CVE-2022-31780

CVE-2022-31780 affects Apache Traffic Server (8.0.0–9.1.2) with an improper input validation in HTTP/2 frame handling that can allow request smuggling. Connected advisories confirm fixes: Debian DLA-3279 (trafficserver 8.0.2+ds-1+deb10u7) and Fedora updates (trafficserver 9.1.3-1.fc36/1.fc35). Op...

CVE-2022-41837

CVE-2022-41837 affects the OpenImageIO library (OpenImageIO v2.4.4.2) with an out-of-bounds write in OpenImageIO::add_exif_item_to_spec, causing stack-based memory corruption when processing crafted exif metadata. Exploitation requires a malicious image/file. Public advisories confirm remediation...

CVE-2022-43600

OpenImageIO CVE-2022-43600 affects OpenImageIO v2.4.4.2. The issue is in IFFOutput::close() where xmax=0xFFFF and TypeDesc::UINT16 can trigger a heap buffer overflow, potentially leading to denial of service or arbitrary code execution. Debian and GLSA advisories also reference related OpenImageI...

CVE-2023-40462

The CVE-2023-40462 issue affects Sierra Wireless AirLink ALEOS ACEManager (4.16 and earlier). The root cause is inadequate input sanitization during authentication, potentially enabling a DoS on ACEManager with a restart recovery within about ten seconds. The connected documents confirm the vulne...

CVE-2024-26781

CVE-2024-26781: In the Linux kernel, a deadlock could occur in Multipath TCP (mptcp) subflow diagnostic code due to a circular locking dependency reported by Syzbot/Eric. The issue involves tcp_diag and related subflow diagnostic paths (tcp_diag_put_ulp, tcp_diag_get_aux, inet_diag_dump_icsk) and...

CVE-2025-38501

CVE-2025-38501 concerns the Linux kernel component ksmbd. The vulnerability arises from allowing repeated connections from the same IP, which can exhaust the server’s maximum connections and deny access to normal clients. The connected sources indicate a patch was applied to limit repeated connec...

CVE-1999-0405

The CVE-1999-0405 entry concerns a buffer overflow in the lsof utility that allows local users to obtain root privileges. The connected documents corroborate the issue as a buffer overflow in lsof, with references from Red Hat and CVE listings. No detailed vendor/version information, exploit scen...

CVE-2002-1581

CVE-2002-1581 : A directory traversal vulnerability exists in Mailreader.com’s nph-mr.cgi, affecting versions 2.3.20 through 2.3.31. An attacker can use .. and a null byte (%00) in the configLanguage parameter to view arbitrary files on the server. The issue is confirmed in multiple sources (NVD ...

CVE-2005-3106

CVE-2005-3106 is a Linux kernel race condition affecting thread management when memory mappings are shared (CLONE_VM). The issue can lead to a local denial of service via deadlock, e.g., by triggering a core dump or waiting-for-exec scenarios. Connected advisories confirm this CVE across multiple...

CVE-2006-5868

CVE-2006-5868 corresponds to multiple buffer overflows in ImageMagick (notably in SGI image decoding) that could allow arbitrary code execution when a user opens or processes a crafted SGI image. The CVE affects ImageMagick 6.0.x before 6.0.6.2 and 6.2.x before 6.2.4.5. Connected advisories (Debi...

CVE-2007-0778

CVE-2007-0778 affects Mozilla Firefox (and related Gecko-based browsers like SeaMonkey) prior to 1.5.0.10 / 2.x before 2.0.0.2, and SeaMonkey before 1.0.8. The vulnerability stems from the page cache implementation, where hash collisions can cause page data to be appended to the wrong cache entry...

CVE-2007-1366

CVE-2007-1366 concerns QEMU 0.8.2. The vulnerability allows a local attacker to crash the guest VM by abusing the aam instruction divisor operand (e.g., aam 0x0), causing a divide-by-zero. The likely impact is a VM crash (partial availability) with no explicit remote code execution detailed in th...

CVE-2007-5365

CVE-2007-5365 : OpenBSD 4.0–4.2 dhcpd and similar ISC dhcp-2 based implementations suffer a stack-based buffer overflow in cons_options (options.c) that can allow remote attackers to execute code or cause daemon crashes by sending a DHCP request with a max message size smaller than the minimum IP...

CVE-2008-2663

Ruby 1.8.4 and earlier (and 1.8.5-p231, 1.8.6-p230, 1.8.7-p22) are affected by an integer overflow in rb_ary_store that can enable context-dependent arbitrary code execution or a denial of service (CVE-2008-2663). The MiracleLinux, Oracle Linux, and Red Hat advisories in the connected documents r...

CVE-2010-4578

CVE-2010-4578 affects Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343. The issue is due to improper cursor handling that can lead to stale pointers, enabling remote attackers to cause a denial of service and possibly other unspecified impact via unknown vectors. Exploitation det...

CVE-2013-2486

Wireshark 1.8.x before 1.8.6 is affected by CVE-2013-2486. The vulnerability exists in the dissect_diagnosticrequest function of the REsource LOcation And Discovery (RELOAD) dissector (epan/dissectors/packet-reload.c), where an incorrect integer data type enables a remote attacker to cause a deni...

CVE-2013-2856

CVE-2013-2856 is a use-after-free vulnerability in Chromium/Google Chrome prior to version 27.0.1453.110, with impact described as denial of service or possibly other unspecified effects via vectors related to input handling. Connected documents confirm this CVE is among several Chromium/Chrome i...

CVE-2013-2865

CVE-2013-2865 refers to Multiple unspecified vulnerabilities in Google Chrome/Chromium before version 27.0.1453.110, with impact including denial of service or possibly other effects via unknown vectors. The connected Debian security advisories specify fixed package versions (27.0.1453.110-1~deb7...

CVE-2013-3557

The CVE-2013-3557 issue affects the ASN.1 BER dissector in Wireshark: the dissect_ber_choice function does not properly initialize a variable, enabling a remote attacker to crash the application via a malformed packet (DoS). Impact is a denial of service (application crash) without confidentialit...

CVE-2013-3561

Wireshark 1.8.x vulnerable to CVE-2013-3561 (and related in the list) due to multiple integer overflows in the Websocket, MySQL, and ETCH dissectors when processing malformed packets. Affected version: Wireshark 1.8.x prior to 1.8.7. Impact: remote denial of service via loop or application crash....

CVE-2013-6475

CVE-2013-6475 affects cups-filters (pdftoopvp filter). The connected advisories describe memory handling vulnerabilities in cups-filters that could allow a remote attacker to execute arbitrary code via crafted input, due to issues in the pdftoopvp filter (and related filters like urftopdf). Impac...

CVE-2013-7370

CVE-2013-7370 concerns node-connect before 2.8.1, which has an XSS vulnerability in the Sencha Labs Connect middleware. Affected component: node-connect (Sencha Connect middleware). Root cause/impact: XSS in the middleware could reflect or inject script via user input; exploitation status is not ...

CVE-2014-0021

Chrony before 1.29.1 is vulnerable to a traffic amplification issue in the cmdmon protocol (CVE-2014-0021). The flaw allows an attacker to exploit chronyd over the network, potentially abusing the protocol’s cmdmon handling. Public records across OSV and Nessus references affirm this CVE affectin...

CVE-2014-8104

Summary: CVE-2014-8104 affects OpenVPN 2.x (various branches) and allows a remote authenticated attacker to cause a denial of service (server crash) by sending a small control channel packet. The root cause is improper handling of too-small control channel packets. Impact: denial of service with ...

CVE-2014-8542

CVE-2014-8542 affects FFmpeg’s libavcodec/utils.c, where a codec ID was omitted during alignment enforcement, enabling a remote attacker to trigger a denial of service via crafted JV data (out-of-bounds access) and potentially other impacts. The initial description specifies FFmpeg prior to 2.4.2...

CVE-2014-9035

CVE-2014-9035 is an XSS in WordPress “Press This” exposed before WordPress 4.0.1 (affecting 3.7.x–3.9.x and 4.x prior to 4.0.1). Exploitation could allow remote attackers to inject arbitrary scripts via unspecified vectors. Public references in Debian/ Mageia/ Fedora advisories and OpenVAS/Nessus...

CVE-2014-9274

UnRTF (a command-line RTF converter) is affected by CVE-2014-9274 and CVE-2014-9275. The issues include out-of-bounds memory accesses and other crashes that could lead to denial of service or, potentially, arbitrary code execution when processing crafted RTF files (e.g., malformed color tables). ...

CVE-2014-9706

The CVE concerns Dulwich (Python Git implementation). The vulnerability exists in the function build_index_from_tree (index.py) in Dulwich versions prior to 0.9.9, where a commit with a directory path starting with .git/ is not handled correctly during checkout, allowing remote command execution....

CVE-2015-0861

The CVE-2015-0861 entry affects trytond (models in modelstorage.py) across multiple series (3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, 3.8.x before 3.8.1). The vulnerability allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields by...

CVE-2015-1165

CVE-2015-1165 affects RT (Request Tracker) 3.8.8 through RT 4.x up to 4.0.23 and 4.2.x up to 4.2.10, enabling remote attackers to obtain sensitive RSS feed URLs and ticket data via unspecified vectors. The connected advisories/documents indicate multiple vendors released security updates to addre...

CVE-2015-3146

The CVE-2015-3146 issue affects libssh up to version 0.6.4 (pre-0.6.5). The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY handlers in package_cb.c do not properly validate state, enabling a crafted SSH packet to trigger a NULL pointer dereference and cause a denial of service (crash). Affected ...

CVE-2015-8852

Varnish 3.x before 3.0.7 is vulnerable to HTTP header injection/response smuggling due to a header line terminated by a CR in combination with multiple Content-Length headers. Exploitation could enable HTTP response splitting and related impacts. Remediation: upgrade to Varnish 3.0.7 or newer (as...

CVE-2016-2367

CVE-2016-2367 affects Pidgin (MXIT handling). It describes an information leak/out-of-bounds read triggered by an invalid avatar size, which could cause DoS or memory data exposure if the avatar is shared. The connected documents reiterate this CVE in various Nessus/EulerOS notes but do not provi...

CVE-2016-4422

Summary: CVE-2016-4422 affects libpam-sshauth (pam_sshauth.c). A weakness in pam_sm_authenticate could allow a local attacker to bypass authentication or gain root privileges by abusing system users. Affected component: libpam-sshauth, specifically the pam_sshauth PAM module. Root cause / impact ...

CVE-2017-0362

The CVE-2017-0362 entry concerns MediaWiki before 1.28.1, 1.27.2, and 1.23.16. The flaw is that the action “Mark all pages visited” on the watchlist does not require a CSRF token, which could allow unauthorized state-changing requests. The connected records confirm the affected versions and the m...

CVE-2017-0364

CVE-2017-0364 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16. The flaw is that Special:Search can redirect the user to any interwiki link, enabling potential misleading redirects within the wiki ecosystem. Connected sources corroborate the same vulnerability description across multiple fe...

CVE-2017-14528

CVE-2017-14528 is a vulnerability in ImageMagick where TIFFSetProfiles in coders/tiff.c has incorrect assumptions about LibTIFF TIFFGetField return values, allowing a crafted TIFF file to trigger a denial of service (use-after-free after an invalid TIFFSetField) and crash the application. Affecte...

CVE-2017-14926

CVE-2017-14926 concerns Poppler 0.59.0 and older, where a NULL pointer dereference in AnnotRichMedia::Content::Content (Annot.cc) can be triggered by a crafted PDF file. The vulnerability is tied to the Annot Rich Media content path and may allow a crash or denial of service when parsing maliciou...

CVE-2017-15568

CVE-2017-15568 affects Redmine prior to 3.2.8, 3.3.x prior to 3.3.5, and 3.4.x prior to 3.4.3. A cross-site scripting vulnerability exists in app/helpers/application_helper.rb triggered by a multi-value field during rendering of issue history. Connected sources confirm the issue and provide remed...

CVE-2017-15573

CVE-2017-15573 affects Redmine before 3.2.6 and 3.3.x before 3.3.3. The flaw is an XSS in wiki content caused by mishandling of markup in wiki pages. In practice, an attacker can inject scripts via wiki content (e.g., attachments with SVG) to execute in a victim's browser. The connected sources i...

CVE-2017-15924

CVE-2017-15924 affects shadowsocks-libev (ss-manager) on version 3.1.0. Improper parsing of a JSON configuration request received via 127.0.0.1 UDP traffic enables local command injection through shell metacharacters in add_server, build_config, and construct_command_line pathways, potentially al...

CVE-2017-15955

CVE-2017-15955 affects bchunk (BinChunker) 1.2.0/1.2.1. The issue causes a crash/denial of service when processing malformed CUE (.cue) files, described as an Access violation near NULL on destination operand. Several connected advisories confirm the vulnerability and provide affected versions an...

CVE-2017-16927

CVE-2017-16927 affects xrdp (sesman) where scp_v0s_accept in sesman/libscp/libscp_v0.c uses an untrusted integer as a write length, enabling local denial of service via buffer overflow. Public records (Fedora 26/27, SUSE, Mageia) show this was fixed by upstream in 0.9.4 (and later 0.9.5 in some b...

CVE-2017-17669

CVE-2017-17669 : Exiv2 0.26 contains a heap-based buffer over-read in Exiv2::Internal::PngChunk::keyTXTChunk (pngchunk_int.cpp). A crafted PNG file can trigger a remote denial of service. Public advisories (Ubuntu USN-3852-1, Debian DLA-3265, Red Hat/Nessus entries) confirm Exiv2 0.26 as affected...

CVE-2017-6304

Consolidated details show CVE-2017-6304 affects ytnef/libytnef prior to 1.9.1. The root cause is an out-of-bounds read/write issue in decoding TNEF data (noted as patch 7 of 9), leading to potential crashes/DoS. OpenVAS/Fedora/Ubuntu advisories mention multiple related CVEs in libytnef with heap/...

CVE-2017-7655

CVE-2017-7655 affects the Eclipse Mosquitto broker/library (versions 1.0–1.4.15). The root cause is a Null Dereference in the Mosquitto library, which could cause crashes for applications using the library and lead to a denial of service. Public advisories note remediation via upgrading Mosquitto...

CVE-2017-8812

CVE-2017-8812 affects MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2. The vulnerability allows remote attackers to inject the > character via the id attribute of a headline due to insufficient input validation. Public advisories indicate fixes in upstream versions: 1.2...

CVE-2018-12565

CVE-2018-12565 affects Linaro LAVA prior to 2018.5.post1. The root cause is parsing user data with yaml.load() instead of yaml.safe_load(), which can enable remote code execution. Documents do not provide a confirmed exploit method or patches within the LAVA project; no explicit remediation versi...

CVE-2018-12584

CVE-2018-12584 affects reSIProcate’s SIP stack, specifically ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx. When TLS is enabled, it allows remote attackers to trigger a heap overflow/denial of service and potentially execute arbitrary code. Multiple connected advisories note ...

CVE-2018-14447

CVE-2018-14447 affects libConfuse up to version 3.2.1, with an out-of-bounds read in trim_whitespace() within lexer.l. The vulnerability is traced to the library’s handling in libConfuse 3.2.1, as reflected by NVD metrics (CVSSv2 base 6.8; CVSSv3 base 8.8). Fedora advisories document a fix to 3.2...