CVE-2020-11729

CVE-2020-11729 affects DAViCal Andrew's Web Libraries (AWL) up to version 0.60. Long-term session cookies are not generated securely, enabling a brute-force-style session hijack. Debian/DLA-2178-1 fixes these issues by updating awl to 0.60-1+deb10u1 (and earlier 0.57-1+deb9u1). If deploying AWL, ...

CVE-2020-22027

FFmpeg 4.2 contains a heap-based Buffer Overflow in deflate16 (libavfilter/vf_neighbor.c), CVE-2020-22027, which can lead to memory corruption. Connected advisories (Debian/Ubuntu/SUSE) indicate fixes by updating FFmpeg packages to patched versions; no exploitation details are provided in the sou...

CVE-2020-22030

CVE-2020-22030 is a confirmed vulnerability in FFmpeg 4.2 affecting the function crossfade_samples_fltp in libavfilter/af_afade.c. It describes a heap-based Buffer Overflow that may cause memory corruption and potentially other consequences. The available connected documents consistently referenc...

CVE-2020-28606

CGAL CGAL-5.1.1 contains CVE-2020-28606 and related CVEs affecting the Nef polygon parsing, including an out-of-bounds read in PM_io_parser.h that can lead to code execution. Debian LTS and Gentoo advisories indicate fixes in CGAL packages: Debian fixed in 4.13-1+deb10u1; Gentoo GLSA-202305-34 re...

CVE-2020-28612

CVE-2020-28612 is a code-execution vulnerability in the Nef polygon-parsing path of CGAL CGAL-5.1.1. The issue is an out-of-bounds read in SNC_io_parser::read_vertex() (vh->svertices_begin()), which an attacker can trigger with a crafted file to execute arbitrary code. Public documents confirm...

CVE-2020-28620

CVE-2020-28620 is a code-execution vulnerability in CGAL 5.1.1’s Nef polygon-parsing code. The issue stems from out-of-bounds reads in the Nef_S2/SNC_io_parser.h read_edge() path (eh->center_vertex()), which can be triggered by specially crafted input to CGAL’s Nef parsing functionality. Publi...

CVE-2020-28631

Summary : CVE-2020-28631 is a code-execution vulnerability in CGAL libcgal CGAL-5.1.1, arising from the Nef polygon-parsing path. An attacker-supplied file can trigger an out-of-bounds read and type confusion, enabling potentially arbitrary code execution. The advisory text references specific oo...

CVE-2021-32567

CVE-2021-32567 is an HTTP/2 input-validation vulnerability in Apache Traffic Server that can cause denial of service. Affected are ATS versions 7.0.0–7.1.12, 8.0.0–8.1.1, and 9.0.0–9.0.1. The core issue is improper input validation in HTTP/2 handling, leading to server DOS conditions. The connect...

CVE-2021-35063

Suricata is affected: versions before 5.0.7 and 6.x before 6.0.3 are impacted by a “critical evasion” vulnerability (CVE-2021-35063). The issue is described in multiple feeds, with patches released: Suricata 5.0.7 and 6.0.3 (and newer) address the vulnerability. Affected components are the Surica...

CVE-2021-37530

CVE-2021-37530 affects fig2dev (up to 3.28a) with a denial-of-service due to a segfault in readpics.c open_stream. Multiple connected sources consistently describe a segfault in open_stream that can crash fig2dev when processing crafted input, causing a DoS. The core vulnerable component is the o...

CVE-2021-3910

CVE-2021-3910 concerns Cloudflare’s CFRpki/OctoRPKI where processing a repository ROA that is just a NUL character can cause a crash. Connected sources confirm this vulnerability in CFRpki/OctoRPKI (e.g., GO-2022-0251 and OSV/NVD copies) and note the issue arises from an invalid ROA payload. The ...

CVE-2021-40403

CVE-2021-40403 affects Gerbv: pick-and-place rotation parsing in Gerbv 2.7.0 and development fork (and 2.8.0 fork) allows memory contents disclosure due to missing initialization of a structure. A crafted Gerber file can trigger the leak. Debian/Ubuntu advisories indicate fixed packages (e.g., 2....

CVE-2022-40318

CVE-2022-40318 (FRR bgpd) : In FRR up to 8.4, FRR’s bgp_open_option_parse() mishandles an option of type 0xff (Extended Length from RFC 9072), with boundary checks that don’t account for reading 3 bytes, causing denial of service via assertion failure and bgpd restart, or an out-of-bounds read. A...

CVE-2023-24752

libde265 v1.0.10 is affected by a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function (sse-motion.cc), enabling DoS via a crafted input file. This CVE is documented in multiple sources (e.g., Debian DLA-3352-1) and is addressed by upgrading to a fixed release (e.g., libde2...

CVE-2025-38319

CVE-2025-38319 affects the Linux kernel’s DRM/AMD/PP path. The vulnerability arises because atomctrl_initialize_mc_reg_table() and atomctrl_initialize_mc_reg_table_v2_2() do not validate the return value of smu_atom_get_data_table(); if that call fails to obtain vram_info and returns NULL, a NULL...

CVE-2025-38385

Summary: CVE-2025-38385 affects the Linux kernel in the LAN78xx USB Ethernet driver, where a WARN can be triggered during USB disconnect when NAPI is still enabled. Root cause (per provided data): In the disconnect path, netif_napi_del() was redundantly called even though unregister_netdev() hand...

CVE-2025-38474

CVE-2025-38474 affects the Linux kernel USB Sierra network driver. The issue arises from not verifying that the driver’s third USB endpoint is an interrupt input, since the code only checked for three endpoints and bulk in/out. The fix “rectifies the omission” by validating the endpoint type. Ups...

CVE-2025-40300

The CVE-2025-40300 issue affects the Linux kernel’s x86/vmscape mitigation. The vulnerability arises from insufficient branch predictor isolation between a guest and a userspace hypervisor, which is mitigated by conditionally issuing an IBPB after VMexit and before returning to userspace. The fix...

CVE-2000-0511

CVE-2000-0511 concerns CUPS (Common Unix Printing System) 1.04 and earlier, where a remote attacker can cause a denial of service by sending a CGI POST request. The vulnerability affects the CUPS CGI handling path and is described as a remote DoS with no confidentiality or integrity impact, and p...

CVE-2001-0834

CVE-2001-0834 affects the htsearch CGI in ht://Dig (htdig)

CVE-2005-3106

CVE-2005-3106 is a Linux kernel race condition affecting thread management when memory mappings are shared (CLONE_VM). The issue can lead to a local denial of service via deadlock, e.g., by triggering a core dump or waiting-for-exec scenarios. Connected advisories confirm this CVE across multiple...

CVE-2007-5729

CVE-2007-5729 describes a local heap-based buffer overflow in the NE2000 emulator of QEMU 0.8.2 triggered by writing Ethernet frames with a size larger than the MTU to EN0_TCNT, leading to potential arbitrary code execution via the slirp library. Connected advisories link this issue to related NE...

CVE-2007-6418

CVE-2007-6418 (Debian - dspam): The Debian-provided CRON script for dspam uses the MySQL backend and exposes the dspam password on the command line, enabling a local attacker to read the password and potentially access the dspam database (e-mails, etc.). The issue is fixed in Debian etch via dspa...

CVE-2010-2520

CVE-2010-2520 is a heap-based buffer overflow in FreeType 2.x (before 2.4.0) in the Ins_IUP path of truetype/ttinterp.c when TrueType bytecode is enabled. It can cause a crash or remote code execution via a crafted font. Affected products align with FreeType 2.x deployments; multiple advisories r...

CVE-2012-0049

OpenTTD is affected by CVE-2012-0049: before version 1.1.5, servers can be subjected to a slow-read denial-of-service that prevents clients from joining. The description specifies the vulnerability as a network-based DoS with a slow read attack; no remediation/version information is provided in t...

CVE-2012-2751

CVE-2012-2751 relates to ModSecurity prior to 2.6.6 when used with PHP. The issue arises in how single quotes in Content-Disposition are handled inside multipart/form-data requests, allowing remote attackers to bypass filtering rules and potentially perform XSS. The vulnerability is noted to exis...

CVE-2012-4048

Wireshark contains a vulnerability CVE-2012-4048 in the PPP dissector that can trigger a denial of service (invalid pointer dereference and application crash) via a crafted PPP packet (demonstrated by a usbmon dump). Affected branches are Wireshark 1.4.x prior to 1.4.14, 1.6.x prior to 1.6.9, and...

CVE-2012-6684

CVE-2012-6684 affects the RedCloth Ruby library (versions up to 4.2.9). The vulnerability arises because input is not properly sanitized, allowing a remote attacker to inject arbitrary JavaScript via a javascript: URI in Textile-to-HTML output, resulting in cross-site scripting (XSS). Public disc...

CVE-2013-2900

The CVE-2013-2900 vulnerability affects Google Chrome prior to 29.0.1547.57 on Windows, caused by the FilePath::ReferencesParent function in files/file_path.cc misparsing directory components consisting only of dots and whitespace, enabling remote directory-traversal via crafted directory names. ...

CVE-2013-6645

CVE-2013-6645 is a use-after-free in Chromium’s OnWindowRemovingFromRootWindow (web_contents_view_aura.cc) that can allow user-assisted remote denial of service via speech-input related vectors. Public references show Chromium/Chromium-based browsers were fixed in updates: openSUSE notes Chromium...

CVE-2014-0021

Chrony before 1.29.1 is vulnerable to a traffic amplification issue in the cmdmon protocol (CVE-2014-0021). The flaw allows an attacker to exploit chronyd over the network, potentially abusing the protocol’s cmdmon handling. Public records across OSV and Nessus references affirm this CVE affectin...

CVE-2014-3165

The CVE-2014-3165 issue affects the Blink WebSockets implementation (WorkerThreadableWebSocketChannel.cpp) in Google Chrome/Chromium prior to 36.0.1985.143 and is a use-after-free vulnerability. It could allow a remote attacker to cause a denial of service or other impact via long object lifetime...

CVE-2014-8104

Summary: CVE-2014-8104 affects OpenVPN 2.x (various branches) and allows a remote authenticated attacker to cause a denial of service (server crash) by sending a small control channel packet. The root cause is improper handling of too-small control channel packets. Impact: denial of service with ...

CVE-2014-9036

CVE-2014-9036 is a cross-site scripting (XSS) vulnerability in WordPress versions prior to 3.7.5, 3.8.x prior to 3.8.5, 3.9.x prior to 3.9.3, and 4.x prior to 4.0.1. A crafted Cascading Style Sheets (CSS) token sequence in a post can be used by remote attackers to inject arbitrary script/HTML. Th...

CVE-2014-9706

The CVE concerns Dulwich (Python Git implementation). The vulnerability exists in the function build_index_from_tree (index.py) in Dulwich versions prior to 0.9.9, where a commit with a directory path starting with .git/ is not handled correctly during checkout, allowing remote command execution....

CVE-2014-9713

CVE-2014-9713 affects the OpenLDAP package in Debian where the default slapd configuration allows an authenticated remote user to modify their own permissions and other user attributes via unspecified vectors. The issue stems from a unsafe/default access-control setup, enabling attribute manipula...

CVE-2015-1261

CVE-2015-1261 is tied to Google Chrome before 43.0.2357.65 across desktop and Android platforms, where the browser failed to properly restrict a URL fragment during the construction of a page-info popup. This allowed remote attackers to spoof the URL bar or deliver misleading popup content via cr...

CVE-2015-1381

CVE-2015-1381 affects Privoxy prior to 3.0.23, with multiple vulnerabilities in pcrs.c that can cause a denial of service (segmentation fault or memory consumption) via unspecified vectors. The connected sources consistently tie this CVE to Privoxy 3.0.23 as the fixed version and mention related ...

CVE-2015-2318

The CVE-2015-2318 entry concerns the Mono TLS stack prior to version 3.12.1. The issue, called SMACK SKIP-TLS, arises from missing handshake state validation, enabling man-in-the-middle attackers to exploit message skipping and impersonate clients. Affected software: Mono’s TLS implementation (pr...

CVE-2016-1655

CVE-2016-1655 refers to a use-after-free vulnerability in Chromium/Google Chrome related to extensions, caused by frame removal during callback execution. Affected product line is Google Chrome/Chromium around version 50.0.2661.75. Impact per the sources: potential denial of service and other uns...

CVE-2016-1694

CVE-2016-1694 affects Google Chrome before 51.0.2704.63, where browser/browsing_data/browsing_data_remover.cc deletes HPKP pins during cache cleanup. This undermines certificate pinning, enabling remote attackers to spoof websites by presenting a valid certificate from any trusted CA. The public ...

CVE-2016-5107

CVE-2016-5107 affects QEMU when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation, permitting local privileged guests to trigger a denial of service via an out-of-bounds read in megasas_lookup_frame. The IBM PowerKVM advisory and Debian/openSUSE/NASL records corroborate fixes in QEMU/pow...

CVE-2017-0364

CVE-2017-0364 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16. The flaw is that Special:Search can redirect the user to any interwiki link, enabling potential misleading redirects within the wiki ecosystem. Connected sources corroborate the same vulnerability description across multiple fe...

CVE-2017-0925

GitLab Enterprise Edition 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint, leading to disclosure of plaintext passwords. The connected sources confirm the affected product and the root cause (inadequate credential protection in ...

CVE-2017-15573

CVE-2017-15573 affects Redmine before 3.2.6 and 3.3.x before 3.3.3. The flaw is an XSS in wiki content caused by mishandling of markup in wiki pages. In practice, an attacker can inject scripts via wiki content (e.g., attachments with SVG) to execute in a victim's browser. The connected sources i...

CVE-2017-2899

CVE-2017-2899 affects Blender, specifically the TIFF loading path that can overflow an integer and trigger a buffer overflow in Blender 2.78c when processing a crafted TIFF file via the sequencer. The vulnerability could allow code execution in the application's context. Public details identify t...

CVE-2017-2900

Blender 2.78c contains an exploitable integer overflow in the PNG loading functionality. A crafted PNG file can trigger a buffer overflow and allow code execution in the Blender process, via the sequencer. Mitigation: update to Blender 2.79b or newer (fixed in downstream advisories; multiple dist...

CVE-2017-4967

CVE-2017-4967 : RabbitMQ and RabbitMQ for PCF have multiple forms in the management UI vulnerable to XSS across 3.4.x, 3.5.x, and 3.6.x prior to 3.6.9 (and related PCF versions). The root cause is unsanitized input in management UI forms, enabling cross-site scripting. Impact is limited to the ma...

CVE-2017-6308

CVE-2017-6308 affects tnef prior to 1.4.13, with multiple issues including integer overflows that can lead to heap overflows in memory allocation wrappers. The Mageia advisory explicitly lists CVE-2017-6308 among a set of related flaws (6307–6310) affecting the tnef codebase. Public advisories (F...

CVE-2018-12249

Summary of CVE-2018-12249 : The issue is in mruby 1.4.1, causing a NULL pointer dereference in function mrb_class_real due to improper support for the object literal "BasicObject" in class.c . This is a vulnerability in the mruby interpreter affecting code paths that interact with BasicObject sem...