CVE-2021-27219

GLib’s g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64-bit to 32-bit, affecting GNOME GLib up to 2.66.6 and 2.67.x up to 2.67.3. This can lead to memory corruption. Concrete impact is described across multiple advisories (glib2.0) and vendor bulletins; miti...

CVE-2022-38178

CVE-2022-38178 affects BIND 9 DNS resolver. Attackers can spoof responses with a malformed EdDSA signature to trigger a memory leak, gradually exhausting memory and potentially crashing named. Connected advisories (Brocade SANnav postings with CVE-2022-38178, and ALAS/AmazonLinux entries) confirm...

CVE-2023-41900

CVE-2023-41900 affects Jetty: versions 9.4.21–9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication through OpenIdAuthenticator with a nested LoginService; if the LoginService revokes an already authenticated user, the session may still be treated as authenticated, potentially allowi...

CVE-2018-1000805

Paramiko (Python Paramiko library) versions 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 are affected by an Incorrect Access Control vulnerability in the SSH server that can result in remote code execution. The issue allows a malicious client to trick the Paramiko server into treating an una...

CVE-2018-14883

CVE-2018-14883 is a heap-based buffer over-read in exif_thumbnail_extract (exif.c) of PHP. Affected are PHP 5.6.37 and 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. Some sources note potential remote code execution in vulnerable scenarios. Remediation is to upgrade to the fixe...

CVE-2025-4598

The CVE-2025-4598 entry concerns a race condition in systemd-coredump that can let a local attacker read a crashed SUID process’s core dump. Affected component is systemd and its coredump handling; root cause is a kill-and-replace race where the kernel recycles a PID before systemd-coredump can a...

CVE-2019-1010305

CVE-2019-1010305 affects libmspack: the chmd_read_headers() function in the library can cause a buffer overflow when opening a specially crafted CHM file, with information disclosure as the impact. Exploitation requires opening the crafted CHM; the advisory notes a fixed version after commit 2f08...

CVE-2019-5827

CVE-2019-5827 is an out-of-bounds read in the SQLite library leveraged via Chromium/Chrome. Public records in Debian and related advisories indicate this affects Chromium/Chrome components and was mitigated by upgrading the sqlite3 library (e.g., to versions in Chromium security updates and Debia...

CVE-2020-27218

CVE-2020-27218 affects Eclipse Jetty 9.4.x (9.4.0.RC0–9.4.34.v20201102), 10.x (10.0.0.alpha0–beta2), and 11.x (11.0.0.alpha0–beta2). When GZIP request body inflation is enabled and requests from different clients are multiplexed on one connection, an attacker who can send a body that is received ...

CVE-2016-9131

CVE-2016-9131 concerns ISC BIND and is triggered by improper handling of responses during recursion. A remote attacker can send a malformed RTYPE ANY response to cause an assertion failure and named process exit, i.e., a denial-of-service. Public advisories confirm affected versions across multip...

CVE-2023-21939

CVE-2023-21939 affects Oracle Java SE and GraalVM Enterprise Edition Swing component across several versions (e.g., Java 8u361, 11.0.18, 17.0.6, 20; GraalVM EE 20.3.9/21.3.5/22.3.1). It is an easily exploitable, unauthenticated remote issue over HTTP that can lead to unauthorized update/insert/de...

CVE-2020-14314

CVE-2020-14314 is a memory out-of-bounds read in the Linux kernel’s ext3/ext4 directory handling that can crash the system on a local user. Public advisories confirm the issue affects the kernel and is tied to ext3/ext4 filesystem access with broken indexing, contributing to availability impact. ...

CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2019-11459

The CVE-2019-11459 entry affects the Evince TIFF backend. The root cause is that tiff_document_render() and tiff_document_get_thumbnail() did not properly handle errors returned by TIFFReadRGBAImageOriented(), which can lead to disclosure of uninitialized memory when processing certain TIFF image...

CVE-2022-23806

CVE-2022-23806 affects Go's crypto/elliptic IsOnCurve, which can incorrectly return true when a big.Int value is not a valid field element. Impact: potential impact to availability and integrity as implied by the vulnerability description. Root cause is an out-of-spec check in IsOnCurve for inval...

CVE-2020-10663

As per the connected advisories, CVE-2020-10663 is an Unsafe Object Creation vulnerability in the json gem (through 2.2.0) used with Ruby 2.4–2.6. Parsing certain JSON can coerce the interpreter into creating arbitrary objects, with effects depending on the application. Impact is application-depe...

CVE-2021-36221

CVE-2021-36221 is a race-condition in Go’s net/http/httputil ReverseProxy that can panic when an ErrAbortHandler abort occurs, as documented in multiple advisories. Affected component: Go standard library HTTP/ReverseProxy handling. Impact: potential denial of service via engine panic; availabili...

CVE-2022-23960

CVE-2022-23960 affects Arm Cortex and Neoverse processors. It is a Spectre-BHB side-channel issue where shared branch history in the Branch History Buffer can influence mispredicted branches, enabling potential information disclosure through cache allocation. Documents note mitigations include de...

CVE-2018-8897

CVE-2018-8897 covers a Linux kernel issue where a mishandled debug exception after MOV SS/POP SS can lead to a local privilege escalation or kernel crash. The vulnerability arises from how the kernel handles stack-switch sequencing and interrupts, potentially enabling privilege escalation in some...

CVE-2019-11034

CVE-2019-11034 (and related CVEs) affects PHP’s EXIF extension. The issue is a heap-based/over-read when processing certain files that allows reading beyond allocated buffers via exif_process_IFD_TAG (and related functions such as exif_iif_add_value). Affected PHP branches: 7.1.x < 7.1.28, 7.2...

CVE-2021-0129

CVE-2021-0129 is associated with BlueZ (Linux Bluetooth stack). The connected Debian advisory notes that CVE-2021-0129 involves improper access control during pairing, enabling impersonation of the initiating device and potential information disclosure. Other sources in the connected data referen...

CVE-2021-21409

The CVE concerns Netty’s HTTP/2 codec (io.netty:netty-codec-http2) where, before version 4.1.61.Final, a Content-Length check can be bypassed when a single Http2HeaderFrame with endStream set to true is used. This enables HTTP request smuggling if the request is proxied and translated to HTTP/1.1...

CVE-2021-28950

CVE-2021-28950 affects the Linux kernel FUSE path: the issue is in fs/fuse/fuse_i.h and causes a stall on the CPU when a retry loop keeps selecting the same bad inode. A patch-level fix exists in kernel releases up to 5.11.8 and later (addresses the underlying bad-inode handling in FUSE); some so...

CVE-2020-14556

CVE-2020-14556 and related CVEs (e.g., 14577, 14578, 14579, 14581, 14583, 14593, 14621, 14664) pertain to Oracle Java SE/OpenJDK/OpenJDK-derived runtimes across multiple components (Libraries, JSSE, 2D, JAXP, JavaFX, etc.). The primary 2020 issue affects Java SE and Java SE Embedded on various ve...

CVE-2020-26558

CVE-2020-26558: Bluetooth Core 2.1–5.2 Passkey entry/mitm reflection vulnerability. Nearby attacker could identify the Passkey during pairing by reflecting public key and authentication evidence, enabling completion of authenticated pairing with the correct Passkey. Astra Linux bulletin repeats t...

CVE-2021-42392

CVE-2021-42392 affects the H2 database (org.h2.util.JdbcUtils.getConnection) where a crafted driver class name and JDBC URL can trigger remote code execution, notably via the H2 Console. Exploitation possible through JNDI-driven URL resolution to LDAP/RMI servers; impact is remote code execution ...

CVE-2019-11487

The CVE-2019-11487 issue affects the Linux kernel prior to 5.1-rc5, enabling a page->_refcount overflow that can cause use-after-free when large RAM (≈140 GiB) is present, notably under FUSE workloads (fs/fuse/dev.c, mm/gup.c, mm/hugetlb.c, etc.). Affects multiple kernel components (fs/fuse, f...

CVE-2019-11884

The CVE-2019-11884 entry affects the Linux kernel's HIDP path. It concerns the do_hidp_sock_ioctl in net/bluetooth/hidp/sock.c, where a HIDPCONNADD command can leak data from kernel stack memory due to a name field not properly ending with a NUL terminator. The vulnerability allows local attacker...

CVE-2021-39200

CVE-2021-39200 affects WordPress where, in affected versions, output data from the wp_die() function can be leaked under certain conditions (potentially including nonces), leading to information disclosure. The issue has been patched in WordPress 5.8.1 and older affected versions were addressed v...

CVE-2012-4929

CVE-2012-4929 (CRIME) : The vulnerability stems from TLS/SSL compression, where the TLS protocol (1.2 and earlier) used by browsers (e.g., Mozilla Firefox, Google Chrome, Qt) can encrypt compressed data without hiding the length of unencrypted data. This length leakage enables a MITM attacker to ...

CVE-2021-37159

CVE-2021-37159 affects the Linux kernel driver hso_free_net_device() in drivers/net/usb/hso.c. The code calls unregister_netdev without verifying NETREG_REGISTERED, causing use-after-free and double-free scenarios. Affected kernel versions include up to 5.13.4; the issue is mitigated by upgrading...

CVE-2018-10933

CVE-2018-10933 affects libssh, specifically the server-side state machine, where versions prior to 0.7.6 and 0.8.4 allow an unauthenticated attacker to create channels and gain unauthorized access. The underlying issue is an authentication bypass in the server code, reported by multiple vendors a...

CVE-2020-14350

CVE-2020-14350 affects PostgreSQL extensions that do not safely use search_path during installation scripts. The root cause is improper handling of search_path, enabling an attacker with sufficient privileges to trick an administrator into executing a crafted script during installation or update ...

CVE-2021-22235

CVE-2021-22235 affects Wireshark, specifically the DNP dissector. The vulnerability causes a crash (DoS) via crafted DNP packets or crafted capture files. Affected ranges include Wireshark 3.2.0–3.2.14 and 3.4.0–3.4.6. Remediation as documented in connected sources varies by package release: Arch...

CVE-2011-0762

The CVE-2011-0762 issue affects vsftpd prior to a patched release, where the vsftpd GET path handling of glob patterns in STAT commands is flawed. The function vsf_filename_passes_filter in ls.c can be triggered by crafted glob expressions in STAT commands across multiple FTP sessions, enabling r...

CVE-2016-0718

CVE-2016-0718 is evidenced in connected Apple documents as part of the Expat (libexpat) updates applied to OS X El Capitan and iTunes-related components. The Expat/libexpat entry notes that processing XML can trigger vulnerabilities in affected builds, with CVE-2016-0718 specifically associated w...

CVE-2019-11046

Summary (CVE-2019-11046) : PHP versions affected are 7.2.x below 7.2.26, 7.3.x below 7.3.13, and 7.4.0. The vulnerability is in the bcmath extension where a string containing characters identified as numeric by the OS but not ASCII digits can cause reading beyond allocated space, potentially disc...

CVE-2019-19527

CVE-2019-19527 is a use-after-free vulnerability in the Linux kernel caused by a malformed interaction with a malicious USB device in the hiddev.c driver (drivers/hid/usbhid). Affected releases are Linux kernels prior to 5.2.10. The impact, as indicated in the CVE entry, includes potential compro...

CVE-2017-8314

Kodi 17.1 and earlier are affected by a Directory Traversal in the Zip Extraction built-in function, allowing arbitrary file writes when processing a ZIP subtitle file. The exploitation path involves a specially crafted subtitle ZIP, which can write files to disk with the privileges of the Kodi p...

CVE-2022-23990

CVE-2022-23990 affects Expat (libexpat) before 2.4.4. The issue is an integer overflow in doProlog, leading to denial of service and potential exploitation. Advisories from AlmaLinux and Amazon Linux indicate remediation via upgrading expat to a fixed version (e.g., Expats newer than 2.4.4; ALAS ...

CVE-2024-52316

CVE-2024-52316 is an Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat uses a custom Jakarta Authentication (JASPIC) ServerAuthContext component that throws during authentication without setting an HTTP failure status, authentication may bypass controls. Affected ranges include ...

CVE-2020-11113

CVE-2020-11113 is a deserialization vulnerability in FasterXML jackson-databind (2.x before 2.9.10.4) tied to typing gadget interactions (notably related to org.apache.openjpa.ee.WASRegistryManagedRuntime). The connected documents corroborate an exploit path via unsafe deserialization leading to ...

CVE-2022-23181

CVE-2022-23181 is a TOCTTOU vulnerability introduced by the fix for CVE-2020-9484 in Apache Tomcat when the server persists sessions using FileStore. It is exploitable by a local attacker who can perform actions with the Tomcat process user privileges. Affected ranges (per the sources) include To...

CVE-2018-13139

CVE-2018-13139 describes a stack-based buffer overflow in the psf_memset function of common.c in libsndfile 1.0.28. The vulnerability can be triggered by the sndfile-deinterleave executable and may allow a remote attacker to cause a denial of service (application crash) or possibly other impact v...

CVE-2019-18397

Summary (CVE-2019-18397) : A heap-based buffer overflow affects FriBidi up to version 1.0.7 in fribidi_get_par_embedding_levels_ex() (lib/fribidi-bidi.c). This can cause denial of service and, in some cases, arbitrary code execution when rendering crafted text with apps using FriBidi for bidirect...

CVE-2019-7221

CVE-2019-7221 is a Use-after-Free in the KVM implementation of the Linux kernel up to version 4.20.5. The vulnerability concerns KVM VMX preemption timer handling and is locally exploitable with low privileges and no user interaction, potentially affecting confidentiality, integrity, and availabi...

CVE-2021-21341

CVE-2021-21341 affects the XStream Java library (unmarshalling) prior to 1.4.16. The vulnerability enables a remote attacker to cause a denial-of-service by consuming 100% CPU time via manipulated input streams. Impact is described as CPU denial of service; no user impact if the recommended Secur...

CVE-2023-21938

CVE-2023-21938 affects Oracle Java SE (Libraries, Swing, JSSE, Hotspot, JavaFX) and Oracle GraalVM Enterprise Edition across multiple components. Affected versions include Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4, 22.3.0. The vulner...

CVE-2024-50302

CVE-2024-50302 affects the Linux kernel HID core by leaving the HID report buffer potentially uninitialized, enabling possible memory leakage via crafted reports. The fixed behavior is to zero-initialize the report buffer at allocation time. Public advisories (including AstraLinux and AlmaLinux f...

CVE-2021-21295

Netty CVE-2021-21295 affects io.netty:netty-codec-http2 prior to 4.1.60.Final, where Content-Length validation can be bypassed when HTTP/2 is downgraded to HTTP/1.1 in proxied scenarios, enabling HTTP request smuggling. The issue occurs when HTTP2MultiplexCodec/Http2FrameCodec are used and Http2S...