CVE-2018-1000099

CVE-2018-1000099 affects Teluu PJSIP up to version 2.7.1, where a null/uninitialized pointer vulnerability in pjmedia SDP parsing can crash a system. Exploitation is tied to processing specially crafted SDP messages; the issue is stated to be fixed in PJSIP 2.7.2. Connected advisories reference D...

CVE-2018-13006

CVE-2018-13006 is a GPAC/MP4Box vulnerability. The Debian DLA-1432-1 advisory reports two heap-based buffer over-reads in gpac: (1) CVE-2018-13005 in isomedia/box_code_base.c urn_Read (heap over-read due to a faulty while-loop condition) and (2) CVE-2018-13006 in isomedia/box_dump.c hdlr_dump (he...

CVE-2020-28615

CGAL-5.1.1 Nef polygon parsing contains an out-of-bounds read in SNC_io_parser and related Vertex/Edge handling that can lead to code execution. Multiple connected advisories (Debian GLSA 202305-34; Gentoo GLSA; CNVD; NVD entry CVE-2020-28615) confirm a ring of OOB read vulnerabilities in Nef_S2/...

CVE-2020-29479

CVE-2020-29479 affects Xen’s xenstored when using the Ocaml implementation (oxenstored). The root node is treated specially (root has no parent) and permissions checks are missing for certain operations on the root node. This allows unprivileged guests to get and modify root permissions, list and...

CVE-2020-35477

MediaWiki before 1.35.1 is affected by CVE-2020-35477. In certain flows (MediaWiki:Mainpage set to Special:MyLanguage/Main Page; visiting a log entry on Special:Log; and using the Change visibility of selected log entries toggle), a redirect to the main page history submit action occurs, instead ...

CVE-2020-35635

CVE-2020-35635 affects CGAL 5.1.1; during Nef polygon parsing in Nef_S2/SNC_io_parser.h, SNC_io_parser::read_sface() with store_sm_boundary_item() and related code paths can trigger an out-of-bounds read, leading to potential code execution when processing a crafted file. Connected sources confir...

CVE-2020-35636

CVE-2020-35636 is a CGAL (libcgal CGAL-5.1.1) vulnerability affecting the Nef_S2/SNC_io_parser.h read_sface() path, where sfh->volume() can trigger an out-of-bounds read leading to code execution. Connected advisories confirm an OOB read vulnerability in CGAL’s Nef polygon-parsing code, with m...

CVE-2020-36476

CVE-2020-36476 affects Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). The issue is a missing zeroization of plaintext buffers in the TLS code path (mbedtls_ssl_read), which leaves unused application data in memory. Exploitation would rely on memory exposure and could enable...

CVE-2021-27379

CVE-2021-27379 affects Xen 4.11.x and related Xen/Citrix Hypervisor deployments. The issue arises from an incomplete backport that missed a flush, causing IOMMU updates to be incorrect and enabling x86 Intel HVM guests with PCI passthrough to achieve unintended read/write DMA, potentially leading...

CVE-2021-36050

CVE-2021-36050 affects Exempi (XMP Toolkit SDK) 2020.1 and earlier, with a heap-based buffer overflow that can lead to arbitrary code execution under the current user when a crafted file is opened (user interaction required). Debian LTS advisories show fixes: 2.5.0-2+deb10u1 for Debian 10 (buster...

CVE-2021-39847

CVE-2021-39847 affects the XMP Toolkit SDK (Exempi) versions 2020.1 and earlier. The issue is a stack-based buffer overflow in Exempi, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a crafted file. Con...

CVE-2021-45910

gif2apng 1.9 contains a heap-based buffer overflow in the main function (and related DecodeLZW paths) that lets an attacker write data outside the allocated buffer. The attacker may control part of the write address, the data, and, to some extent, the amount of data written. Public reports in Deb...

CVE-2022-43602

OpenImageIO vulnerabilities exist in IFFOutput::close() that can trigger heap buffer overflows when ymax is 0xFFFF and m_spec.format is TypeDesc::UINT8/UINT16, affecting OpenImageIO v2.4.4.2 (CVE-2022-43599/43600/43601 and related CVEs). Public advisories (Debian DSA-5384, GLSA-202305-33, Mageia ...

CVE-2023-39945

CVE-2023-39945 affects eProsima Fast DDS (DDS implementation). A data submessage sent to the PDP port can trigger an unhandled BadParamException in Fast-CDR, causing Fast DDS to crash. Affected releases prior to patches include 2.11.0, 2.10.2, 2.9.2, and 2.6.5; patched versions are 2.11.0, 2.10.2...

CVE-2025-38347

CVE-2025-38347 is tied to a Linux kernel issue in the F2FS file system. The description details a deadlock scenario during mknod in a corrupted directory, caused by locking the directory inode page twice while processing ACL/xattrs. The root cause is a mismatch between inode number and xattr inod...

CVE-2025-38516

CVE-2025-38516 is a Linux kernel vulnerability in the pinctrl/qcom/msm subsystem. The issue arises when certain pins are registered as IRQ-capable on platforms where intr_detection_width is not 1 or 2, enabling a user-space trigger that can cause a BUG() in msm_gpio_irq_set_type() and potentially...

CVE-2000-0289

Summary: CVE-2000-0289 concerns the Linux kernel IP Masquerade (NAT) feature on 2.2.x, where the UDP DLOOSE behavior can allow an attacker to send arbitrary UDP packets to hosts behind a vulnerable NAT by matching only destination IP/port, potentially affecting existing sessions. What is affected...

CVE-2005-0211

CVE-2005-0211 describes a buffer overflow in Squid’s WCCP handling: the wccp.c recvfrom path in Squid 2.5 before 2.5.STABLE7 processes an oversized WCCP packet due to an incorrect length parameter, enabling remote attackers to cause a denial of service and possibly execute arbitrary code. Affecte...

CVE-2005-3274

CVE-2005-3274 is a race condition in the Linux kernel’s SMP path for ip_vs_conn_flush, where a connection timer can expire while the connection table is being flushed before the correct lock is held. Affects Linux 2.6.x (before 2.6.13) and 2.4.x (before 2.4.32-pre2). Local users could trigger a n...

CVE-2006-0042

Summary: CVE-2006-0042 corresponds to a vulnerability in Apache2::Request (Libapreq2) up through versions before 2.07. The issue stems from an algorithm weakness in the apreq_parse_headers() and apreq_parse_urlencoded() functions that can be exploited remotely to cause a Denial of Service via CPU...

CVE-2009-5042

CVE-2009-5042 involves the python-docutils project and is documented as allowing insecure usage of temporary files. The connected sources corroborate this vulnerability across multiple feeds (NVD, RH, OSV, Debian, GHSA, and others). Public metrics indicate two CVSS baselines: CVSS v2 base score 6...

CVE-2010-4040

CVE-2010-4040 affects Google Chrome prior to 7.0.517.41. The vulnerability arises from improper handling of animated GIF images, enabling a remote attacker to trigger memory corruption which can lead to a denial of service and potentially other impacts. The available details describe memory corru...

CVE-2010-4653

CVE-2010-4653 describes an integer overflow in poppler before 0.16.3 when parsing CharCodes for fonts. Affected component: Poppler (fonts parsing). Root cause: integer overflow during CharCodes parsing. Impact as per sources: potential for overflow, with downstream effects described in OSV entrie...

CVE-2011-0779

CVE-2011-0779 affects Google Chrome/Chromium prior to 9.0.597.84: a missing key in an extension can be exploited remotely to cause a denial of service (application crash) via a crafted extension. Debian DSAs reference this CVE and fix it in chromium-browser; for squeeze, version 6.0.472.63~r59945...

CVE-2012-0216

The CVE-2012-0216 entry concerns the Debian Apache2 package: when using mod_php or mod_rivet, the default config exposes example scripts under doc/ that can enable local XSS, privilege escalation, or information disclosure via localhost HTTP requests. Affected releases include Debian Squeeze (&lt...

CVE-2012-1798

CVE-2012-1798 affects ImageMagick prior to 6.7.6-3. The TIFFGetEXIFProperties function in coders/tiff.c allows a remote attacker to trigger a denial of service via a crafted EXIF IFD in a TIFF image, causing an out-of-bounds read and crash. The vulnerability context is consistent with reports tha...

CVE-2012-3543

Technical details about CVE-2012-3543 are not publicly provided in the supplied documents. Monitor for updates from vendors or vulnerability trackers for affected software, impact, and fixed versions.

CVE-2012-4576

CVE-2012-4576 is described as a FreeBSD input-validation flaw that enables local privilege escalation. The connected data corroborate a Linux compatibility layer input-validation error where improper validation of Linux system-call handling can lead to memory locations being accessed, allowing lo...

CVE-2013-2860

CVE-2013-2860 is a use-after-free vulnerability in Chromium (Google Chrome) prior to 27.0.1453.110, arising from code paths involving access to a database API by a worker process. The flaw can allow a remote attacker to trigger a denial of service or potentially other impact. Public references fr...

CVE-2013-2867

This CVE (CVE-2013-2867) affects Google Chrome/Chromium prior to version 28.0.1500.71, where pop-under windows were not properly prevented, enabling a remote attacker to trigger an unspecified impact via a crafted web page. Publicly available connected sources (e.g., Debian DSA-2724-1, Gentoo GLS...

CVE-2013-3560

CVE-2013-3560 affects Wireshark 1.8.x before 1.8.7, where the MPEG DSM-CC dissector in epan/dissectors/packet-mpeg-dsmcc.c uses an incorrect format string in the dissect_dsmcc_un_download function. This flaw can allow remote attackers to trigger a denial of service (application crash) by sending ...

CVE-2013-4234

CVE-2013-4234 involves multiple heap-based buffer overflows in the abc_MIDI_drum and abc_MIDI_gchord functions within load_abc.cpp of libmodplug, affecting version 0.8.8.4 and earlier. The vulnerabilities can lead to memory corruption, a crash, and potentially remote code execution, i.e., a denia...

CVE-2013-4391

CVE-2013-4391 : Integer overflow in systemd’s journald-native.c (valid_user_field) allows remote attackers to crash the service and possibly execute code via a very large journal data field, triggering a heap-based buffer overflow. Documented impact includes denial of service and potential arbitr...

CVE-2014-9089

CVE-2014-9089 involves multiple SQL injection vulnerabilities in MantisBT before 1.2.18. The issue affects view_all_bug_page.php via the (1) sort or (2) dir parameter to view_all_set.php, allowing remote attackers to execute arbitrary SQL commands. Public advisories confirm the affected line orig...

CVE-2015-2320

CVE-2015-2320 affects the Mono TLS stack prior to 3.12.1, where the vulnerability arises from client-side SSLv2 fallback. The description specifies that remote attackers can cause unspecified impact. The included metrics show a base score of 7.5 (CVSSv2) and a 9.8 (CVSSv3) with network access and...

CVE-2015-8312

OpenAFS is affected by CVE-2015-8312 due to an off-by-one error in afs_pioctl.c that could allow a local user to cause a denial of service (memory overwrite and system crash) via a pioctl with a 4096-byte input buffer. The vulnerability affects OpenAFS prior to version 1.6.16. Impact is local, wi...

CVE-2016-2055

CVE-2016-2055 affects Xymon (formerly Hobbit) 4.1.x–4.3.x prior to 4.3.25. The vulnerability arises from improper handling of user-supplied input in the config command, allowing remote attackers to read arbitrary files in the configuration directory (information disclosure). Multiple connected so...

CVE-2016-3167

CVE-2016-3167 concerns Drupal 6.x prior to 6.38 where the open redirect is caused in the core function drupal_goto . When used with PHP before 5.4.7, a double-encoded value in the destination parameter enables remote attackers to redirect users to arbitrary external sites, facilitating phishing-s...

CVE-2016-7176

CVE-2016-7176 affects Wireshark 2.x up to (but not including) 2.0.6. The H.225 dissector (epan/dissectors/packet-h225.c) calls snprintf with one of its input buffers as the output buffer, enabling a remote attacker to craft a packet that causes a denial of service (copy overlap and application cr...

CVE-2016-7180

CVE-2016-7180 affects Wireshark 2.x (before 2.0.6) and relates to epan/dissectors/packet-ipmi-trace.c. The issue arises from not properly considering whether a string is constant, leading to a use-after-free and application crash via a crafted IPMI trace packet. This produces a remote denial of s...

CVE-2017-0361

CVE-2017-0361 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16, where the api.log could contain passwords in plaintext (information disclosure). Connected sources confirm versions affected and describe the vulnerability context. Arch Linux advisory notes remediation by upgrading to MediaWik...

CVE-2017-2902

CVE-2017-2902 affects Blender 2.78c through an exploitable integer overflow in the DPX loading path (via a crafted .cin file) that can cause a buffer overflow and code execution. The vulnerability is confirmed across multiple advisories linking Blender parsing flaws (CIN, etc.) and is addressed b...

CVE-2017-5938

CVE-2017-5938 is a Cross-site scripting (XSS) vulnerability in ViewVC’s nav_path function (lib/viewvc.py). Affected: ViewVC versions before 1.0.14 and 1.1.x before 1.1.26. Impact: remote attackers can inject arbitrary JavaScript/HTML via the nav_data name. Mitigation: upgrade to ViewVC 1.1.26 (or...

CVE-2017-8811

MediaWiki is affected by CVE-2017-8811, where the raw message parameter expansion allows HTML mangling in versions prior to 1.27.4 (1.28.x before 1.28.3, 1.29.x before 1.29.2). The issue is part of a set of vulnerabilities (8811 alongside 8808, 8809, 8810, 8812, 8814, 8815) disclosed by Debian, A...

CVE-2017-8815

CVE-2017-8815 affects MediaWiki’s language converter: unsafe attribute injection via glossary rules in versions before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2. This metadata is supported by multiple advisories (Debian DSA-4036, Arch ASA-2017-11-20, Mageia/MEDIAWiki notes). Impact d...

CVE-2018-14347

CVE-2018-14347 affects GNU Libextractor prior to 1.7, with an infinite loop in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c). Publicly available documents corroborate the issue under libextractor across multiple distributions, including Debian (DSA-4290) and Mageia advisories, which indicate p...

CVE-2018-14593

CVE-2018-14593 affects Open Ticket Request System (OTRS) versions 6.0.x up to 6.0.9, 5.0.x up to 5.0.28, and 4.0.x up to 4.0.30. An attacker authenticated as an OTRS agent can escalate privileges by accessing a specially crafted URL. Multiple security advisories (Debian, openSUSE, SUSE, OpenVAS) ...

CVE-2018-19141

CVE-2018-19141 affects Open Ticket Request System (OTRS). The vulnerability is an XSS allowing an admin to manipulate a modified URL due to mishandled user and customer preferences, with impact limited to Contextual JavaScript execution in OTRS. Affected branches are OTRS 4.0.x before 4.0.33 and ...

CVE-2018-20430

CVE-2018-20430 affects GNU Libextractor up to version 1.8, with an out-of-bounds read in history_extract() (plugins/ole2_extractor.c) related to EXTRACTOR_common_convert_to_utf8 in common/convert.c. The issue is reported across multiple advisories and distributions, including Debian DSA-4361 and ...

CVE-2018-7435

FreeXL (lib freexl) — CVE-2018-7435: heap-based buffer over-read in freexl::destroy_cell in versions before 1.0.5. Impact noted as potential denial of service; advisories (Debian, Gentoo, Red Hat/openSUSE/NASL) recommend upgrading to 1.0.5 or later. No exploitation details provided in the supplie...