CVE-2017-0366

CVE-2017-0366 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16, where a flaw in how default attributes in SVG DTD declarations are handled allows evading SVG filters. Root cause: incorrect SVG filter handling enabling bypass of filters in SVG contexts. Impact: as stated, evading graphical f...

CVE-2017-6302

CVE-2017-6302 is a vulnerability in libytnef (ytnef) where improper bounds checking in decoding TNEF data can lead to heap-related errors. Advisories describe multiple heap overflows and out-of-bounds reads/writes via crafted winmail.dat, potentially enabling crash or exploitation. Affected packa...

CVE-2018-1000037

CVE-2018-1000037 affects MuPDF up to 1.12.0 and earlier, where multiple reachable assertions in MuPDF’s PDF parser can be exploited to cause a denial of service (assert crash) via a crafted file. The issue is tied to the PDF parser’s handling of crafted input, enabling a local impact when process...

CVE-2018-13005

GPAC MP4Box is affected by CVE-2018-13005 due to a heap-based buffer over-read in urn_Read (isomedia/box_code_base.c). Exploitation could crash MP4Box and, in some advisories, may allow arbitrary code execution. The Debian DLA-1432-1 advisory confirms two heap over-read conditions (CVE-2018-13005...

CVE-2018-6359

CVE-2018-6359 affects Ming (libming) up to version 0.4.8. The vulnerability is a use-after-free in the decompileIF function (util/decompile.c) that can cause a denial of service or unspecified impact via a crafted SWF file. Connected advisories from Gentoo GLSA-201904-24 and Mageia/Ma a separate ...

CVE-2019-1010065

The CVE affects The Sleuth Kit (TSK) 4.6.0 and earlier, where an Integer Overflow in tsk/fs/hfs.c (hfs_cat_traverse()) can cause a crash when opening a crafted HFS disk image. Affected component is the fls tool for HFS images, with the crash trace at hfs_dent.c:237 and references to hfs_cat_trave...

CVE-2019-13031

LemonLDAP::NG prior to 1.9.20 is affected by an XML External Entity (XXE) issue when submitting a notification to the notification server. The notification server is, by default, not enabled and has a “deny all” rule, which may limit exposure unless the notification path is reachable. Public docu...

CVE-2020-28625

CVE-2020-28625 concerns CGAL CGAL-5.1.1: in the Nef polygon-parsing code, a specially crafted input file can cause an out-of-bounds read and type confusion in functions such as SNC_io_parser::read_facet() and related paths, potentially enabling code execution. The description in the CVE and linke...

CVE-2020-29394

CVE-2020-29394 affects GENIVI Diagnostic Log and Trace (DLT) - daemon: up to version 2.18.5. A buffer overflow in the function dlt_filter_load of dlt_common.c allows arbitrary code execution because fscanf is used without a length limit. The vulnerability stems from an unchecked input length in t...

CVE-2020-35628

CGAL CVE-2020-35628 is a code-execution vulnerability in the Nef polygon-parsing functionality of CGAL-5.1.1. The issue is an out-of-bounds read in SNC_io_parser::read_sloop() (Nef_S2/SNC_io_parser.h) when processing malicious input, which can trigger code execution. Several connected advisories ...

CVE-2020-8086

The CVE-2020-8086 issue affects Prosody via the mod_auth_ldap and mod_auth_ldap2 Community Modules, where the XMPP address argument to is_admin() is not fully verified. This can allow remote entities to gain admin-only privileges if their username matches a local admin’s username. Public document...

CVE-2021-21837

CVE-2021-21837 affects the GPAC Project on Advanced Content library, specifically the MPEG-4 decoding path in version 1.0.1 . The root cause is an unchecked arithmetic operation that can trigger an integer overflow, leading to a heap-based buffer overflow and memory corruption. Exploitation requi...

CVE-2021-21858

The CVE-2021-21858 entry refers to GPAC Project on Advanced Content library (GPAC) 1.0.1, where multiple exploitable integer overflow vulnerabilities occur in the MPEG-4 decoding code. The root cause is unchecked addition arithmetic that can trigger heap-based buffer overflows, leading to memory ...

CVE-2021-31865

CVE-2021-31865 affects Redmine: arbitrary filename extension upload bypass in Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1. The issue is mitigated by upgrading to Redmine 4.2.1 or later (upstream fixes confirmed by multiple advisories). If upgrading, ensure the target version ...

CVE-2021-36050

CVE-2021-36050 affects Exempi (XMP Toolkit SDK) 2020.1 and earlier, with a heap-based buffer overflow that can lead to arbitrary code execution under the current user when a crafted file is opened (user interaction required). Debian LTS advisories show fixes: 2.5.0-2+deb10u1 for Debian 10 (buster...

CVE-2021-37150

CVE-2021-37150 affects Apache Traffic Server 8.0.0–9.1.2. It is due to improper input validation in header parsing, allowing an attacker to request secure resources. The issue is rated HIGH (CVSS/CA: HIGH; I/N/A impacts as documented). Remediation shown in connected advisories: upgrade to newer T...

CVE-2021-37529

CVE-2021-37529 affects fig2dev up to version 3.28a. The vulnerability is a double-free in the free_stream function of readpics.c (due to freeing memory for long file names), which can lead to denial of service. Various sources (Red Hat, SUSE, OSV entries, and vendor advisories) report this issue ...

CVE-2021-3908

CVE-2021-3908 affects Cloudflare’s CFRpki/OctoRPKI validator. The issue: an unlimited certificate-chain depth allows tree traversal to recurse indefinitely, potentially leading to denial of service or path traversal. Affected component: CFRpki/OctoRPKI (RPKI validator). Root cause: no limit on ce...

CVE-2022-1441

CVE-2022-1441 concerns MP4Box, a component of GPAC-2.0.0. The issue occurs in diST_box_read() where a buffer str is allocated with a fixed length, but data read from bs (and its length) are user-controlled, enabling a buffer overflow. Public advisories reference GPAC-related fixes: Debian DSA-541...

CVE-2022-31779

CVE-2022-31779 affects Apache Traffic Server, where an improper input validation in HTTP/2 header parsing allows request smuggling. Affected: ATS 8.0.0–9.1.2. Impact: potential inconsistency or compromise via crafted requests (I: HIGH, A: NONE, C: NONE). Mitigation in public advisories: Debian fi...

CVE-2025-38500

CVE-2025-38500 : In the Linux kernel, a use-after-free could occur when changing xfrm interface collect_md state via xfrmi_changelink(), because the collect_md interface could be placed in both xfrmi_net and collect_md_xfrmi structures. The fix uses the xi from netdev_priv earlier in the path to ...

CVE-2025-38528

CVE-2025-38528: Linux kernel BPF format-string vulnerability in bprintf-like helpers. Root cause: bpf_bprintf_prepare incorrectly skips the second % in %p% during processing, allowing a risky %\x00 to reach the format decoder. The patch changes behavior to not skip punctuation, causing the invali...

CVE-1999-0381

CVE-1999-0381 affects the syslog utility in super 3.11.6 and other versions, where a buffer overflow allows a local user to gain root privileges. The issue originates from the syslog component, with the impact described as local privilege escalation (root). Available connected documents confirm t...

CVE-2004-0836

CVE-2004-0836 concerns a buffer overflow in the mysql_real_connect function in MySQL 4.x (< 4.0.21) and 3.x (

CVE-2004-0980

The CVE-2004-0980 entry concerns a format string vulnerability in ez-ipupdate.c affecting ez-ipupdate 3.0.10 through 3.0.11b8. When running in daemon mode with certain service types, a remote attacker could cause arbitrary code execution. The provided documents consistently reference vulnerable v...

CVE-2004-1005

CVE-2004-1005 refers to multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier. The initial description notes remote attackers could trigger these issues with unknown impact, and connected advisories (e.g., Debian DSA 639-1, Gentoo GLSA 200502-24, SuSE OpenVAS entries) indicate t...

CVE-2007-2650

CVE-2007-2650 affects ClamAV’s OLE2 parser. A crafted OLE2/DOC can trigger DoS via (1) large property size or (2) an infinite loop in the FAT file block chain, as documented. Connected advisories note ClamAV updates/resolutions to mitigate this issue (example: Debian security advisory DSA 1320-1 ...

CVE-2011-1145

The CVE-2011-1145 entry affects unixODBC: the SQLDriverConnect() function before version 2.2.14p2 may overflow a buffer when a large SAVEFILE value is used in the connection string. Multiple connected sources corroborate the same issue across OS vendors (Red Hat, SUSE, Debian, OSV listings). Publ...

CVE-2012-1798

CVE-2012-1798 affects ImageMagick prior to 6.7.6-3. The TIFFGetEXIFProperties function in coders/tiff.c allows a remote attacker to trigger a denial of service via a crafted EXIF IFD in a TIFF image, causing an out-of-bounds read and crash. The vulnerability context is consistent with reports tha...

CVE-2012-3409

The vulnerability CVE-2012-3409 affects ecryptfs-utils: the suid helper does not restrict mounting filesystems with nosuid,nodev, enabling a possible local privilege escalation. Multiple advisories reference this issue (SUSE CVE-2012-3409; Debian security tracker; Ubuntu-related OSV entries; Fedo...

CVE-2012-3527

TYPO3 upstream advisory CVE-2012-3527 affects TYPO3 4.5.x (before 4.5.19), 4.6.x (before 4.6.12) and 4.7.x (before 4.7.4). The vulnerability allows remote authenticated backend users to unserialize arbitrary objects and potentially execute PHP code via an unspecified parameter due to a missing si...

CVE-2013-2862

CVE-2013-2862: Skia in Chromium-based Chrome before 27.0.1453.110 mishandles GPU acceleration, enabling remote memory corruption DoS and potentially other impact via unknown vectors. Affected: Chromium/Chrome with Skia GPU code prior to 27.0.1453.110. Impact is memory corruption/DoS; no exploitab...

CVE-2013-4412

CVE-2013-4412 affects slim, with a NULL pointer dereference when using the crypt() function from glibc 2.17. The connected records confirm the description across multiple sources (NVD, OSV, Ubuntu/Debian advisories, and vendor entries), but none provide concrete details on affected versions beyon...

CVE-2013-6644

CVE-2013-6644 affects Google Chrome/Chromium prior to 32.0.1700.76 (Windows) and 32.0.1700.77 (Mac/Linux). The entry describes multiple unspecified vulnerabilities that could cause a denial of service or have other impact via unknown vectors. Public advisories in the connected documents show thes...

CVE-2013-6649

CVE-2013-6649 is a use-after-free in Blink’s SVG rendering (RenderSVGImage::paint) affecting Google Chrome before 32.0.1700.102. Publicly referenced advisories confirm the issue resides in the Blink/WebKit SVG implementation and can lead to denial of service or potentially other impact via vector...

CVE-2014-0175

CVE-2014-0175 relates to mcollective with a default password set at installation. Connected sources corroborate an unpatched/default-credential condition affecting mcollective; CVSS metrics indicate high risk (Network, low attack complexity, no authentication required, partial confidentiality/int...

CVE-2014-5026

CVE-2014-5026 is a cross-site scripting (XSS) vulnerability in Cacti, allowing remote authenticated users with console access to inject arbitrary script or HTML through multiple fields (Graph Tree Title, CDEF Name, Data Input Method Name, Host Templates Name, Data Source Title, Graph Title, Graph...

CVE-2014-9656

FreeType contains CVE-2014-9656 (and related 9657/9658/9659/9660/9661/etc. in the same family) vulnerabilities. The primary issue is integer overflow and related memory errors in the font parsing code, notably tt_sbit_decoder_load_image in sfnt/ttsbit.c, which could allow a remote attacker to cau...

CVE-2015-1286

CVE-2015-1286 is a cross-site scripting vulnerability in Google Chrome prior to 44.0.2403.89. It affects the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc, allowing remote attackers to inject arbitrary web script or HTML due to insufficient V...

CVE-2015-1414

CVE-2015-1414 is a known IGMP processing integer‑overflow vulnerability in FreeBSD and kfreebsd-9 prior to certain patch levels (8.4 p24, 9.x before 9.3 p10, 10.0 before p18, 10.1 before p6). A crafted IGMP packet can trigger incorrect size calculation and insufficient memory allocation, leading ...

CVE-2015-2754

CVE-2015-2754 affects the FreeXL library. A vulnerability in FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and potentially execute arbitrary code via a crafted Excel workbook, related to a “premature EOF.” The issue affects FreeXL versions earlier th...

CVE-2015-2788

CVE-2015-2788 refers to multiple stack-based buffer overflows in DBD-Firebird (ib_fill_isqlda in dbdimp.c) affecting versions before 1.19. The issue can be triggered by error conditions related to binding octets to columns, potentially enabling remote impact. Public documents consistently indicat...

CVE-2015-3334

CVE-2015-3334 affects Google Chrome prior to 42.0.2311.90, where the Permissions UI could fail to consistently display the camera permission status (“Media: Allowed by you”). This mismatch could allow remote websites to capture video data from an attached camera without the user realizing permiss...

CVE-2015-9268

CVE-2015-9268 affects Nullsoft Scriptable Install System (NSIS) prior to 2.49, which has unsafe implicit linking against Version.dll. The description in the CVE notes that there is no protection mechanism to resolve the dependency at runtime, indicating a potential for misuse during installation ...

CVE-2016-1000002

CVE-2016-1000002 concerns gdm3 3.14.2 and possibly later, with an information leak before screen lock. The connected documents consistently identify this as a information disclosure vulnerability affecting the GDM display manager, leading to partial confidentiality impact. The exact affected vers...

CVE-2016-2860

CVE-2016-2860—OpenAFS : The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass access restrictions and create arbitrary groups as administrators by mishandling the creator ID. Impact is unauthorized group creat...

CVE-2016-7180

CVE-2016-7180 affects Wireshark 2.x (before 2.0.6) and relates to epan/dissectors/packet-ipmi-trace.c. The issue arises from not properly considering whether a string is constant, leading to a use-after-free and application crash via a crafted IPMI trace packet. This produces a remote denial of s...

CVE-2016-7424

CVE-2016-7424 affects libav 11.7 and earlier, in the x86/rnd_template.c function put_no_rnd_pixels8_xy2_mmx. The vulnerability allows remote attackers to trigger a denial of service via a crafted MP3 file, causing a NULL pointer dereference and crash. Connected advisories confirm this issue withi...

CVE-2017-0361

CVE-2017-0361 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16, where the api.log could contain passwords in plaintext (information disclosure). Connected sources confirm versions affected and describe the vulnerability context. Arch Linux advisory notes remediation by upgrading to MediaWik...

CVE-2017-0363

MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16 contains a redirect flaw where Special:UserLogin?returnto=interwiki:foo can lead users to external sites. The vulnerability affects the web interface’s login/redirect flow and could expose users to external redirects. Connected sources (including ven...