CVE-2012-2237

Summary: CVE-2012-2237 affects Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2, enabling remote XSS via multiple vectors (1) javascript innerHTML in login form generation, (2) links, (3) resources URLs, and (4) the Display name in profiles. The underlying issue is insufficient sanitization/encod...

CVE-2012-2317

CVE-2012-2317 concerns a vulnerability in the Debian/Ubuntu patch for PHP 5.3.x where an empty salt string is not handled properly by the crypt() password hashing path. This could let remote attackers bypass authentication if an application relies on PHP’s crypt() salt selection. Affected package...

CVE-2013-2480

CVE-2013-2480 affects Wireshark RTPS and RTPS2 dissectors. The issue could cause an application crash (DoS) via a malformed packet. Affected: Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6. Mitigation: upgrade to Wireshark 1.6.14 or 1.8.6 (or later) as fixed by multiple advisories.

CVE-2013-2919

CVE-2013-2919 is a memory corruption vulnerability in the V8 engine used by Chromium/Google Chrome before versions around 30.x, with potential remote impact via unspecified vectors. Multiple connected advisories/plugins (openSUSE patches, Debian DSA-2785, Gentoo GLSA, macOS Nessus) confirm the is...

CVE-2013-4078

Wireshark 1.8.x before 1.8.8 has a flaw in the RDP dissector (epan/dissectors/packet-rdp.c) where return values are not validated during data-availability checks, enabling a crafted RDP packet to crash the application and cause a denial of service. This CVE-2013-4078 entry is supported by multipl...

CVE-2014-1608

The CVE-2014-1608 issue affects MantisBT affected versions prior to 1.2.16. It arises from the mci_file_get function in api/soap/mc_file_api.php, where unsafely constructed SQL via the db_query path in the mc_issue_attachment_get SOAP request, allowing remote attackers to execute arbitrary SQL co...

CVE-2015-2753

CVE-2015-2753 affects FreeXL prior to 1.0.0i. A crafted workbook sector can cause stack corruption, enabling remote denial of service or possible arbitrary code execution. Additional related CVEs (2754, 2776) are cited in the same advisories. Public sources describe remote code execution and DoS ...

CVE-2015-4652

Wireshark 1.12.x before 1.12.6 is vulnerable to a DoS via a crafted GSM DTAP packet. The root cause is improper validation of digit characters in epan/dissectors/packet-gsm_a_dtap.c, specifically in the de_emerg_num_list and de_bcd_num functions. Impact is application crash (DoS). A fix exists: u...

CVE-2015-7762

OpenAFS contains a vulnerability CVE-2015-7762 where rx/rx.c does not properly initialize the padding of an Rx ACK packet, enabling potential plaintext disclosure via replay or network sniffing. Affected: OpenAFS prior to 1.6.15 and prior to 1.7.33. Impact: information disclosure of previously pr...

CVE-2016-2370

CVE-2016-2370 (Pidgin) affects the MXIT protocol handling in Pidgin. The vulnerability arises from processing specially crafted MXIT data from a server, potentially causing an out-of-bounds read and enabling a crash or memory disclosure. The discovery is based on the CVE entry and associated refe...

CVE-2016-2371

CVE-2016-2371 describes an out-of-bounds write in the MXIT protocol handling in Pidgin , causing memory corruption that could lead to code execution. The linked connected documents (including EulerOS/Nessus entries) corroborate this issue as part of a broader set of MXIT-related vulnerabilities i...

CVE-2016-2374

The CVE-2016-2374 entry affects Pidgin's MXIT protocol handling. The vulnerability is an exploitable memory corruption in the MXIT MultiMX message handling, where specially crafted server messages can trigger an out-of-bounds write, leading to memory disclosure and potential code execution. Affec...

CVE-2016-2511

CVE-2016-2511 is a cross-site scripting (XSS) vulnerability affecting WebSVN 2.3.3 and earlier, exploitable via the path parameter to log.php. Public documents corroborate affected versions and provide concrete fixes in vendor advisories: Fedora updates (e.g., FEDORA-2016-657 and FEDORA-2016-1153...

CVE-2016-4079

CVE-2016-4079 affects the Wireshark PKTC (packet-pktc.c) BER handling in the PKTC dissector, where BER identifiers are not verified. This can allow remote attackers to trigger a denial of service (out-of-bounds write and application crash) via a crafted packet. Affected are Wireshark 1.12.x befor...

CVE-2016-6801

CVE-2016-6801 : Apache Jackrabbit’s CSRF in Webdav is due to improper CSRF content-type checks. Affected are Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3. The vulnerability a...

CVE-2017-0356

CVE-2017-0356 affects ikiwiki before 3.20170111, where the passwordauth plugin’s use of CGI::FormBuilder can be abused to bypass authentication by submitting repeated parameters. The issue is analogous to CVE-2016-9646 (commit metadata forgery). Multiple connected sources confirm the vulnerabilit...

CVE-2017-15569

CVE-2017-15569 affects Redmine versions prior to 3.2.8, 3.3.x prior to 3.3.5, and 3.4.x prior to 3.4.3. The vulnerability is an XSS in app/helpers/queries_helper.rb via a multi-value field mishandled during rendering of the issue list. Exploitation details are not provided in the initial document...

CVE-2017-1665

The CVE-2017-1665 issue affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager), specifically versions 2.5, 2.6, and 2.7, where weaker than expected cryptographic algorithms could allow decryption of sensitive information. IBM’s bulletin confirms the affected ranges and...

CVE-2017-2896

CVE-2017-2896 affects libxls 1.4.x, where an exploitable out-of-bounds write in the xls_mergedCells function can cause memory corruption and remote code execution when processing a crafted XLS file. The cited sources describe an attacker sending malicious XLS data to trigger the vulnerability. Th...

CVE-2017-6960

CVE-2017-6960 affects apng2gif. The issue is an integer overflow in the load_apng path that causes a heap-based buffer over-read. Public advisories (Debian/Ubuntu) report this with fixes in newer package versions: Debian patching to 1.8-0.1~deb9u1 (DLA-2911) and Ubuntu USN-4513-1; OpenVAS/OSV ent...

CVE-2017-8823

CVE-2017-8823 (Tor) : A use-after-free in onion service v2 during intro-point expiration is caused by mismanagement of the expiring list in certain error cases (Tor before 0.3.1.9). Descriptions from Arch Linux ASA-201712-10 indicate this can lead to crashes of v2 onion services when circuits exp...

CVE-2018-1000040

CVE-2018-1000040 affects MuPDF up to 1.12.0 (and earlier) where multiple uses of uninitialized values in the PDF parser can cause a crash or allow the attacker to influence program flow via a crafted file. Consequences documented in connected sources include denial of service and potential code e...

CVE-2018-16586

CVE-2018-16586 affects OTRS: Open Ticket Request System 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11. An attacker can send a malicious email that, when opened by a logged-in user, causes the browser to load external image or CSS resources. The issue is exploited via a crafted...

CVE-2019-13220

CVE-2019-13220 affects the stb_vorbis component in the stb library (start_decoder context). The vulnerability is an out-of-range read in draw_line(), with the description indicating potential denial of service or disclosure of sensitive information when processing crafted Ogg Vorbis files. Public...

CVE-2019-16236

CVE-2019-16236 affects the Dino XMPP client (GTK+/Vala). The vulnerability arises from Dino not checking roster push authorization in module/roster/module.vala, enabling potential unauthorized roster push actions. Reported CVSS metrics show two vectors: CVSS v2 base 5.0 (NETWORK/LOW complexity, I...

CVE-2020-28609

CVE-2020-28609 affects CGAL’s Nef polygon-parsing code (CGAL-5.1.1). The Debian security advisory fixes multiple Nef-related code-execution vulnerabilities, including an out-of-bounds read in Nef_2/PM_io_parser.h PM_io_parser::read_face() (store_iv()) that could enable arbitrary code execution vi...

CVE-2020-28633

CGAL-5.1.1 Nef polygon parsing contains an out-of-bounds read vulnerability in SNC_io_parser.read_sedge() (prev) that can lead to code execution. CVE-2020-28633 is reported publicly; Debian Gentoo advisories/date ranges indicate fixes in later CGAL releases (e.g., CGAL ≥5.4.1). Remediation per co...

CVE-2020-29485

CVE-2020-29485 concerns Xen 4.6–4.14.x where, on XS_RESET_WATCHES, Xenstored’s tracking information is not fully freed in the Ocaml Xenstored implementation, allowing unbounded memory growth and a system-wide DoS. The vulnerability affects hosts using the Ocaml Xenstored; the C Xenstored implemen...

CVE-2021-21850

CVE-2021-21850 affects the GPAC library (GPAC Project on Advanced Content) v1.0.1 in its MPEG-4 decoding. A specially crafted MPEG-4 input triggers an integer overflow while processing the trun atom, causing a heap-based buffer overflow and memory corruption. Impact reported across advisories inc...

CVE-2021-45911

The CVE-2021-45911 family affects gif2apng 1.9 with heap-based buffer overflows. CVE-2021-45909 (DecodeLZW), CVE-2021-45910 (main function), and CVE-2021-45911 (delays in main) enable out-of-bounds writes; Debian reports fixed in 1.9+srconly-2+deb9u2, Ubuntu USN-5969-1 references these issues as ...

CVE-2022-43595

CVE-2022-43595 is part of OpenImageIO OpenImageIO v2.4.4.2. It describes multiple denial-of-service vulnerabilities in the image output closing functionality, specifically leading to null pointer dereferences when handling ImageOutput and writing .fits files. The connected advisories confirm mult...

CVE-2023-39355

CVE-2023-39355 affects FreeRDP on the 3.x release branch before beta3, where processing RDPGFX_CMDID_RESETGRAPHICS can trigger a Use-After-Free if context->maxPlaneSize is 0 and context->planesBuffer is freed without updating the buffer. This vulnerability is described as a crash in most en...

CVE-2025-38546

CVE-2025-38546 (Linux kernel: ATM clip memory leak) The vulnerability is in the ATM subsystem’s clip code. The ioctl ATMARPD_CTRL path assigns NULL to vcc->push(), which breaks the expected cleanup path and leaks memory for the allocated struct clip_vcc during ATMARP handling. The root cause i...

CVE-2025-38563

CVE-2025-38563 affects the Linux kernel perf subsystem. The issue arises when perf mmap-based mappings can be split (VMA split) after initial mapping, causing mismatched offsets/sizes and leaking reference counts for ringbuffer/auxiliary buffers. The fix adds vm_operations_struct.may_split() and ...

CVE-1999-0373

CVE-1999-0373 describes a buffer overflow in the_Debian GNU/Linux_ and other systems' 'Super' utility that allows local users to execute commands as root. Affected component: the Super utility. Root cause: a buffer overflow vulnerability. Impact: local privilege escalation to root. Public details...

CVE-1999-0374

CVE-1999-0374 : Debian GNU/Linux cfengine is vulnerable to a symlink attack. Connected documents confirm the issue but do not specify affected versions or a fixed release. PT-1999-1061 notes no information about a newer version containing a fix; monitoring for updates is advised. No exploit detai...

CVE-2003-0367

CVE-2003-0367 concerns the gzip package, where the secondary scripts (gzexe, zdiff, znew) allow local users to overwrite arbitrary files via a symlink attack on temporary files. The issue is attributed to insecure temporary-file handling in these scripts, as noted in related advisories and CVE en...

CVE-2004-0458

CVE-2004-0458 affects mah-jong prior to 1.6.2. A missing-argument condition allows remote attackers to trigger a NULL pointer dereference, causing a denial of service (server crash) over the network. Debian’s DSA-503 advisory and OpenVAS entries confirm the issue and advise updating mah-jong to a...

CVE-2004-0564

CVE-2004-0564 concerns rp-pppoe (pppoe) when the rp-pppoe package is configured to run setuid root. The description states that if rp-pppoe is installed or configured to operate with setuid root contrary to its design, local users can overwrite arbitrary files. Several connected sources (SUSE and...

CVE-2005-1111

Summary (CVE-2005-1111 family) : The cpio utility (2.6 and earlier) is affected by a local race condition when extracting or creating files, allowing a local attacker with write access to the target directory to modify the permissions of files being created or extracted. Related issues include im...

CVE-2005-3302

CVE-2005-3302 is an eval-injection vulnerability in Blender 2.36 (bvh_import.py) that lets an attacker execute arbitrary Python code via a hierarchy element in a .bvh file fed to an eval(). The issue arises from missing input validation in the Blender importer. Impact described in sources include...

CVE-2006-6942

CVE-2006-6942 involves multiple XSS vulnerabilities in PhpMyAdmin prior to 2.9.1.1. The description lists specific injection points, including (1) a comment for a table name via db_operations.php, (2) the db parameter to db_create.php, (3) the newname parameter to db_operations.php, (4) query_his...

CVE-2008-3912

CVE-2008-3912 affects ClamAV’s libclamav in versions before 0.94, causing a denial of service via an out-of-memory condition that can trigger a NULL pointer dereference and application crash. Connected advisories align on this being a memory-related vulnerability in the CLAMAV 0.94 series; open-s...

CVE-2008-4302

CVE-2008-4302 affects the Linux kernel splice subsystem specifically fs/splice.c. The root cause is a failure in add_to_page_cache_lru, after which code attempts to unlock a page that was not locked, enabling a local user to trigger a kernel BUG and system crash (denial of service). Public adviso...

CVE-2009-3723

Technical details about CVE-2009-3723 are not publicly provided in the connected documents; monitor for updates from vendors and security trackers for affected versions, impact, and fixes.

CVE-2011-3892

CVE-2011-3892: FFmpeg/libavcodec Theora decoder contains a double‑free vulnerability exploitable via a crafted Theora stream, allowing remote denial of service and possibly other impact. Connected advisories (Debian, Mandriva, FreeBSD VuXML) indicate multiple FFmpeg/libav issues and list CVE-2011...

CVE-2012-1105

CVE-2012-1105: A information-disclosure vulnerability exists in the Jasig php-pear-CAS 1.2.2 package where the Central Authentication Service client library archives the debug logging file insecurely in /tmp, exposing partial confidentiality. Affected component: phpCAS library; root cause: insecu...

CVE-2012-1155

Moodle has a database activity export permission issue where the export function incorrectly includes entries from groups the user does not belong to. Connected sources confirm this vulnerability (CVE-2012-1155) and enumerate affected Moodle versions (e.g., 1.9.x up to 1.9.16+, 2.0.x up to 2.0.7+...

CVE-2012-1183

CVE-2012-1183 affects the Asterisk Miliwatt (milliwatt_generate) in multiple releases: 1.4.x prior to 1.4.44, 1.6.x prior to 1.6.2.23, 1.8.x prior to 1.8.10.1, and 10.x prior to 10.2.1. The flaw is a stack-based buffer overflow in the milliwatt_generate function when the o option is used and inte...

CVE-2012-5521

CVE-2012-5521 affects quagga’s ospf6d daemon (version 0.99.21) with a DoS flaw in the way routes are removed. The connected documents consistently identify ospf6d as the affected component and describe a DoS impact; the materials do not provide a patch/version remediation details or exploit speci...