CVE-2014-8145

CVE-2014-8145 affects SoX (Sound eXchange) 14.4.1 and earlier across multiple distros. The flaw comprises multiple heap-based buffer overflows triggered by crafted WAV (and related) files, notably via start_read and AdpcmReadBlock in wav processing, leading to remote impact with unspecified conse...

CVE-2014-9662

FreeType vulnerability CVE-2014-9662 exists in cff/cf2ft.c up to version 2.5.3/2.5.4 timeframe: the code does not validate return values of point-allocation functions, enabling a remote attacker to craft an OTF font that triggers a heap-based buffer overflow (potential DoS or other impact). A fix...

CVE-2014-9763

CVE-2014-9763 affects imlib2 up to version 1.4.6, where handling of PNM files can trigger a division-by-zero in the loader, leading to a remote DoS and application crash. Connected advisories confirm this issue across multiple distros and patch the vulnerability by upgrading to imlib2 1.4.7 or ne...

CVE-2014-9906

CVE-2014-9906 describes a use-after-free vulnerability in the Perl DBD::mysql module prior to version 4.029. The issue arises from improper memory handling, allowing a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via vectors related to a lost server ...

CVE-2015-1287

CVE-2015-1287 affects Blink (Chrome’s rendering engine) prior to Chrome 44.0.2403.89, where a quirks-mode exception allows CSS text/css to bypass content-type checks, enabling a remote attacker to bypass the Same-Origin Policy via a crafted site. The root cause is linked to CSSStyleSheetResource....

CVE-2015-3439

CVE-2015-3439 affects WordPress usage of Ephox/Moxiecode Plupload’s plupload.flash.swf shim 2.1.2, enabling cross-site scripting via the target parameter in the flash shim. Affected products/versions include WordPress 3.9.x, 4.0.x and 4.1.x before 4.1.2; root cause is a same-origin JavaScript fun...

CVE-2015-5291

CVE-2015-5291 and CVE-2015-8036 describe heap-based buffer overflows in PolarSSL (mbed TLS) that affect PolarSSL 1.x before 1.2.17 and mbed TLS 1.3.x before 1.3.14 and 2.x before 2.1.2. The flaw stems from improper boundary handling of the hostname/SNI extension in ClientHello, enabling remote at...

CVE-2015-5314

CVE-2015-5314 affects hostapd 2.x up to version before 2.6, where eap_pwd_process in eap_server_pwd.c does not validate that the reassembly buffer is large enough for the final EAP-pwd fragment when using an internal EAP server or a RADIUS server. This can allow remote attackers to trigger a deni...

CVE-2016-10510

Kohana Security component (PHP framework) before 3.3.6 is vulnerable to Cross‑Site Scripting (XSS) via bypass of strip_image_tags in system/classes/Kohana/Security.php. Exploitation could allow remote script/HTML injection. Public advisories/citations confirm the issue and its fix: Kohana 3.3.6 r...

CVE-2016-10538

CVE-2016-10538 affects node-cli prior to 1.0.0, where the process insecurely uses temporary files (lock_file and log_file). This design flaw enables the starting user to overwrite arbitrary files they have access to, due to predictable temporary file names. The core issue is the ability to create...

CVE-2016-2326

FFmpeg libavformat/asfenc.c contains an integer overflow vulnerability in the asf_write_packet path (FFmpeg before 2.8.5). A remote attacker can exploit a crafted PTS in a .mov to cause a denial of service (and potentially other impact). Affected component: FFmpeg/libavformat. Root cause: overflo...

CVE-2016-2369

CVE-2016-2369 is a NULL pointer dereference in Pidgin’s MXIT protocol handling. A server can send an MXIT packet starting with a NULL byte to trigger a denial of service. Documented impact per NVD: CVSS2 base 4.3 (Partial availability impact) and CVSS3 base 5.9 (Availability impact, network/vecto...

CVE-2016-8714

CVE-2016-8714 is a buffer overflow in R’s LoadEncoding pathway affecting R-base around 3.3.x. Multiple disclosures (Ubuntu USN-4799-1, Mageia MGASA-2017-0236, Debian DLA-861-1, Fedora advisories) report memory corruption risk or potential arbitrary code execution via crafted encoding data or PDFs...

CVE-2016-9955

The CVE-2016-9955 issue affects SimpleSAMLphp up to version 1.14.10 via the SimpleSAML_XML_Validator constructor. Affected component: SimpleSAML_XML_Validator in SimpleSAMLphp; root cause: improper conversion of return values to boolean in signature validation, allowing an attacker to spoof signa...

CVE-2017-1000229

OptiPNG 0.7.6 is vulnerable to an integer overflow in minitiff_read_info(), enabling potential remote code execution or denial of service. The CVE is tracked as CVE-2017-1000229. Public advisories and vendor updates indicate a security fix was released (e.g., Fedora/RHEL advisories and Gentoo GLS...

CVE-2017-12101

Blender 2.78c contains an exploitable integer overflow in modifier_mdef_compact_influences that can overflow a buffer, allowing code execution when a user opens a crafted .blend file. The vulnerability is user-triggered (via opening a malicious file) and not required to have network access. Publi...

CVE-2017-14737

Botan contains a cache-based side-channel flaw in its RSA implementation that can let a local attacker recover bits of secret exponents used in RSA (and related operations). Affected are Botan versions before 1.10.17, and 1.11.x and 2.x before 2.3.0. The vulnerability arises from indexing a Montg...

CVE-2018-11408

CVE-2018-11408 affects Symfony Security (Security component) across 2.7.x <2.7.48, 2.8.x <2.8.41, 3.3.x <3.3.17, 3.4.x <3.4.11, and 4.0.x

CVE-2018-14346

CVE-2018-14346 affects GNU Libextractor: a stack-based buffer overflow in ec_read_file_func (unzip.c) present in versions before 1.7. Multiple connected sources (Ubuntu/Debian/Mageia/OpenVAS/Nessus OSV entries) indicate the issue can lead to denial of service and, in some disclosures, arbitrary c...

CVE-2018-7542

Technical details (affected products/components, root cause, impact, and fixes) are not publicly provided in the supplied documents. Please monitor for updates from additional sources or vendor advisories to obtain concrete information.

CVE-2019-10904

CVE-2019-10904 affects Roundup 1.6: XSS via the URI caused by improper 404 handling in the web front-end, specifically in frontend/roundup.cgi and roundup/cgi/wsgi_handler.py. Practical impact is client-side code execution due to crafted URIs. Exploitation details are not provided in the supplied...

CVE-2019-12467

MediaWiki up to 1.32.1 suffers Incorrect Access Control allowing a spammer to use Special:ChangeEmail to send spam with no rate limiting or blocking. Affected product: MediaWiki; vulnerability stems from insufficient access controls around ChangeEmail. Fixes exist in 1.32.2, 1.31.2, 1.30.2 and 1....

CVE-2019-16378

CVE-2019-16378 affects OpenDMARC 1.3.2 and 1.4.x up to 1.4.0-Beta1, introducing a signature-bypass vulnerability with multiple From: addresses that could affect how domains are treated as origin. The issue is documented in multiple feeds (e.g., Fedora, Ubuntu USN-4567-1, FreeBSD VuXML) and is spe...

CVE-2019-17344

CVE-2019-17344 : In Xen up to 4.11.x, a denial-of-service may be caused by a long-running operation in support of restartability of PTE updates, exploitable by a local x86 PV guest OS user. The impact is a host DoS with availability being affected; no confidentiality or integrity impact is stated...

CVE-2020-21676

CVE-2020-21676 is a stack-based buffer overflow in genpstrx_text() of fig2dev 3.2.7b, allowing denial of service when converting a xfig file to pstricks. Public advisories (Debian/Ubuntu) indicate fixes in later fig2dev releases (e.g., Debian 1:3.2.7a-5+deb10u5; Ubuntu USN-5864-1). Remediation: u...

CVE-2020-35530

CVE-2020-35530 is a LibRaw vulnerability: an out-of-bounds write in the new_node() path (libraw/src/x3f_utils_patched.cpp) that can be triggered by a crafted X3F file. The issue is exploitable locally (AV:L, AC:L) with user interaction required, and the CVSS base score is 5.5 (Medium) with availa...

CVE-2020-35632

CGAL 5.1.1 (Nef polygon-parsing) is affected by CVE-2020-35632. The issue is an out-of-bounds read in SNC_io_parser::read_sface (and related reads) that can lead to code execution when parsing crafted CGAL Nef data. Connected advisories confirm multiple related CVEs and report code-execution risk...

CVE-2020-9369

Sympa (mailing list manager) is affected by CVE-2020-9369. The vulnerability exists in 6.2.38 through 6.2.52 and allows remote attackers to cause a denial of service by sending requests with malformed parameters, triggering disk consumption via temporary files and a flood of notifications to list...

CVE-2022-26110

HTCondor vulnerability CVE-2022-26110 affects HTCondor 8.8.x up to 8.8.15, 9.0.x up to 9.0.9, and 9.1.x up to 9.5.x. When a user authenticates to a HTCondor daemon via CLAIMTOBE, they can impersonate another entity when issuing subsequent commands to that daemon. Root cause: misuse of CLAIMTOBE a...

CVE-2022-38851

CVE-2022-38851 affects The MPlayer Project: mplayer and mencoder (SVN-r38374-13.0.1). The root cause is an out-of-bounds read in read_meta_record() within mplayer/libmpdemux/asfheader.c. Impact per sources is a crash/denial of service when processing certain malformed media files, with no broader...

CVE-2025-38170

CVE-2025-38170 concerns the Linux kernel (arm64) FPSIMD/SVE/SME state handling. A race during SME trap handling can cause a preemption race where a task ends up with TIF_SME set and TIF_FOREIGN_FPSTATE cleared while the live hardware state is stale. The provided code path shows a trap handler and...

CVE-2025-38198

CVE-2025-38198 – Linux kernel fbcon : A fix resolves an out-of-bounds access when writing to store_modes if con2fb_map contains -1 for an unregistered console. The issue stems from fbcon_info_from_console accessing fbcon_registered_fb[con2fb_map[console]]; the patch changes this to handle invalid...

CVE-2025-38277

CVE-2025-38277 affects the Linux kernel mtd: nand: ecc-mxic code. The bug occurs when ctx->steps is zero: the loop over ECC steps is skipped and ret is left uninitialized, later checked/returned, causing undefined behavior and potential user-space disruption or kernel crashes. The fix initiali...

CVE-2025-38282

CVE-2025-38282 affects the Linux kernel kernfs draining guard. The issue stems from a too-sensitive WARN in kernfs_should_drain_open_files() due to the active reference break/unbreak lifecycle, which can transiently misclassify legitimate callers as a condition requiring drain. Upstream fixes ind...

CVE-2025-38310

CVE-2025-38310 refers to a Linux kernel vulnerability in seg6 where validation of nexthop addresses could read uninitialized memory if the provided length exceeded the actual data; the fix enforces that the provided length exactly matches the specified length. The connected advisories confirm the...

CVE-2025-38389

CVE-2025-38389 affects the Linux kernel i915 DRM stack (drm/i915/gt). The vulnerability arises when ring submission allocation fails during VMA allocation, leaving the engine’s legacy timeline referenced and not released on driver unbind, potentially causing a left-held timeline and related insta...

CVE-2025-38604

CVE-2025-38604 relates to the Linux kernel Wi‑Fi driver RTL818x (rtl8187). The root cause was that URBs were not killed before clearing the transmit status queue, allowing callbacks to access freed skbs and potentially triggering a NULL pointer dereference (kernel crash). The fix moves usb_kill_a...

CVE-2003-0358

Buffer overflow in nethack (3.4.0 and earlier) and falconseye (1.9.3 and earlier) allows local users to gain gid 'games' via a long -s option. Debian advisories document the issue; falconseye is fixed in 1.9.3-7woody3 (DSA-350-1). For nethack, a Debian advisory (DSA-316) covers the fix and recomm...

CVE-2005-2456

CVE-2005-2456 refers to an array index overflow in the Linux kernel 2.6, in xfrm_user.c within xfrm_sk_policy_insert. A local user can trigger the overflow by supplying a p->dir value larger than XFRM_POLICY_OUT, causing writes beyond sock->sk_policy and resulting in a kernel crash (DoS) an...

CVE-2005-3181

CVE-2005-3181 affects the Linux kernel audit subsystem when CONFIG_AUDITSYSCALL is enabled. The flaw arises from using an incorrect function to free names_cache memory, preventing proper tracking by AUDITSYSCALL and causing a memory leak that can lead to local denial of service via memory exhaust...

CVE-2005-3323

CVE-2005-3323 affects docutils in Zope: Zope 2.6, Zope 2.7 before 2.7.8, and Zope 2.8 before 2.8.2 are vulnerable. The flaw allows remote attackers to include arbitrary files via include directives in RestructuredText functionality. Root cause: insecure handling of include directives in docutils ...

CVE-2010-1451

CVE-2010-1451 affects the SPARC build of the Linux kernel prior to 2.6.33, where TSB I-TLB load handling in arch/sparc/kernel/tsb.S fails to correctly obtain the _PAGE_EXEC_4U bit, resulting in an incompletely implemented non-executable stack. This could allow context-dependent local attackers to...

CVE-2011-3617

CVE-2011-3617 affects Tahoe-LAFS versions 1.3.0 through 1.8.2. The vulnerability could allow unauthorized users to delete immutable files in some cases. The provided connected documents do not specify the exact root cause, affected component details, exploitation method, or remediation patches. N...

CVE-2011-4360

CVE-2011-4360 affects MediaWiki prior to 1.17.1. The issue allows remote attackers to obtain the titles of restricted pages by issuing a sequence of requests involving the curid or oldid parameters. Impact: partial confidentiality exposure on restricted content. The connection across multiple sou...

CVE-2013-7020

FFmpeg/libav is affected by CVE-2013-7020 due to improper enforcement of bit-count/colorspace constraints in read_header (FFV1 decoding), allowing an out-of-bounds read and potential DoS. Connected advisories (Debian DSA-3027-1, Gentoo GLSA 201603-06, Mandriva MDVSA-2014:227) confirm FFV1-related...

CVE-2014-9037

CVE-2014-9037 affects WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1, where an improper PHP dynamic type comparison for an MD5 hash could allow remote attackers to obtain access to an account idle since 2008. Root cause: faulty MD5 hash comparison in PHP dyna...

CVE-2016-10729

CVE-2016-10729 concerns Amanda 3.3.1 where the runtar setuid root binary does not validate extra arguments after --create, enabling a local attacker with backup privileges to perform command injection as root. The vulnerability is a local privilege escalation with potential full compromise of a c...

CVE-2016-4082

CVE-2016-4082 affects the GSM CBCH dissector in Wireshark (epan/dissectors/packet-gsm_cbch.c). The root cause is using the wrong variable to index an array, which enables an attacker to trigger out-of-bounds access and cause a denial of service (crash) with a crafted packet. Affected versions: Wi...

CVE-2016-4441

CVE-2016-4441 affects QEMU’s 53C9X FSC emulation (esp.c) where get_cmd() can write out-of-bounds to the information transfer buffer due to DMA length not being checked. This local-privilege vulnerability can crash the QEMU process or allow potential arbitrary code execution via crafted SCSI comma...

CVE-2017-15642

CVE-2017-15642 : SoX 14.4.2 contains a Use-After-Free vulnerability in lsx_aiffstartread (aiff.c) triggered by a malformed AIFF file. The issue arises when processing AIFF input, potentially enabling denial of service or memory corruption as described in vulnerability records. The provided source...