CVE-2016-4423

The CVE-2016-4423 issue affects Symfony’s UsernamePasswordFormAuthenticationListener (components: Symfony Security) where the attemptAuthentication function does not bound the maximum length of a username stored in a session. This can be exploited by remote attackers to cause a denial of service ...

CVE-2017-15954

CVE-2017-15954 affects the bchunk package (BinChunker) versions 1.2.0 and 1.2.1. The vulnerability is a heap-based buffer overflow that can cause a crash (and an invalid free) when processing a malformed CUE (.cue) file. Descriptions across multiple sources confirm the issue and its association w...

CVE-2014-5439

SniffIt before 0.3.7 contains multiple stack-based buffer overflow vulnerabilities triggered by crafted configuration files, allowing arbitrary code execution (as reported across NVD/OSV/Ubuntu/Debian advisories). The issue bypasses NX/SSP/ASLR protections and is documented in multiple feeds (NVD...

CVE-2015-3011

CVE-2015-3011 is an XSS in ownCloud’s contacts app (Community Edition) allowing remote authenticated users to inject script/HTML via crafted contacts. Affected: ownCloud Server 5.0.19 and 6.x/7.x before specific fixes. Remediation: upgrade to patched packages (e.g., Debian/DSA-3244-1 fixes). Note...

CVE-2015-3012

WebODF (used by ownCloud) is affected by CVE-2015-3012: multiple XSS vulnerabilities allow remote attackers to inject arbitrary script or HTML via (1) style, (2) font name, (3) javascript, or (4) data URI parameters. Affected version: WebODF before 0.5.5. Root cause is insufficient filtering of t...

CVE-2015-8971

The CVE-2015-8971 issue affects Terminology (terminal emulator) version 0.7.0, where incorrect sanitising of character escape sequences allows an attacker to execute arbitrary commands by crafting escape sequences that modify the window title and are written to the terminal. Root cause: failure t...

CVE-2016-1236

CVE-2016-1236 affects WebSVN by multiple XSS vulnerabilities in revision.php, log.php, listing.php, and comp.php. The context-dependent attacker can inject arbitrary script/HTML via the name field of a repository file or directory, leading to potential user exploitation. Reported CVSS: 4.3 (CVSS2...

CVE-2017-0917

CVE-2017-0917: GitLab Community Edition v10.2.4 vulnerability in the CI job component due to lack of input validation, causing persistent cross-site scripting. Confirmed details across multiple sources indicate a remote attacker could inject arbitrary script via CI job output, leading to potentia...

CVE-2017-17843

The CVE-2017-17843 issue affects Enigmail before 1.9.9, where incorrect regular expressions used to extract an e-mail address from a comma-separated list can cause the intended public key to be used for encryption. Connected sources corroborate this as part of a set of vulnerabilities fixed in Th...

CVE-2017-8814

CVE-2017-8814 affects MediaWiki language converter. Versions affected: before 1.27.4, before 1.28.3 in 1.28.x, and before 1.29.2 in 1.29.x. The vulnerability allows replacing text inside tags via a rule definition followed by a large amount of junk. Remediation across sources points to upgrading ...

CVE-2018-10771

CVE-2018-10771 affects abcm2ps up to version 8.13.20, via a stack-based buffer overflow in the get_key function in parse.c that can trigger a remote denial of service (application crash) or possibly other impact. The connected advisories note multiple memory/array access issues in abcm2ps (CVE-20...

CVE-2018-11496

CVE-2018-11496 affects lrzip 0.631, where a use-after-free occurs in read_stream due to missing size validation in decompress_file; Debian DLA-2725-1 fixes this in lrzip 0.631-1+deb9u1, and Ubuntu advisories USN-5171-1/2 indicate fixes for lrzip as part of the security updates. Remediation: upgra...

CVE-2018-19143

OTRS pre-4.0.33, pre-5.0.31, and pre-6.0.13 are affected by CVE-2018-19143. An authenticated user can delete arbitrary files via a tampered submission form due to improper upload caching. The issue is fixed in OTRS at least in 4.0.33, 5.0.31, and 6.0.13; upgrading to the respective patched releas...

CVE-2018-7870

CVE-2018-7870 concerns libming 0.4.8, where an invalid memory address dereference in getString (util/decompile.c) for CONSTANT16 data can cause a segmentation fault and application crash, leading to denial of service. Connected advisories confirm this affects the ming library and indicate that fi...

CVE-2018-8040

CVE-2018-8040 affects Apache Traffic Server (ATS) via the ESI plugin. Pages rendered with ESI can access the cookie header even when access is disallowed, impacting ATS versions 6.0.0–6.2.2 and 7.0.0–7.1.3. The root cause is improper restriction of cookie header access within the ESI plugin, lead...

CVE-2019-14380

CVE-2019-14380 affects libopenmpt up to 0.4.4 (pre-0.4.5); the issue is an out-of-bounds read in XM and MT2 playback that can crash the application. Debian/DSA notes a fix in libopenmpt with a security update (0.4.3-1+deb10u1); other references corroborate a vulnerability in the library before 0....

CVE-2020-28608

CVE-2020-28608 affects CGAL CGAL-5.1.1, specifically the Nef polygon-parsing code. A malformed Nef file can trigger an out-of-bounds read and type confusion in the PM_io_parser (Nef_2/PM_io_parser.h) within PMDEC::read_face() (store_fc()) leading to potential code execution. Several other related...

CVE-2020-28619

CGAL CGAL-5.1.1 Nef polygon-parsing vulnerabilities exist (out-of-bounds read and type confusion) that could lead to code execution when processing crafted input. The issue is reported across numerous CVEs (e.g., CVE-2020-28619 and related CNEs in the Nef_S2/SNC_io_parser.h read_edge() and other ...

CVE-2020-28632

CVE-2020-28632 affects CGAL libcgal CGAL-5.1.1, specifically in the Nef polygon-parsing path where an out-of-bounds read can cause a type-confusion condition, enabling potential code execution. The vulnerability is tied to oob reads in SNC_io_parser.h/Nef_S2/SNC_io_parser.h (read_sedge and relate...

CVE-2021-23225

CVE-2021-23225 (Cacti 1.1.38) : An authenticated user with User Management permissions can inject arbitrary web script or HTML in the “new_username” field when creating a new user via the Copy method in user_admin.php. The vulnerability’s impact is described as cross-site scripting (XSS). Debian'...

CVE-2021-36045

CVE-2021-36045 is an out-of-bounds read vulnerability in Exempi (XMP Toolkit SDK 2020.1 and earlier) that could disclose arbitrary memory and potentially bypass ASLR. Exploitation requires the user to open a malicious file. Public advisories (Debian, Mageia, Ubuntu) indicate fixes in newer exploi...

CVE-2021-37789

CVE-2021-37789 corresponds to a heap-based buffer overflow in the JPEG loader of stb_image.h 2.27 (stbi__jpeg_load). Public details in connected docs identify the affected library as stb_image (stb) and confirm the vulnerability can cause Information Disclosure or Denial of Service. Several entri...

CVE-2021-40716

CVE-2021-40716 affects Exempi/XMP Toolkit SDK (versions 2021.07 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR; exploitation requires user interaction (open a crafted file). Publicly documented fixes include: Debian has updated ex...

CVE-2021-43114

CVE-2021-43114 affects the FORT Validator. Versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate, causing RTR clients such as BGP routers to lose access to the RPKI VRP data and effectively disable Route Origin Validation. Public advisories confirm fixes in newer rele...

CVE-2022-38858

CVE-2022-38858 affects The MPlayer Project: buffer overflow in mov_build_index() inside libmpdemux/demux_mov.c, impacting mplayer and mencoder built from SVN-r38374-13.0.1. Connected sources corroborate multiple MPlayer vulnerabilities around the same codebase (buffer overflows, divide-by-zero, o...

CVE-2023-24754

CVE-2023-24754 affects libde265 v1.0.10. The vulnerability is a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function (sse-motion.cc), enabling Denial of Service via a crafted input file. Connected advisories confirm the same issue and indicate remediation: upgrade to newer...

CVE-2023-39355

CVE-2023-39355 affects FreeRDP on the 3.x release branch before beta3, where processing RDPGFX_CMDID_RESETGRAPHICS can trigger a Use-After-Free if context->maxPlaneSize is 0 and context->planesBuffer is freed without updating the buffer. This vulnerability is described as a crash in most en...

CVE-2007-6170

CVE-2007-6170 affects the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk. The vulnerability arises because ANI and DNIS are not properly escaped before SQL execution, enabling remote authenticated users to inject commands. Affected product versions include Asterisk 1.4.x befor...

CVE-2008-3913

CVE-2008-3913 affects ClamAV up to version 0.94, specifically memory leaks in freshclam/manager.c that can cause denial of service via memory exhaustion. Disclosures from multiple advisories and Nessus/OpenSUSE/Mandriva Fedora notes tie this CVE to 0.94 release fixes, which address error-path mem...

CVE-2009-0784

CVE-2009-0784 : A race condition in the SystemTap stap tool (versions 0.0.20080705 and 0.0.20090314) can allow local stapusr users to insert arbitrary kernel modules and gain privileges. The issue is documented across multiple distributions ( MiracleLinux 3, Red Hat Enterprise Linux, Oracle Linux...

CVE-2010-4199

Summary: CVE-2010-4199 affects WebKit (GTK+/WebKit) as used in Debian, Ubuntu, and related packages. The vulnerability arises from improper casting of an unspecified variable during processing of an SVG element, enabling remote attackers to cause a denial of service or possibly other impact via ...

CVE-2011-1490

Conrete details available: CVE-2011-1490 affects rsyslog before 5.7.6. The vulnerability is a memory leak in the logging path when multiple rulesets are used, where some output batches contain messages from more than one ruleset. Local attackers could trigger a denial of service by causing rsyslo...

CVE-2012-1115

CVE-2012-1115 affects LDAP Account Manager (LAM) Pro 3.6, with a Cross-Site Scripting (XSS) vulnerability in the export, add_value_form, and dn parameters to cmd.php. All connected sources confirm the XSS issue in LAM Pro 3.6; no specific patch/version to remediate is provided in the supplied doc...

CVE-2013-2902

CVE-2013-2902: Use-after-free in Blink's XSLT ProcessingInstruction handling during applyXSLTransform (HTML document or xsl:processing-instruction) may allow remote denial of service or other impact. Affected product: Google Chrome/Blink prior to 29.0.1547.57. Root cause: use-after-free in XSLT p...

CVE-2013-4245

CVE-2013-4245 : The vulnerability affects the Orca application and is caused by insecure Python module load, resulting in arbitrary code execution. The NVD entry lists a local attack vector with medium complexity in CVSS v2, and high impact on confidentiality, integrity, and availability in CVSS ...

CVE-2015-0885

The CVE-2015-0885 issue affects the checkpw password authentication utility (versions 1.02 and earlier). The root cause is a flaw in processing account names that contain double dashes, which can be exploited remotely to cause a denial of service via an infinite loop. Debian and related advisorie...

CVE-2015-8474

CVE-2015-8474 is an open redirect vulnerability in Redmine's valid_back_url function (app/controllers/application_controller.rb). The issue affects Redmine releases prior to: 2.6.7, 3.0.x prior to 3.0.5, and 3.1.x prior to 3.1.1. An attacker can craft a back_url parameter to redirect victims to a...

CVE-2016-10246

CVE-2016-10246 affects MuPDF (Artifex MuPDF) prior to 1.10, with a buffer overflow in the main function (jstest_main.c) that can be exploited by a crafted file to cause a denial of service (out-of-bounds write). The vulnerability is described as client-side/remote exploit via crafted files; impac...

CVE-2016-7142

CVE-2016-7142 describes an authentication spoofing flaw in the InspIRCd m_sasl module prior to 2.0.23 when used with a SASL_EXTERNAL service. A remote attacker can craft a SASL message to spoof certificate fingerprints and log in as another user. Multiple connected sources (OSV entries and NVD) c...

CVE-2016-7179

Wireshark 2.x before 2.0.6 is affected by CVE-2016-7179: a stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c (Catapult DCT2000 dissector) can be triggered by sending a crafted packet, potentially causing an application crash. Remediation: upgrade to Wireshark 2.0.6 or newer...

CVE-2017-0369

CVE-2017-0369 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16, exposing a flaw where sysops could undelete pages despite protection. Connected sources corroborate the issue across multiple advisories (Fedora/Mageia) and vulnerability trackers, without detailing exploit vectors beyond the u...

CVE-2017-0926

GitLab Community Edition 10.3 is affected by an improper authorization in the Oauth sign-in component, enabling unauthorized user login. Root cause: OAuth sign-in bypass allows login without proper authorization. Impact: unauthorized access via OAuth flow with partial/ high impact credentials (pe...

CVE-2017-15571

CVE-2017-15571 affects Redmine prior to 3.2.8, 3.3.x prior to 3.3.5, and 3.4.x prior to 3.4.3. The vulnerability is a cross-site scripting (XSS) flaw in app/views/issues/_list.html.erb caused by crafted column data, enabling injection of HTML/script in affected deployments. Connected sources conf...

CVE-2017-17844

CVE-2017-17844 affects Enigmail before 1.9.9, an OpenPGP extension for Thunderbird. A remote attacker can cause the victim to decrypt an encrypted block and replay the resulting cleartext as quoted text, exposing plaintext (TBE-01-005 replay). The issue is addressed in vendor advisories; remediat...

CVE-2017-6309

CVE-2017-6309 affects the tnef package (before 1.4.13). The issue is one of several defects described in Mageia and other advisories: two type confusions in parse_file() may lead to invalid read/write operations under attacker-controlled input. This is part of a cluster of memory/safety issues in...

CVE-2017-8849

CVE-2017-8849 affects smb4k, a KDE SMB/CIFS share browser. A logic flaw in the mount helper binary (typically installed setuid) may allow a local user to execute arbitrary commands as root by abusing mount command handling. Public advisories (Debian DSA-3951-1, Mageia, Gentoo GLSA, Fedora package...

CVE-2018-6519

The vulnerability CVE-2018-6519 affects SimpleSAMLphp’s SAML2 library: Regular Expression Denial of Service for fraction-of-seconds in timestamps. Affected versions are SimpleSAMLphp SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1. Impact is partial availability (DoS) via netw...

CVE-2018-9240

Summary of CVE-2018-9240 from connected sources: ncmpc (

CVE-2019-15941

OpenID Connect Issuer in LemonLDAP::NG 2.x up to 2.0.5 can bypass access control via a crafted OIDC authorization request when there is a weaker relaying party and no redirection URI filtering. Affected components: LemonLDAP::NG (OpenID Connect issuer) in 2.x up to 2.0.5. Root cause: misconfigure...

CVE-2019-18792

CVE-2019-18792 affects Suricata 5.0.0, enabling evasion of TCP-based signatures by overlapping a TCP segment with a fake FIN packet, causing the PUSH ACK carrying data to be ignored. The fake FIN packet is accepted (ACK not set) while the legitimate packet is dropped due to overlap; affected Linu...