CVE-2004-1005

CVE-2004-1005 refers to multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier. The initial description notes remote attackers could trigger these issues with unknown impact, and connected advisories (e.g., Debian DSA 639-1, Gentoo GLSA 200502-24, SuSE OpenVAS entries) indicate t...

CVE-2017-0361

CVE-2017-0361 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16, where the api.log could contain passwords in plaintext (information disclosure). Connected sources confirm versions affected and describe the vulnerability context. Arch Linux advisory notes remediation by upgrading to MediaWik...

CVE-2021-45910

gif2apng 1.9 contains a heap-based buffer overflow in the main function (and related DecodeLZW paths) that lets an attacker write data outside the allocated buffer. The attacker may control part of the write address, the data, and, to some extent, the amount of data written. Public reports in Deb...

CVE-2022-31291

The CVE-2022-31291 issue affects dlt-daemon (version 2.18.8) in the dlt_config_file_parser.c component, enabling a double-free when processing crafted TCP packets. This is a network‑accessible vulnerability with high impact on availability (per CVSS v3.1). Connected sources corroborate the double...

CVE-2022-43601

CVE-2022-43601 affects OpenImageIO OpenImageIO v2.4.4.2: multiple code-execution/heap-overflow risks in IFFOutput::close() when ymax is 0xFFFF with m_spec.format = TypeDesc::UINT16. Connected advisories confirm OpenImageIO vulnerabilities in this release and note remediation via upgrading to newe...

CVE-2025-38516

CVE-2025-38516 is a Linux kernel vulnerability in the pinctrl/qcom/msm subsystem. The issue arises when certain pins are registered as IRQ-capable on platforms where intr_detection_width is not 1 or 2, enabling a user-space trigger that can cause a BUG() in msm_gpio_irq_set_type() and potentially...

CVE-2025-38576

CVE-2025-38576 affects the Linux kernel PowerPC EEH hotplug path. Root cause: race conditions between the PCIe hotplug driver and the EEH driver can yield kernel oops during unplug/recovery cycles and bus disappearance. Resolution: refactor the EEH module to be PCI rescan and remove safe, with cl...

CVE-2002-0004

CVE-2002-0004 describes a heap corruption vulnerability in the “at” utility caused by a double-free during execution time handling, enabling a local user to potentially execute arbitrary code. The issue is evidenced in multiple advisories (e.g., Debian DSA 102-1/102-2) noting that the remote host...

CVE-2004-1004

CVE-2004-1004 affects Midnight Commander (mc) up to version 4.5.55 with multiple format string vulnerabilities. The provided connected advisories confirm that various distros release patches (e.g., SUSE SLES9 patch 5011441, Gentoo GLSA 200502-24, Debian DSA 639-1) to fix these issues. The CVE ent...

CVE-2005-0078

CVE-2005-0078 affects KDE screensaver (kscreensaver) prior to KDE 3.0.5. The issue stems from not properly checking the return value of a function call, enabling a local attacker with physical access to cause a crash and potentially take over a locked desktop session. Public sources note upstream...

CVE-2005-0211

CVE-2005-0211 describes a buffer overflow in Squid’s WCCP handling: the wccp.c recvfrom path in Squid 2.5 before 2.5.STABLE7 processes an oversized WCCP packet due to an incorrect length parameter, enabling remote attackers to cause a denial of service and possibly execute arbitrary code. Affecte...

CVE-2005-2459

CVE-2005-2459 affects the Linux kernel prior to 2.6.12.5, where the huft_build function in inflate.c of the zlib routines returns the wrong value. This bug allows remote attackers to crash the kernel via a specially crafted compressed file, causing a null pointer dereference (a denial of service)...

CVE-2005-3274

CVE-2005-3274 is a race condition in the Linux kernel’s SMP path for ip_vs_conn_flush, where a connection timer can expire while the connection table is being flushed before the correct lock is held. Affects Linux 2.6.x (before 2.6.13) and 2.4.x (before 2.4.32-pre2). Local users could trigger a n...

CVE-2008-6124

CVE-2008-6124 is an SQL injection vulnerability in Moodle's HotPot module, exploitable via hotpot_delete_selected_attempts in report.php. Affected Moodle versions are 1.6 before 1.6.7, 1.7 before 1.7.5, 1.8 before 1.8.6, and 1.9 before 1.9.2. The vulnerability allows remote attackers to execute a...

CVE-2009-1962

CVE-2009-1962 affects Xfig (likely 3.2.5) and allows local users to read/write arbitrary files via a symlink attack on temporary files named like xfig-eps[PID], xfig-pic[PID].pix/.err, xfig-pcx[PID].pix, xfig-xfigrc[PID], xfig[PID], xfig-print[PID], xfig-export[PID].err, xfig-batch[PID], xfig-exp...

CVE-2010-4653

CVE-2010-4653 describes an integer overflow in poppler before 0.16.3 when parsing CharCodes for fonts. Affected component: Poppler (fonts parsing). Root cause: integer overflow during CharCodes parsing. Impact as per sources: potential for overflow, with downstream effects described in OSV entrie...

CVE-2012-2317

CVE-2012-2317 concerns a vulnerability in the Debian/Ubuntu patch for PHP 5.3.x where an empty salt string is not handled properly by the crypt() password hashing path. This could let remote attackers bypass authentication if an application relies on PHP’s crypt() salt selection. Affected package...

CVE-2013-2867

This CVE (CVE-2013-2867) affects Google Chrome/Chromium prior to version 28.0.1500.71, where pop-under windows were not properly prevented, enabling a remote attacker to trigger an unspecified impact via a crafted web page. Publicly available connected sources (e.g., Debian DSA-2724-1, Gentoo GLS...

CVE-2014-1608

The CVE-2014-1608 issue affects MantisBT affected versions prior to 1.2.16. It arises from the mci_file_get function in api/soap/mc_file_api.php, where unsafely constructed SQL via the db_query path in the mc_issue_attachment_get SOAP request, allowing remote attackers to execute arbitrary SQL co...

CVE-2014-1936

CVE-2014-1936 concerns the temporary file handling in the rc project’s Temp File Handler. Multiple connected sources confirm that rc versions before 1.7.1-5 insecurely create temporary files, enabling potential unauthorized access to protected information (root cause: insecure temporary file crea...

CVE-2015-0859

The CVE-2015-0859 entry affects the smokeping package (smokeping_cgi) used with Apache httpd, where the CGI argument handling by mod_cgi allows remote code execution. The Debian advisory notes the issue arises from the build/packaging where Apache httpd passes extra arguments to smokeping_cgi, en...

CVE-2015-2753

CVE-2015-2753 affects FreeXL prior to 1.0.0i. A crafted workbook sector can cause stack corruption, enabling remote denial of service or possible arbitrary code execution. Additional related CVEs (2754, 2776) are cited in the same advisories. Public sources describe remote code execution and DoS ...

CVE-2015-4652

Wireshark 1.12.x before 1.12.6 is vulnerable to a DoS via a crafted GSM DTAP packet. The root cause is improper validation of digit characters in epan/dissectors/packet-gsm_a_dtap.c, specifically in the de_emerg_num_list and de_bcd_num functions. Impact is application crash (DoS). A fix exists: u...

CVE-2015-7762

OpenAFS contains a vulnerability CVE-2015-7762 where rx/rx.c does not properly initialize the padding of an Rx ACK packet, enabling potential plaintext disclosure via replay or network sniffing. Affected: OpenAFS prior to 1.6.15 and prior to 1.7.33. Impact: information disclosure of previously pr...

CVE-2015-8312

OpenAFS is affected by CVE-2015-8312 due to an off-by-one error in afs_pioctl.c that could allow a local user to cause a denial of service (memory overwrite and system crash) via a pioctl with a 4096-byte input buffer. The vulnerability affects OpenAFS prior to version 1.6.16. Impact is local, wi...

CVE-2016-2370

CVE-2016-2370 (Pidgin) affects the MXIT protocol handling in Pidgin. The vulnerability arises from processing specially crafted MXIT data from a server, potentially causing an out-of-bounds read and enabling a crash or memory disclosure. The discovery is based on the CVE entry and associated refe...

CVE-2016-2371

CVE-2016-2371 describes an out-of-bounds write in the MXIT protocol handling in Pidgin , causing memory corruption that could lead to code execution. The linked connected documents (including EulerOS/Nessus entries) corroborate this issue as part of a broader set of MXIT-related vulnerabilities i...

CVE-2016-2374

The CVE-2016-2374 entry affects Pidgin's MXIT protocol handling. The vulnerability is an exploitable memory corruption in the MXIT MultiMX message handling, where specially crafted server messages can trigger an out-of-bounds write, leading to memory disclosure and potential code execution. Affec...

CVE-2016-2511

CVE-2016-2511 is a cross-site scripting (XSS) vulnerability affecting WebSVN 2.3.3 and earlier, exploitable via the path parameter to log.php. Public documents corroborate affected versions and provide concrete fixes in vendor advisories: Fedora updates (e.g., FEDORA-2016-657 and FEDORA-2016-1153...

CVE-2016-6801

CVE-2016-6801 : Apache Jackrabbit’s CSRF in Webdav is due to improper CSRF content-type checks. Affected are Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3. The vulnerability a...

CVE-2017-0356

CVE-2017-0356 affects ikiwiki before 3.20170111, where the passwordauth plugin’s use of CGI::FormBuilder can be abused to bypass authentication by submitting repeated parameters. The issue is analogous to CVE-2016-9646 (commit metadata forgery). Multiple connected sources confirm the vulnerabilit...

CVE-2017-15569

CVE-2017-15569 affects Redmine versions prior to 3.2.8, 3.3.x prior to 3.3.5, and 3.4.x prior to 3.4.3. The vulnerability is an XSS in app/helpers/queries_helper.rb via a multi-value field mishandled during rendering of the issue list. Exploitation details are not provided in the initial document...

CVE-2017-1665

The CVE-2017-1665 issue affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager), specifically versions 2.5, 2.6, and 2.7, where weaker than expected cryptographic algorithms could allow decryption of sensitive information. IBM’s bulletin confirms the affected ranges and...

CVE-2017-2896

CVE-2017-2896 affects libxls 1.4.x, where an exploitable out-of-bounds write in the xls_mergedCells function can cause memory corruption and remote code execution when processing a crafted XLS file. The cited sources describe an attacker sending malicious XLS data to trigger the vulnerability. Th...

CVE-2017-2906

CVE-2017-2906 describes an exploitable integer overflow in Blender 2.78c’s animation playing; a crafted .avi file can overflow a buffer and allow code execution within the application. The issue affects Blender’s ability to process certain multimedia assets, with potential for arbitrary code exec...

CVE-2017-5660

CVE-2017-5660 affects Apache Traffic Server (ATS) versions 6.2.0 and earlier and 7.0.0 and earlier due to a Host header/line folding issue that can interact with upstream proxies and cause the wrong host to be used. Several sources describe an input-validation/host-header vulnerability with poten...

CVE-2017-6960

CVE-2017-6960 affects apng2gif. The issue is an integer overflow in the load_apng path that causes a heap-based buffer over-read. Public advisories (Debian/Ubuntu) report this with fixes in newer package versions: Debian patching to 1.8-0.1~deb9u1 (DLA-2911) and Ubuntu USN-4513-1; OpenVAS/OSV ent...

CVE-2017-8823

CVE-2017-8823 (Tor) : A use-after-free in onion service v2 during intro-point expiration is caused by mismanagement of the expiring list in certain error cases (Tor before 0.3.1.9). Descriptions from Arch Linux ASA-201712-10 indicate this can lead to crashes of v2 onion services when circuits exp...

CVE-2018-16586

CVE-2018-16586 affects OTRS: Open Ticket Request System 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11. An attacker can send a malicious email that, when opened by a logged-in user, causes the browser to load external image or CSS resources. The issue is exploited via a crafted...

CVE-2018-16947

OpenAFS has a concrete vulnerability set: CVE-2018-16947 affects OpenAFS before 1.6.23 and 1.8.x before 1.8.2, where the backup tape controller (butc) RPCs are not authenticated, enabling an unauthenticated attacker to perform volume operations with administrator credentials (e.g., dumping/restor...

CVE-2018-7439

The CVE-2018-7439 issue affects FreeXL up to version 1.0.4; it is a heap-based buffer over-read in read_mini_biff_next_record. Exploitation could impact confidentiality, integrity, and availability (CVSS3: High). Mitigation: upgrade to FreeXL 1.0.5 or later (per the description). If you need furt...

CVE-2019-13220

CVE-2019-13220 affects the stb_vorbis component in the stb library (start_decoder context). The vulnerability is an out-of-range read in draw_line(), with the description indicating potential denial of service or disclosure of sensitive information when processing crafted Ogg Vorbis files. Public...

CVE-2019-16236

CVE-2019-16236 affects the Dino XMPP client (GTK+/Vala). The vulnerability arises from Dino not checking roster push authorization in module/roster/module.vala, enabling potential unauthorized roster push actions. Reported CVSS metrics show two vectors: CVSS v2 base 5.0 (NETWORK/LOW complexity, I...

CVE-2020-28605

CVE-2020-28605 is a code execution vulnerability in CGAL (CGAL-5.1.1) related to the Nef polygon-parsing path. A malformed input file can trigger an out-of-bounds read in Nef_2/PM_io_parser.h PM_io_parser::read_hedge() when e->set_vertex() is executed, enabling potential code execution. Public...

CVE-2020-28628

CVE-2020-28628 affects CGAL CGAL-5.1.1 Nef polygon-parsing code. The vulnerability is an out-of-bounds read in SNC_io_parser.h (Nef_S2/SNC_io_parser.h) within read_volume() (and related reads in other files as listed in connected sources), which can lead to type confusion and could enable code ex...

CVE-2020-28633

CGAL-5.1.1 Nef polygon parsing contains an out-of-bounds read vulnerability in SNC_io_parser.read_sedge() (prev) that can lead to code execution. CVE-2020-28633 is reported publicly; Debian Gentoo advisories/date ranges indicate fixes in later CGAL releases (e.g., CGAL ≥5.4.1). Remediation per co...

CVE-2020-29485

CVE-2020-29485 concerns Xen 4.6–4.14.x where, on XS_RESET_WATCHES, Xenstored’s tracking information is not fully freed in the Ocaml Xenstored implementation, allowing unbounded memory growth and a system-wide DoS. The vulnerability affects hosts using the Ocaml Xenstored; the C Xenstored implemen...

CVE-2020-35629

CVE-2020-35629 affects CGAL CGAL-5.1.1 Nef polygon-parsing: an out-of-bounds read and type confusion in SNC_io_parser/read_sloop() (slh->facet()) can lead to code execution. Debia n/ Gentoo advisories and multiple NASL entries indicate fixes in CGAL packages (Debian: 4.13-1+deb10u1; Gentoo GLS...

CVE-2021-40985

CVE-2021-40985 affects htmldoc prior to 1.9.12, with a stack-based buffer under-read in image_load_bmp when processing BMP images, leading to denial of service. Several advisories confirm the issue and recommend upgrading to newer HTMLDOC versions (e.g., GNU/Linux distributions advise upgrading b...

CVE-2022-43595

CVE-2022-43595 is part of OpenImageIO OpenImageIO v2.4.4.2. It describes multiple denial-of-service vulnerabilities in the image output closing functionality, specifically leading to null pointer dereferences when handling ImageOutput and writing .fits files. The connected advisories confirm mult...