747

CVE-2017-7747 affects Wireshark up to 2.2.5 (and 2.0.x up to 2.0.11): the PacketBB dissector could crash when processing certain packets or malformed captures. The fix implemented in epan/dissectors/packet-packetbb.c restricts additions to the protocol tree to prevent crash conditions. Public ref...

CVE-2018-1000671

CVE-2018-1000671 (Sympa) affects Sympa 6.2.16 and later. The issue is a CWE-601 Open Redirect in the referer parameter of the wwsympa.fcgi login action, which can lead to open redirection and reflected XSS via data URIs. Impact described in connected documents includes potential for an attacker t...

CVE-2018-20763

GPAC vulnerability CVE-2018-20763 affects GPAC 0.7.1 and earlier; the issue is an out-of-bounds write in gf_text_get_utf8_line (media_tools/text_import.c) caused by missing szLineConv bounds checking. This memory-operations/bounds issue is associated with the GPAC MP4Box utility and can impact th...

CVE-2019-11071

CVE-2019-11071 affects SPIP 3.1.x before 3.1.10 and 3.2.x before 3.2.4, where mishandling of var_memotri enables an authenticated visitor to execute arbitrary code on the host server. The vulnerability is an authenticated RCE with high impact (CVE-3.x reported as high/critical depending on vector...

CVE-2019-16378

CVE-2019-16378 affects OpenDMARC 1.3.2 and 1.4.x up to 1.4.0-Beta1, introducing a signature-bypass vulnerability with multiple From: addresses that could affect how domains are treated as origin. The issue is documented in multiple feeds (e.g., Fedora, Ubuntu USN-4567-1, FreeBSD VuXML) and is spe...

CVE-2020-15564

CVE-2020-15564 affects the Xen hypervisor on ARM, due to a missing alignment check in VCPUOP_register_vcpu_info. A malicious ARM guest could pass a misaligned address to cause a hypervisor crash (DoS). The issue is described as affecting Xen through 4.13.x (ARM), with all Xen versions on ARM vuln...

CVE-2020-26932

CVE-2020-26932 is a Debian Sympa issue where the postinst script for the sympa package (before 6.2.40~dfsg-7) sets the sympa_newaliases-wrapper with mode 4755 instead of the intended 4750, allowing access by the sympa group. The Debian security advisories (DSA-4818) indicate this affects Sympa be...

CVE-2020-28618

CGAL CGAL-5.1.1 Nef polygon-parsing contains multiple memory access and out-of-bounds read vulnerabilities (OOB reads) in various PM/SM/SNC IO parsers, potentially enabling code execution when processing crafted Nef data. CVEs include CVE-2020-28601 through CVE-2020-28636 (and related 2020-3563x/...

CVE-2020-28624

CGAL CGAL-5.1.1 Nef polygon-parsing contains multiple out-of-bounds read and type-confusion vulnerabilities (occasional code execution) in the Nef_S2/SNC_io_parser.h paths (read_facet, read_vertex, read_hedge, read_sloop, read_sface, etc.). CVE-2020-28624 specifically notes an oob read in SNC_io_...

CVE-2020-36425

Arm Mbed TLS before 2.24.0 contains a revocation check flaw for CRLs: it inconsistently honors revocation via CRL by using a revocationDate check, which can be exploited by altering the local clock. This can affect certificate revocation handling. Remediation is to upgrade to version 2.24.0 or la...

CVE-2022-28129

Apache Traffic Server versions 8.0.0–9.1.2 are affected by CVE-2022-28129 due to improper input validation in HTTP/1.1 header parsing, allowing an attacker to send invalid headers. Fedora advisories indicate upgrades to 9.1.3 (and 8.0.2+ds-1+deb10u7 for Debian) to fix the issue. CVSSv3 base score...

CVE-2022-3636

CVE-2022-3636 is a Linux kernel vulnerability affecting the function __mtk_ppe_check_skb in drivers/net/ethernet/mediatek/mtk_ppe.c (Ethernet Handler). The issue is a use-after-free in the MTK PPE path, leading to potential corruption or crash. A patch is recommended to fix the issue. The vulnera...

CVE-2022-43593

OpenImageIO DPXOutput::close() vulnerability (CVE-2022-43593) affects OpenImageIO v2.4.4.2, where a specially crafted ImageOutput input can trigger a null pointer dereference and cause a denial of service. Public advisories confirm this CVE and recommend upgrading to a newer OpenImageIO release; ...

CVE-2025-38015

CVE-2025-38015 – Linux kernel (dmaengine idxd): The issue is a memory leak in the error path of idxd_alloc where memory allocated for idxd could be left unreleased if idxd_alloc() fails. The fix frees the allocated memory in the reverse order of allocation before exiting the function on error. Th...

CVE-2025-38131

CVE-2025-38131 affects the Linux kernel coresight subsystem. The issue arises when enabling an active config via cscfg_csdev_enable_active_config() but the config could be deactivated via configfs/sysfs during unloading, potentially leading to use-after-free of config_desc after the module unload...

CVE-2025-38203

The CVE-2025-38203 entry concerns the Linux kernel JFS file-system driver. A concurrency-related null pointer dereference in jfs_ioc_trim can occur when JFS_SBI(ipbmap->i_sb)->bmap is NULL and is dereferenced, leading to a kernel crash. The issue is tied to a previously fixed patch, but und...

CVE-2025-38323

Summary (CVE-2025-38323): In the Linux kernel, the ATM LECS code path (net/atm/lec.c) had a potential use-after-free due to a path that could leave a dangling pointer in dev_lec[] from lecd_attach(). The patch adds a mutex (lec_mutex) to protect dev_lecp[] uses from lecd_attach(), lec_vcc_attach(...

CVE-2025-38326

CVE-2025-38326: Linux kernel AOE driver vulnerability where aoe device rq_list isn’t cleaned on down, causing blk_mq_freeze_queue() to sleep and hang. Fix clears the rq_list before blk_mq_freeze_queue(). No exploitation details provided; remediation is the kernel fix.

CVE-2025-38391

CVE-2025-38391 in the Linux kernel addresses a vulnerability in USB Type-C Alt Mode handling for DisplayPort. A misbehaving port partner could claim pin assignment capabilities beyond the valid range, causing an out-of-bounds access in pin_assignment_show. The fix adds a DP_PIN_ASSIGN_MAX constan...

CVE-2025-38419

In CVE-2025-38419, Linux kernel remoteproc core fixes a resource leak: when rproc_attach() runs with rproc->state = RPROC_DETACHED and rproc_handle_resources() fails, resources allocated by imx_rproc_prepare() were not released. The mitigation is a code change in rproc_attach() to route to cle...

CVE-2025-38462

CVE-2025-38462 affects the Linux kernel vsock subsystem. Root cause is a TOCTOU race in vsock_find_cid() and vsock_dev_do_ioctl() with module unload, where transport_g2h/h2g can become NULL after a NULL check, causing null-pointer derefs. The patch adds vsock_transport_local_cid() to guard agains...

CVE-2025-38618

CVE-2025-38618 concerns the Linux kernel where a vsock could autobind to VMADDR_PORT_ANY, risking a use-after-free on connection to the bound socket. The fix updates __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY. Connected sources (e.g., Astra Linux, Debian LTS advisories,...

CVE-2025-39866

CVE-2025-39866 concerns a use-after-free in the Linux kernel’s fs writeback path, specifically __mark_inode_dirty() when the inode’s wb switching occurs. The root cause is a race during switching inode_writeback backends (wb) which can lead to use-after-free via wb_wakeup_delayed() accessing a fr...

CVE-2003-0358

Buffer overflow in nethack (3.4.0 and earlier) and falconseye (1.9.3 and earlier) allows local users to gain gid 'games' via a long -s option. Debian advisories document the issue; falconseye is fixed in 1.9.3-7woody3 (DSA-350-1). For nethack, a Debian advisory (DSA-316) covers the fix and recomm...

CVE-2006-1530

Technical details for CVE-2006-1530 are not publicly available in the provided documents. Monitor for updates.

CVE-2008-1567

CVE-2008-1567 affects phpMyAdmin; version prior to 2.11.5.1 stores the MySQL username, password, and the Blowfish secret key in cleartext in a Session file under /tmp, enabling local users to obtain sensitive information. Connected advisories show patches upgrading to phpMyAdmin 2.11.9.4 (e.g., o...

CVE-2008-3535

CVE-2008-3535 is an off-by-one error in the iov_iter_advance function of Linux kernel mm/filemap.c, addressed by multiple advisories. Public disclosures in Debian/Ubuntu indicate this allows local attackers to crash the system (denial of service) via certain sequences of readv/writev/file operati...

CVE-2008-4582

CVE-2008-4582 describes an information leak through local Windows shortcut files (.url) that could bypass Same Origin Policy and disclose data via an HTML document. Publicly documented details indicate affected products include Mozilla Firefox 3.0.1–3.0.3, Firefox 2.x prior to 2.0.0.18, and SeaMo...

CVE-2013-4184

CVE-2013-4184 affects the Perl module Data::UUID from CPAN version 1.219, vulnerable to symlink attacks due to a fragile handling of temporary files. Multiple connected sources show vendor advisories and distro patches (e.g., Fedora advisory FEDORA-2024-3da8ed5be3 and Mageia/OpenVAS notices) conf...