CVE-2017-16664

CVE-2017-16664 affects the Open Ticket Request System (OTRS). The flaw is a code injection in Kernel/System/Spelling.pm that allows an authenticated remote attacker to execute shell commands as the webserver user via URL manipulation. Affected versions are OTRS 5 before 5.0.24, 4 before 4.0.26, a...

CVE-2017-5128

CVE-2017-5128 affects the Chromium/ Blink WebGL component: a heap overflow in WebGL prior to Chrome 62.0.3202.62. The flaw can be triggered by a crafted HTML page, enabling remote code execution with high impact if exploited. Affected product/version: Chromium browser/WebGL before 62.0.3202.62. R...

CVE-2017-5522

MapServer is affected by a stack-based buffer overflow (CVE-2017-5522) that can be triggered via WFS get feature requests. The vulnerability affects MapServer releases prior to 6.0.6, 6.2.x prior to 6.2.4, 6.4.x prior to 6.4.5, and 7.0.x prior to 7.0.4. Exploitation is remote over the network and...

CVE-2018-16515

Matrix Synapse prior to 0.33.3.1 is vulnerable to remote spoofing of events due to improper transaction and event signature validation. The issue affects Matrix Synapse kernels where an attacker could spoof events and possibly trigger unspecified impacts. Remediation is to upgrade to version 0.33...

CVE-2019-14466

CVE-2019-14466 – GOsa vulnerability in GOsa 2.7.5.2 The GOsa_Filter_Settings cookie is vulnerable to PHP object/injection via unserialize, allowing a remote authenticated attacker to perform file deletions in the context of the web server user by crafting the cookie value. The affected component ...

CVE-2019-7653

CVE-2019-7653 affects the Debian python-rdflib-tools package (RDFlib 4.2.2). The Debian 4.2.2 wrappers can load Python modules from the current working directory, because python -m searches this directory, demonstrated by rdf2dot; issue is tied to the debian/scripts directory. This enables potent...

CVE-2020-11729

CVE-2020-11729 affects DAViCal Andrew's Web Libraries (AWL) up to version 0.60. Long-term session cookies are not generated securely, enabling a brute-force-style session hijack. Debian/DLA-2178-1 fixes these issues by updating awl to 0.60-1+deb10u1 (and earlier 0.57-1+deb9u1). If deploying AWL, ...

CVE-2020-22027

FFmpeg 4.2 contains a heap-based Buffer Overflow in deflate16 (libavfilter/vf_neighbor.c), CVE-2020-22027, which can lead to memory corruption. Connected advisories (Debian/Ubuntu/SUSE) indicate fixes by updating FFmpeg packages to patched versions; no exploitation details are provided in the sou...

CVE-2020-22030

CVE-2020-22030 is a confirmed vulnerability in FFmpeg 4.2 affecting the function crossfade_samples_fltp in libavfilter/af_afade.c. It describes a heap-based Buffer Overflow that may cause memory corruption and potentially other consequences. The available connected documents consistently referenc...

CVE-2020-28606

CGAL CGAL-5.1.1 contains CVE-2020-28606 and related CVEs affecting the Nef polygon parsing, including an out-of-bounds read in PM_io_parser.h that can lead to code execution. Debian LTS and Gentoo advisories indicate fixes in CGAL packages: Debian fixed in 4.13-1+deb10u1; Gentoo GLSA-202305-34 re...

CVE-2020-28631

Summary : CVE-2020-28631 is a code-execution vulnerability in CGAL libcgal CGAL-5.1.1, arising from the Nef polygon-parsing path. An attacker-supplied file can trigger an out-of-bounds read and type confusion, enabling potentially arbitrary code execution. The advisory text references specific oo...

CVE-2021-32567

CVE-2021-32567 is an HTTP/2 input-validation vulnerability in Apache Traffic Server that can cause denial of service. Affected are ATS versions 7.0.0–7.1.12, 8.0.0–8.1.1, and 9.0.0–9.0.1. The core issue is improper input validation in HTTP/2 handling, leading to server DOS conditions. The connect...

CVE-2021-35063

Suricata is affected: versions before 5.0.7 and 6.x before 6.0.3 are impacted by a “critical evasion” vulnerability (CVE-2021-35063). The issue is described in multiple feeds, with patches released: Suricata 5.0.7 and 6.0.3 (and newer) address the vulnerability. Affected components are the Surica...

CVE-2021-37530

CVE-2021-37530 affects fig2dev (up to 3.28a) with a denial-of-service due to a segfault in readpics.c open_stream. Multiple connected sources consistently describe a segfault in open_stream that can crash fig2dev when processing crafted input, causing a DoS. The core vulnerable component is the o...

CVE-2021-40403

CVE-2021-40403 affects Gerbv: pick-and-place rotation parsing in Gerbv 2.7.0 and development fork (and 2.8.0 fork) allows memory contents disclosure due to missing initialization of a structure. A crafted Gerber file can trigger the leak. Debian/Ubuntu advisories indicate fixed packages (e.g., 2....

CVE-2022-40318

CVE-2022-40318 (FRR bgpd) : In FRR up to 8.4, FRR’s bgp_open_option_parse() mishandles an option of type 0xff (Extended Length from RFC 9072), with boundary checks that don’t account for reading 3 bytes, causing denial of service via assertion failure and bgpd restart, or an out-of-bounds read. A...

CVE-2023-24752

libde265 v1.0.10 is affected by a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function (sse-motion.cc), enabling DoS via a crafted input file. This CVE is documented in multiple sources (e.g., Debian DLA-3352-1) and is addressed by upgrading to a fixed release (e.g., libde2...

CVE-2024-26781

CVE-2024-26781: In the Linux kernel, a deadlock could occur in Multipath TCP (mptcp) subflow diagnostic code due to a circular locking dependency reported by Syzbot/Eric. The issue involves tcp_diag and related subflow diagnostic paths (tcp_diag_put_ulp, tcp_diag_get_aux, inet_diag_dump_icsk) and...

CVE-2025-38385

Summary: CVE-2025-38385 affects the Linux kernel in the LAN78xx USB Ethernet driver, where a WARN can be triggered during USB disconnect when NAPI is still enabled. Root cause (per provided data): In the disconnect path, netif_napi_del() was redundantly called even though unregister_netdev() hand...

CVE-2025-38474

CVE-2025-38474 affects the Linux kernel USB Sierra network driver. The issue arises from not verifying that the driver’s third USB endpoint is an interrupt input, since the code only checked for three endpoints and bulk in/out. The fix “rectifies the omission” by validating the endpoint type. Ups...

CVE-2025-40300

The CVE-2025-40300 issue affects the Linux kernel’s x86/vmscape mitigation. The vulnerability arises from insufficient branch predictor isolation between a guest and a userspace hypervisor, which is mitigated by conditionally issuing an IBPB after VMexit and before returning to userspace. The fix...

CVE-2000-0511

CVE-2000-0511 concerns CUPS (Common Unix Printing System) 1.04 and earlier, where a remote attacker can cause a denial of service by sending a CGI POST request. The vulnerability affects the CUPS CGI handling path and is described as a remote DoS with no confidentiality or integrity impact, and p...

CVE-2001-0834

CVE-2001-0834 affects the htsearch CGI in ht://Dig (htdig)

CVE-2005-3106

CVE-2005-3106 is a Linux kernel race condition affecting thread management when memory mappings are shared (CLONE_VM). The issue can lead to a local denial of service via deadlock, e.g., by triggering a core dump or waiting-for-exec scenarios. Connected advisories confirm this CVE across multiple...

CVE-2007-5729

CVE-2007-5729 describes a local heap-based buffer overflow in the NE2000 emulator of QEMU 0.8.2 triggered by writing Ethernet frames with a size larger than the MTU to EN0_TCNT, leading to potential arbitrary code execution via the slirp library. Connected advisories link this issue to related NE...

CVE-2007-6418

CVE-2007-6418 (Debian - dspam): The Debian-provided CRON script for dspam uses the MySQL backend and exposes the dspam password on the command line, enabling a local attacker to read the password and potentially access the dspam database (e-mails, etc.). The issue is fixed in Debian etch via dspa...

CVE-2010-2520

CVE-2010-2520 is a heap-based buffer overflow in FreeType 2.x (before 2.4.0) in the Ins_IUP path of truetype/ttinterp.c when TrueType bytecode is enabled. It can cause a crash or remote code execution via a crafted font. Affected products align with FreeType 2.x deployments; multiple advisories r...

CVE-2012-0049

OpenTTD is affected by CVE-2012-0049: before version 1.1.5, servers can be subjected to a slow-read denial-of-service that prevents clients from joining. The description specifies the vulnerability as a network-based DoS with a slow read attack; no remediation/version information is provided in t...

CVE-2012-2751

CVE-2012-2751 relates to ModSecurity prior to 2.6.6 when used with PHP. The issue arises in how single quotes in Content-Disposition are handled inside multipart/form-data requests, allowing remote attackers to bypass filtering rules and potentially perform XSS. The vulnerability is noted to exis...

CVE-2012-4048

Wireshark contains a vulnerability CVE-2012-4048 in the PPP dissector that can trigger a denial of service (invalid pointer dereference and application crash) via a crafted PPP packet (demonstrated by a usbmon dump). Affected branches are Wireshark 1.4.x prior to 1.4.14, 1.6.x prior to 1.6.9, and...

CVE-2012-6684

CVE-2012-6684 affects the RedCloth Ruby library (versions up to 4.2.9). The vulnerability arises because input is not properly sanitized, allowing a remote attacker to inject arbitrary JavaScript via a javascript: URI in Textile-to-HTML output, resulting in cross-site scripting (XSS). Public disc...

CVE-2013-2900

The CVE-2013-2900 vulnerability affects Google Chrome prior to 29.0.1547.57 on Windows, caused by the FilePath::ReferencesParent function in files/file_path.cc misparsing directory components consisting only of dots and whitespace, enabling remote directory-traversal via crafted directory names. ...

CVE-2013-3561

Wireshark 1.8.x vulnerable to CVE-2013-3561 (and related in the list) due to multiple integer overflows in the Websocket, MySQL, and ETCH dissectors when processing malformed packets. Affected version: Wireshark 1.8.x prior to 1.8.7. Impact: remote denial of service via loop or application crash....

CVE-2013-6645

CVE-2013-6645 is a use-after-free in Chromium’s OnWindowRemovingFromRootWindow (web_contents_view_aura.cc) that can allow user-assisted remote denial of service via speech-input related vectors. Public references show Chromium/Chromium-based browsers were fixed in updates: openSUSE notes Chromium...

CVE-2014-0021

Chrony before 1.29.1 is vulnerable to a traffic amplification issue in the cmdmon protocol (CVE-2014-0021). The flaw allows an attacker to exploit chronyd over the network, potentially abusing the protocol’s cmdmon handling. Public records across OSV and Nessus references affirm this CVE affectin...

CVE-2014-3165

The CVE-2014-3165 issue affects the Blink WebSockets implementation (WorkerThreadableWebSocketChannel.cpp) in Google Chrome/Chromium prior to 36.0.1985.143 and is a use-after-free vulnerability. It could allow a remote attacker to cause a denial of service or other impact via long object lifetime...

CVE-2014-8104

Summary: CVE-2014-8104 affects OpenVPN 2.x (various branches) and allows a remote authenticated attacker to cause a denial of service (server crash) by sending a small control channel packet. The root cause is improper handling of too-small control channel packets. Impact: denial of service with ...

CVE-2014-9036

CVE-2014-9036 is a cross-site scripting (XSS) vulnerability in WordPress versions prior to 3.7.5, 3.8.x prior to 3.8.5, 3.9.x prior to 3.9.3, and 4.x prior to 4.0.1. A crafted Cascading Style Sheets (CSS) token sequence in a post can be used by remote attackers to inject arbitrary script/HTML. Th...

CVE-2014-9706

The CVE concerns Dulwich (Python Git implementation). The vulnerability exists in the function build_index_from_tree (index.py) in Dulwich versions prior to 0.9.9, where a commit with a directory path starting with .git/ is not handled correctly during checkout, allowing remote command execution....

CVE-2014-9713

CVE-2014-9713 affects the OpenLDAP package in Debian where the default slapd configuration allows an authenticated remote user to modify their own permissions and other user attributes via unspecified vectors. The issue stems from a unsafe/default access-control setup, enabling attribute manipula...

CVE-2015-1261

CVE-2015-1261 is tied to Google Chrome before 43.0.2357.65 across desktop and Android platforms, where the browser failed to properly restrict a URL fragment during the construction of a page-info popup. This allowed remote attackers to spoof the URL bar or deliver misleading popup content via cr...

CVE-2015-1381

CVE-2015-1381 affects Privoxy prior to 3.0.23, with multiple vulnerabilities in pcrs.c that can cause a denial of service (segmentation fault or memory consumption) via unspecified vectors. The connected sources consistently tie this CVE to Privoxy 3.0.23 as the fixed version and mention related ...

CVE-2015-2318

The CVE-2015-2318 entry concerns the Mono TLS stack prior to version 3.12.1. The issue, called SMACK SKIP-TLS, arises from missing handshake state validation, enabling man-in-the-middle attackers to exploit message skipping and impersonate clients. Affected software: Mono’s TLS implementation (pr...

CVE-2016-1655

CVE-2016-1655 refers to a use-after-free vulnerability in Chromium/Google Chrome related to extensions, caused by frame removal during callback execution. Affected product line is Google Chrome/Chromium around version 50.0.2661.75. Impact per the sources: potential denial of service and other uns...

CVE-2016-1694

CVE-2016-1694 affects Google Chrome before 51.0.2704.63, where browser/browsing_data/browsing_data_remover.cc deletes HPKP pins during cache cleanup. This undermines certificate pinning, enabling remote attackers to spoof websites by presenting a valid certificate from any trusted CA. The public ...

CVE-2016-5107

CVE-2016-5107 affects QEMU when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation, permitting local privileged guests to trigger a denial of service via an out-of-bounds read in megasas_lookup_frame. The IBM PowerKVM advisory and Debian/openSUSE/NASL records corroborate fixes in QEMU/pow...

CVE-2017-0925

GitLab Enterprise Edition 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint, leading to disclosure of plaintext passwords. The connected sources confirm the affected product and the root cause (inadequate credential protection in ...

CVE-2017-2899

CVE-2017-2899 affects Blender, specifically the TIFF loading path that can overflow an integer and trigger a buffer overflow in Blender 2.78c when processing a crafted TIFF file via the sequencer. The vulnerability could allow code execution in the application's context. Public details identify t...

CVE-2017-2900

Blender 2.78c contains an exploitable integer overflow in the PNG loading functionality. A crafted PNG file can trigger a buffer overflow and allow code execution in the Blender process, via the sequencer. Mitigation: update to Blender 2.79b or newer (fixed in downstream advisories; multiple dist...

CVE-2017-4967

CVE-2017-4967 : RabbitMQ and RabbitMQ for PCF have multiple forms in the management UI vulnerable to XSS across 3.4.x, 3.5.x, and 3.6.x prior to 3.6.9 (and related PCF versions). The root cause is unsanitized input in management UI forms, enabling cross-site scripting. Impact is limited to the ma...