CVE-2017-6306

The CVE-2017-6306 issue concerns ytnef/libytnef prior to version 1.9.1 with a directory traversal vulnerability in the SanitizeFilename function (settings.c). Connected advisories confirm this CVE is addressed in later releases: Fedora 30 updated ytnef to 1.9.3; Mageia reports updated libytnef pa...

CVE-2017-6800

CVE-2017-6800 affects ytnef with libytnef up to version 1.9.1, where handling of LONG data types may trigger a heap-based buffer over-read in MAPIPrint() inside libytnef. Multiple advisories (Mageia MGASA-2017-0174, Ubuntu USN-4615-1, Fedora FEDORA-2019-7d7083b8be, OSV entries) document the same ...

CVE-2017-8356

CVE-2017-8356 : In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c is vulnerable to a crafted SUN file that can cause a denial of service via a memory leak. Public references in the initial document describe the issue as a memory leak/DoS vector in the SUN image handling path of ImageMagi...

CVE-2017-8810

CVE-2017-8810 affects MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2. On private wikis, login failures reveal whether a username exists, enabling account enumeration and brute-force attempts via multiple requests. Remediation across sources recommends upgrading to fixed v...

CVE-2017-9780

CVE-2017-9780 affects Flatpak prior to 0.8.7. A third‑party app repository could supply malicious apps with files that have insecure permissions (e.g., setuid or world‑writeable), causing deployed files to run with elevated privileges or write to world‑writable locations. The worst‑case involves ...

CVE-2018-5808

CVE-2018-5808 affects LibRaw prior to version 0.18.9, where an issue in the find_green() function (internal/dcraw_common.cpp) can cause a stack-based buffer overflow and potentially allow arbitrary code execution. Public material in connected documents confirms LibRaw as the affected component an...

CVE-2018-7436

CVE-2018-7436 affects FreeXL prior to 1.0.5 and is caused by a heap-based buffer over-read in the parse_SST function. Impact details in sources indicate vulnerability could lead to partial confidentiality/integrity/availability concerns; CVSS data from NVD shows base scores of 6.8 (2.0) and 8.8 (...

CVE-2019-12483

CVE-2019-12483 concerns GPAC 0.7.1, with a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener (odf/ipmpx_code.c in libgpac.a), as demonstrated by MP4Box. The connected sources (OSV entries, Debian/NASL notes) consistently describe this vulnerability and its pre...

CVE-2019-14587

CVE-2019-14587 is a logic issue in EDK II (firmware) that may allow an unauthenticated user to cause a denial of service via adjacent access. The connected sources (EulerOS/E DK2 advisories and NVD listing) confirm the vulnerability is associated with EDK II and is cataloged as CVE-2019-14587, wi...

CVE-2020-13230

CVE-2020-13230 affects Cacti prior to 1.2.11, where disabling a user account does not immediately revoke permissions (e.g., log viewing). Multiple connected sources (Ubuntu USN-5214-1, Debian DLA-2965-1, OpenVAS entries, and NASL plugins) document this vulnerability and list affected releases and...

CVE-2020-15866

CVE-2020-15866 affects mruby up to version 2.1.2-rc, due to a heap-based buffer overflow in the mrb_yield_with_class function in vm.c caused by incorrect VM stack handling. The overflow can be triggered via the stack_copy path. This vulnerability is classified with very high severity (CVSSv3.1: C...

CVE-2020-22041

CVE-2020-22041 is a Denial-of-Service vulnerability in FFmpeg 4.2 caused by a memory leak in the av_buffersrc_add_frame_flags function within buffersrc. Connected advisories (Debian DLA-2818, Debian/Ubuntu security bulletins, and related Nessus/OpenVAS entries) confirm the issue affects FFmpeg 4....

CVE-2020-28604

CGAL CGAL-5.1.1 contains multiple code-execution vulnerabilities in the Nef polygon-parsing: specifically, an out-of-bounds read and type confusion in PM_io_parser::read_hedge() (e->set_next()) that attackers can trigger with crafted input. Debian's security advisories list CVE-2020-28604 amon...

CVE-2020-28621

Summary (CVE-2020-28621) CGAL CGAL-5.1.1’s Nef polygon-parsing has memory access vulnerabilities that can yield out-of-bounds reads and type confusion, potentially enabling code execution when processing specially crafted input. The CVE-2020-28621 vector is an out-of-bounds read in SNC_io_parser:...

CVE-2020-28627

CVE-2020-28627 affects CGAL libcgal CGAL-5.1.1. The Nef polygon-parsing code contains an out-of-bounds read in SNC_io_parser.h (read_volume) that can lead to type confusion and remote code execution when processing crafted input. Exploitation status is not documented in the provided sources; no i...

CVE-2021-21855

CVE-2021-21855 concerns the GPAC multimedia framework, specifically the MPEG-4 decoding path in library v1.0.1. The issue arises from unchecked addition arithmetic that can trigger an integer overflow, leading to a heap-based buffer overflow and memory corruption. An attacker can exploit this by ...

CVE-2021-45098

CVE-2021-45098 affects Suricata (pre-6.0.4). Core issue: an attacker can bypass HTTP-based signature checks by spoofing an RST TCP packet with random md5header options, injecting an RST ACK after the 3‑way handshake, leading the server to deliver HTTP responses for forbidden URLs without triggeri...

CVE-2022-43592

CVE-2022-43592 affects OpenImageIO (notably OpenImageIO v2.4.4.2). The issue is an information disclosure in the DPXOutput::close() path: a specially crafted ImageOutput object can leak heap data. Available connected advisories confirm the root cause in DPXOutput::close() and classify the impact ...

CVE-2022-46338

CVE-2022-46338 affects the Linux tool g810-led (version 0.4.2) for Logitech Gx10 keyboards. The issue stems from a udev rule that makes device nodes world-readable and writable, enabling any local process to read traffic from connected keyboards (potentially exposing sensitive data). Publicly doc...

CVE-2023-24755

CVE-2023-24755 concerns libde265 v1.0.10, where a NULL pointer dereference in the function put_weighted_pred_8_fallback (fallback-motion.cc) allows a crafted input file to trigger a Denial of Service. Public advisories confirm the issue and list v1.0.11 as the fix (e.g., Debian DLA-3352-1). Remed...

CVE-2025-2291

CVE-2025-2291 affects PgBouncer; the flaw arises because auth_query does not respect the PostgreSQL VALID UNTIL expiry, allowing login with an already expired password. The issue impacts versions older than the fixed release (upstream 1.24.1 line; many advisories reference versions < 1.24.1-1 or

CVE-2025-37962

CVE-2025-37962 affects the Linux kernel’s ksmbd code path, specifically a memory leak in parse_lease_state. The root cause: when the created lease context bounds check fails, the function returns NULL without freeing the previously allocated lease_ctx_info, causing a memory leak. The patch fixes ...

CVE-2025-38048

CVE-2025-38048 is a Linux kernel data-race in virtio_ring related to event_triggered. The issue, observed as a KCSAN data race between virtqueue_enable_cb_delayed() and virtqueue_disable_cb_split/packed() when the event_triggered flag is read/written, could cause an unreliable hint about interrup...

CVE-2025-38273

CVE-2025-38273 affects the Linux kernel TIPC net subsystem. The root cause was a refcount handling issue where get_net() could be invoked on a network namespace already being destroyed, triggering a use-after-free warning when a TIPC discovery timer fires during namespace cleanup. The fix replace...

CVE-2025-38313

CVE-2025-38313 affects the Linux kernel in the bus: fsl-mc path. The issue is a double-free of mc_dev on error paths when the MC device is a DPRC, where mc_bus is allocated and mc_dev points to one field; only the mc_bus should be freed in that path. The description notes a fix/workaround impleme...

CVE-2025-38451

CVE-2025-38451 affects the Linux kernel’s md/md-bitmap code. The issue caused a GPF in bitmap_get_stats() when handling external or internal bitmaps due to missing super-block validation. The fix adds a super-block existence check for both internal and external cases, preventing the non-canonical...

CVE-2025-38515

CVE-2025-38515 concerns a race in the Linux kernel’s DRM scheduler. The description states a small race between drm/sched spsc_queue_push and the run-job worker, where spsc_queue_push may return not-first while the worker has idled due to the job count reaching zero. The consequence is that job s...

CVE-2025-4215

CVE-2025-4215 affects gorhill uBlock Origin up to 1.63.3b16, specifically the UI function currentStateChanged in src/js/1p-filters.js. The issue is described as an inefficient regular expression pattern used in filters, which can be triggered remotely and carries a relatively high attack complexi...

CVE-2000-0508

This CVE concerns rpc.lockd in Red Hat Linux 6.1 and 6.2, where remote attackers can cause a denial of service by sending a malformed request. The available connected documents corroborate the affected component (rpc.lockd) and the impact (remote DoS), but do not provide concrete patch versions o...

CVE-2004-0986

The CVE-2004-0986 issue affects iptables before 1.2.11, where under certain conditions the required modules fail to load at system startup, causing firewall rules to not be loaded and leaving the system potentially exposed to remote attackers. Connected advisories (SUSE, Debian DSA-580-1, Ubuntu ...

CVE-2005-2555

CVE-2005-2555 affects the Linux kernel 2.6.x line. The issue is that socket policy access is not properly restricted to users with the CAP_NET_ADMIN capability, potentially allowing local users to perform unauthorized activities. The vulnerability is associated with the IPv4 and IPv6 socket glue ...

CVE-2011-1930

CVE-2011-1930 affects klibc 1.5.20 and 1.5.21; DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped, enabling a remote attacker to craft a DHCP reply that could execute arbitrary code with the privileges of the process sourcing DHCP options. Multiple advisories (RH, ...

CVE-2012-2947

CVE-2012-2947 affects the IAX2 channel driver in Asterisk: when mohinterpret is enabled, a remote attacker placing a call on hold can crash the daemon (DoS). Affected: Certified Asterisk 1.8.11-cert before 1.8.11-cert2; Asterisk Open Source 1.8.x before 1.8.12.1; Asterisk 10.x before 10.4.1. Root...

CVE-2013-3559

Wireshark 1.8.x before 1.8.7 contains a vulnerability in epan/dissectors/packet-dcp-etsi.c where incorrect integer data types enable a denial of service via a malformed packet. Exploitation can cause integer overflow, heap memory corruption or NULL pointer dereference, and an application crash. T...

CVE-2013-4184

CVE-2013-4184 affects the Perl module Data::UUID from CPAN version 1.219, vulnerable to symlink attacks due to a fragile handling of temporary files. Multiple connected sources show vendor advisories and distro patches (e.g., Fedora advisory FEDORA-2024-3da8ed5be3 and Mageia/OpenVAS notices) conf...

CVE-2013-4251

CVE-2013-4251 affects the SciPy package SciPy before 0.12.1, where the scipy.weave component can create insecure temporary directories. The issue stems from the handling of /tmp and current directories, enabling an attacker to place or execute code via a directory that may lack proper permissions...

CVE-2015-0258

Collabtive up to version 2.0/2.1 had an avatar-upload input validation flaw in manageuser.php that could enable an authenticated user to upload crafted files (.php3/.php4/.php5/.phtml) and execute arbitrary code. Public advisories (USN-4590-1, DLA-2125-1) and Debian/Nessus entries describe fixes ...

CVE-2015-5315

Affected software: wpa_supplicant 2.x (before 2.6). Vulnerability: In eap_pwd_process (eap_peer/eap_pwd.c), the reassembly buffer size is not validated for the final EAP-pwd fragment when EAP-pwd is enabled in a network profile, enabling remote attackers to cause denial of service (process termin...

CVE-2015-7984

CVE-2015-7984 cites CSRF vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 that allow remote attackers to hijack administrator authentication to perform requests executing arbitrary commands, SQL queries, or PHP code (via cmd, ...

CVE-2016-1572

CVE-2016-1572 concerns a flaw in mount.ecryptfs_private.c (ecryptfs-utils) where mount destination filesystem types are not validated, enabling a local user to gain privileges by mounting over a nonstandard filesystem (example: /proc/$pid). The vulnerability has been discussed in multiple advisor...

CVE-2016-2373

CVE-2016-2373 affects the Pidgin MXIT protocol handling. Across connected sources, a malicious server or user can send specially crafted MXIT data (e.g., invalid mood) that can trigger a crash through a null pointer dereference or an out-of-bounds read/write in the MXIT processing, depending on t...

CVE-2016-6833

CVE-2016-6833 affects QEMU: a use-after-free in vmxnet3_io_bar0_write within hw/net/vmxnet3.c can be exploited by a local privileged guest to crash the QEMU process (DoS). Public docs confirm the issue, with multiple vendors releasing fixes (Debian/Ubuntu/SUSE advisories and IBM PowerKVM bulletin...

CVE-2017-14928

CVE-2017-14928 : In Poppler 0.59.0, there is a NULL pointer dereference in AnnotRichMedia::Configuration::Configuration (Annot.cc) triggered by a crafted PDF document. Connected documents corroborate the CVE in the Poppler family but do not provide additional technical details, impact, or mitigat...

CVE-2017-16664

CVE-2017-16664 affects the Open Ticket Request System (OTRS). The flaw is a code injection in Kernel/System/Spelling.pm that allows an authenticated remote attacker to execute shell commands as the webserver user via URL manipulation. Affected versions are OTRS 5 before 5.0.24, 4 before 4.0.26, a...

CVE-2017-18122

CVE-2017-18122 describes a signature-validation bypass in SimpleSAMLphp (up to 1.14.16) where a Service Provider using SAML 1.1 would treat as valid an unsigned SAML response that contains more than one signed assertion, as long as at least one signature is valid. This can let an attacker imperso...

CVE-2017-5128

CVE-2017-5128 affects the Chromium/ Blink WebGL component: a heap overflow in WebGL prior to Chrome 62.0.3202.62. The flaw can be triggered by a crafted HTML page, enabling remote code execution with high impact if exploited. Affected product/version: Chromium browser/WebGL before 62.0.3202.62. R...

CVE-2017-5522

MapServer is affected by a stack-based buffer overflow (CVE-2017-5522) that can be triggered via WFS get feature requests. The vulnerability affects MapServer releases prior to 6.0.6, 6.2.x prior to 6.2.4, 6.4.x prior to 6.4.5, and 7.0.x prior to 7.0.4. Exploitation is remote over the network and...

CVE-2018-16515

Matrix Synapse prior to 0.33.3.1 is vulnerable to remote spoofing of events due to improper transaction and event signature validation. The issue affects Matrix Synapse kernels where an attacker could spoof events and possibly trigger unspecified impacts. Remediation is to upgrade to version 0.33...

CVE-2019-14466

CVE-2019-14466 – GOsa vulnerability in GOsa 2.7.5.2 The GOsa_Filter_Settings cookie is vulnerable to PHP object/injection via unserialize, allowing a remote authenticated attacker to perform file deletions in the context of the web server user by crafting the cookie value. The affected component ...

CVE-2019-7653

CVE-2019-7653 affects the Debian python-rdflib-tools package (RDFlib 4.2.2). The Debian 4.2.2 wrappers can load Python modules from the current working directory, because python -m searches this directory, demonstrated by rdf2dot; issue is tied to the debian/scripts directory. This enables potent...