CVE-2019-18345

The CVE-2019-18345 issue affects the DAViCal CalDAV Server (through 1.1.8) where the action parameter is echoed without encoding, enabling reflected XSS. Impact stated in sources: an attacker visiting a crafted link can view the attacked user’s data and perform actions on behalf of that user; if ...

CVE-2020-28602

CGAL-5.1.1 Nef polygon-parsing contains several memory-access vulnerabilities that can cause out-of-bounds reads and type confusion, potentially enabling code execution. The CVE of interest CVE-2020-28602 (and related CVEs 28601–28636) are described across sources (Debian GLSA/DLA advisories, Gen...

CVE-2020-28609

CVE-2020-28609 affects CGAL’s Nef polygon-parsing code (CGAL-5.1.1). The Debian security advisory fixes multiple Nef-related code-execution vulnerabilities, including an out-of-bounds read in Nef_2/PM_io_parser.h PM_io_parser::read_face() (store_iv()) that could enable arbitrary code execution vi...

CVE-2020-8865

CVE-2020-8865 affects Horde Groupware Webmail Edition 5.2.22. A flaw in edit.php when parsing params[template] allows an authenticated attacker to trigger improper file path handling and, with other vulnerabilities, execute code as the www-data user. Connected advisories confirm the issue and lin...

CVE-2021-31866

CVE-2021-31866 affects Redmine before 4.0.9 and 4.1.x before 4.1.3. An attacker can learn internal authentication keys by observing timing differences in string comparisons in SysController and MailHandlerController, causing information disclosure. Affected product is Redmine (web-based project m...

CVE-2022-42902

CVE-2022-42902 affects Linaro Automated Validation Architecture (LAVA); in versions prior to 2022.10, lava_server/lavatable.py allows remote code execution due to improper input sanitization, enabling an anonymous user to cause lava-server-gunicorn to run user-provided code. Debian advisories (DL...

CVE-2025-38550

CVE-2025-38550 is a Linux kernel issue in ipv6 multicast handling. The root cause is delaying the release of the reference to pmc->idev in mld_del_delrec(), while pmc->idev is also used by ip6_mc_clear_src(). The fix (as stated) is to put the reference after ip6_mc_clear_src() returns. The ...

CVE-2025-38561

CVE-2025-38561 concerns the ksmbd component of the Linux kernel. A race condition on Preauh_HashValue may occur when a client sends multiple session setup requests to ksmbd, due to how sess->Preauh_HashValue was previously freed during session setup. The fix moves freeing of sess->Preauh_Ha...

CVE-2025-39702

CVE-2025-39702 is a Linux kernel issue where ipv6: sr: Fix MAC comparison to be constant-time addresses timing-attack risk. Connected documents confirm kernels across multiple distributions (e.g., kernel6.12 line for Amazon Linux ALAS, Debian LTS DLA, Astralinux, Mariner/CBL) are affected in vers...

CVE-2001-0125

CVE-2001-0125 affects exmh 2.2 and earlier, where insecure handling of temporary files in /tmp (e.g., exmhErrorMsg) allows local users to overwrite files via a symlink attack. Connected advisories confirm the issue and note that newer versions (e.g., exmh 2.3.1+) fix the vulnerability by switchin...

CVE-2003-0367

CVE-2003-0367 concerns the gzip package, where the secondary scripts (gzexe, zdiff, znew) allow local users to overwrite arbitrary files via a symlink attack on temporary files. The issue is attributed to insecure temporary-file handling in these scripts, as noted in related advisories and CVE en...

CVE-2004-0994

CVE-2004-0994 affects xzgv version 0.8 and earlier, where multiple integer overflows in read_prf_file can cause a heap-based buffer overflow when images have large width/height. This is described as enabling remote code execution. The entry notes the bugs for CVE-2004-0994 and CVE-2004-1095 are d...

CVE-2004-1076

CVE-2004-1076 affects Atari800 (before 1.3.4): multiple buffer overflows in RtConfigLoad (rt-config.c) allow a local user to execute arbitrary code via oversized values in the configuration file. Debian/SUSE advisories confirm local-exploitability with potential root gain in some builds. The issu...

CVE-2011-3892

CVE-2011-3892: FFmpeg/libavcodec Theora decoder contains a double‑free vulnerability exploitable via a crafted Theora stream, allowing remote denial of service and possibly other impact. Connected advisories (Debian, Mandriva, FreeBSD VuXML) indicate multiple FFmpeg/libav issues and list CVE-2011...

CVE-2012-1183

CVE-2012-1183 affects the Asterisk Miliwatt (milliwatt_generate) in multiple releases: 1.4.x prior to 1.4.44, 1.6.x prior to 1.6.2.23, 1.8.x prior to 1.8.10.1, and 10.x prior to 10.2.1. The flaw is a stack-based buffer overflow in the milliwatt_generate function when the o option is used and inte...

CVE-2012-3509

CVE-2012-3509 concerns multiple integer overflows in GNU binutils’ libiberty and related code paths (objalloc_alloc and CHUNK_HEADER_SIZE usage) that can trigger a heap-based buffer overflow when processing untrusted inputs. The vendor-adopted description in the connected records confirms the imp...

CVE-2012-5521

CVE-2012-5521 affects quagga’s ospf6d daemon (version 0.99.21) with a DoS flaw in the way routes are removed. The connected documents consistently identify ospf6d as the affected component and describe a DoS impact; the materials do not provide a patch/version remediation details or exploit speci...

CVE-2013-2905

CVE-2013-2905 affects Google Chrome

CVE-2013-6460

CVE-2013-6460 affects the Nokogiri gem (version 1.5.x) and is described in connected documents as a Denial of Service via an infinite loop when parsing XML documents. The available sources consistently state a DoS impact but do not provide concrete exploitation details or patch/version remediatio...

CVE-2014-5025

CVE-2014-5025 affects Cacti (pre-0.8.8d) with an XSS flaw in data_sources.php where an authenticated user with console access can inject arbitrary script via the name_cache parameter in a ds_edit action. The issue is cited across multiple advisories (OpenSUSE, Debian, Gentoo GLSA) as part of a fa...

CVE-2015-5726

The CVE-2015-5726 issue affects Botan BER decoder: an empty BIT STRING in ASN.1 data can cause a remote denial of service (application crash) in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19. Debian advisories confirm fixes for botan1.10 in Jessie (upgrade to 1.10.8-2+deb8u1). If applicab...

CVE-2016-6525

MuPDF is affected by CVE-2016-6525 due to a heap overflow in pdf_load_mesh_params inside pdf/pdf-shade.c. A large decode array can trigger an out-of-bounds write, leading to a crash or arbitrary code execution. Public reports and advisories (Debian DSA-3655-1; Mageia MGASA-2016-0286; Gentoo GLSA ...

CVE-2017-0365

CVE-2017-0365 is a XSS vulnerability in MediaWiki’s SearchHighlighter::highlightText() that affects MediaWiki versions prior to 1.28.1, 1.27.2, and 1.23.16 when non-default configurations are used. The issue is purely described as a cross‑site scripting flaw; no exploitation details or in‑the‑wil...

CVE-2017-13755

CVE-2017-13755 affects The Sleuth Kit (TSK) 4.4.2, where opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() (tsk/fs/iso9660_dent.c). Related issues include CVE-2017-13756 (infinite recursion in dos_load_ext_table() used by mmls) and CVE-2017-13760 (fls hang on c...

CVE-2017-15576

CVE-2017-15576 affects Redmine before 3.2.6 and 3.3.x before 3.3.3. The issue arises from mishandling Time Entry rendering in activity views, enabling remote disclosure of sensitive information. The vulnerability is labeled as information disclosure with CVSSv3 base score 7.5 (NETWORK, LOW attack...

CVE-2017-15923

CVE-2017-15923 affects Konversation (IRC client) up to version 1.7.x prior to fixes in 1.7.4. The root cause is a crash caused by parsing IRC color formatting codes, leading to a denial of service (crash). Public fixes exist: openSUSE/openSUSE-2017-1306 notes CVE-2017-15923 fixed in 1.7.4; Fedora...

CVE-2017-17476

The CVE-2017-17476 affects Open Ticket Request System (OTRS) 4.0.x < 4.0.28, 5.0.x < 5.0.26, and 6.0.x

CVE-2017-2901

Blender 2.78c is affected by CVE-2017-2901 due to an integer overflow in the IRIS loader, causing a buffer overflow that can lead to code execution when a user opens a crafted .iris asset via the sequencer. This is a local vulnerability with user interaction required and is addressed by upgrading...

CVE-2017-7178

CVE-2017-7178 (Deluge WebUI CSRF) affects Deluge up to version 1.3.14. A remote attacker could lure a logged-in user to visit a malicious page that exploits CSRF to download and enable a crafted plugin via the WebUI, causing the plugin to execute arbitrary code on the victim’s system. Remediation...

CVE-2018-10191

CVE-2018-10191 affects mruby up to version 1.4.0, where an integer overflow in src/vm.c::mrb_vm_exec() during OP_GETUPVAR with deep scope nesting leads to a use-after-free. This can enable arbitrary code execution if Ruby code is run. Public details in connected sources confirm the issue and indi...

CVE-2018-12564

CVE-2018-12564 affects LAVA (lava-server) where support for URLs in the submit page can be abused to force lava-server-gunicorn to read arbitrary server files readable by lavaserver and containing valid YAML. Impact per the sources is information disclosure (no explicit compromise of integrity/av...

CVE-2018-6521

CVE-2018-6521 affects SimpleSAMLphp SQLaUTH: before 1.15.2, the MySQL utf8 charset truncates queries at four-byte characters, potentially allowing remote attackers to bypass access restrictions. Affected: SimpleSAMLphp SQLaUTH module. Root cause: reliance on utf8 charset causing truncation. Impac...

CVE-2018-6869

CVE-2018-6869 affects ZZIPlib 0.13.68 (zip.c: __zzip_parse_root_directory) where an uncontrolled memory allocation can crash the process, enabling a remote attacker to cause denial of service by processing a crafted ZIP file. The vulnerability is documented across multiple advisories (Debian DLA,...

CVE-2020-35630

CGAL 5.1.1 Nef polygon-parsing (CGAL-5.1.1) contains multiple code-execution vulnerabilities. Affected component/file set includes out-of-bounds reads and type confusion within the Nef_S2/NSC_io_parser and related PM_io_parser/SNC_io_parser paths, e.g. CVE-2020-35630 (read_sface() center_vertex()...

CVE-2020-36424

CVE-2020-36424 affects Arm Mbed TLS up to version 2.24.0. A side-channel during the generation of base blinding/unblinding values can allow an attacker to recover a private key (RSA or static DH). The issue is reported across multiple advisories (Astra Linux, GLSA-202301-08, Debian DLA-3249, CNVD...

CVE-2021-21850

CVE-2021-21850 affects the GPAC library (GPAC Project on Advanced Content) v1.0.1 in its MPEG-4 decoding. A specially crafted MPEG-4 input triggers an integer overflow while processing the trun atom, causing a heap-based buffer overflow and memory corruption. Impact reported across advisories inc...

CVE-2021-31864

CVE-2021-31864 affects Redmine: upstream versions pre-4.0.9, pre-4.1.3 (4.1.x), and pre-4.2.1 (4.2.x) are vulnerable to an access-restriction bypass via the incoming mail handler, allowing bypass of add_issue_notes permissions. Public sources confirm the issue and list affected releases; Debian L...

CVE-2021-45911

The CVE-2021-45911 family affects gif2apng 1.9 with heap-based buffer overflows. CVE-2021-45909 (DecodeLZW), CVE-2021-45910 (main function), and CVE-2021-45911 (delays in main) enable out-of-bounds writes; Debian reports fixed in 1.9+srconly-2+deb9u2, Ubuntu USN-5969-1 references these issues as ...

CVE-2022-38860

CVE-2022-38860 affects The MPlayer Project (mplayer and mencoder) with a Divide By Zero in demux_open_avi() in libmpdemux/demux_avi.c. Affected artifacts include mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. The vulnerability can be triggered by processing certain malformed AVI demux ...

CVE-2022-41649

CVE-2022-41649 is a heap out-of-bounds read in OpenImageIO’s handling of IPTC data when parsing TIFF images in v2.3.19.0, enabling potential information disclosure via a malicious TIFF file. Connected advisories confirm affected OpenImageIO versions and recommend upgrading; GLSA-202305-33 suggest...

CVE-2022-41999

CVE-2022-41999 affects OpenImageIO’s DDS native tile reading in OpenImageIO v2.3.19.0 and v2.4.4.2, enabling DoS via a crafted .dds file. Connected advisories confirm this bug and point to fixes in newer OpenImageIO releases (e.g., GLSA-202305-33 recommending upgrading to OpenImageIO >= 2.4.6....

CVE-2025-38546

CVE-2025-38546 (Linux kernel: ATM clip memory leak) The vulnerability is in the ATM subsystem’s clip code. The ioctl ATMARPD_CTRL path assigns NULL to vcc->push(), which breaks the expected cleanup path and leaks memory for the allocated struct clip_vcc during ATMARP handling. The root cause i...

CVE-2025-38578

CVE-2025-38578 concerns a use-after-free in the f2fs code path of the Linux kernel (f2fs_sync_inode_meta) that can occur during inode writeback, traced to a del-list path that frees an inode still in use. Syzbot reported a UAF in the f2fs_inode_synced flow, leading to a crash via KASAN. The conne...

CVE-2025-39697

Technical details about CVE-2025-39697 are not publicly provided in the supplied documents; information on affected products, impact, and fixes is limited to a general description. Monitor updates from vendor advisories.

CVE-1999-0832

CVE-1999-0832 concerns a buffer overflow in the Linux NFS server triggered by a long pathname, allowing an attacker to execute commands. The linked records confirm the vulnerability exists in the NFS service on Linux and describe command execution as the impact. The provided documents do not spec...

CVE-2001-0458

CVE-2001-0458 : Multiple buffer overflows in ePerl prior to 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. Mandrake and Debian advisories note upgrades to 2.2.14-0.7 (or later) fix the issue; other references corroborate the vulnerability in ePerl.

CVE-2001-0763

CVE-2001-0763 affects Linux xinetd up to version 2.1.8.9pre11-1 and earlier. The issue is a buffer overflow in the ident handling path: a long ident response is not properly processed by the svc_logprint function, enabling a remote attacker to potentially execute arbitrary code. Debian’s DSA-063-...

CVE-2001-0977

CVE-2001-0977 affects slapd in OpenLDAP, where OpenLDAP 1.x prior to 1.2.12 and 2.x prior to 2.0.8 are vulnerable. The issue is triggered by receiving LDAP BER length fields with invalid lengths, allowing remote attackers to cause a denial-of-service crash. Public advisories describe this as a re...

CVE-2002-1232

CVE-2002-1232 describes a memory leak in ypserv’s ypdb_open (yp_db.c) affecting the NIS package prior to version 2.5. Repeated remote requests for non-existent maps can exhaust memory, causing a denial-of-service condition. Multiple vendor advisories document this issue (e.g., Mandrake MDKSA-2002...

CVE-2004-0689

KDE before 3.3.0 is affected by CVE-2004-0689 where certain symbolic links point to stale locations, enabling local users to create or truncate arbitrary files through kde/kdelibs components. Public references in 2004 advisories (RHSA-2004:412, DSA-539-1, Gentoo GLSA 200408-13, FreeBSD/OpenVAS en...