CVE-2020-36308

CVE-2020-36308 affects Redmine prior to 4.0.7 and 4.1.x prior to 4.1.1. The issue lets an attacker discover the subject of a non-visible issue by exporting to CSV and reading time entries, resulting in information disclosure. Concretely, CSV export of time entries can reveal unseen issue subjects...

CVE-2020-36422

CVE-2020-36422 affects Arm Mbed TLS before 2.23.0. A side-channel leaks ECC private keys via operations tied to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable, enabling key recovery. Exploitation details are not provide...

CVE-2020-36423

CVE-2020-36423 affects Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext due to a Lucky 13 timing side-channel not properly handling the case of a hardware accelerator. This is documented in multiple sources referencing Mbed TLS 2.23.0 fixes. Impact is plaintext exposure via net...

CVE-2021-36047

CVE-2021-36047 affects the Exempi/XMP Toolkit SDK (version 2020.1 and earlier). The issue is described as an Improper Input Validation vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a crafted...

CVE-2022-24301

CVE-2022-24301 affects Minetest prior to 5.4.0, where a player can add or subtract items from another player's inventory. The connected advisories confirm public details: Debian fixed to newer Minetest versions (e.g., Bullseye: 5.3.0+repack-2.1+deb11u1; oldstable Buster: 0.4.17.1+repack-1+deb10u1...

CVE-2023-39947

CVE-2023-39947 affects eProsima Fast DDS (C++ DDS) prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6. The root cause is malformed PID_PROPERTY_LIST parameter handling that can cause a heap overflow at a different program counter, enabling a remote crash of a Fast-DDS process. A patch exists in t...

CVE-2025-38614

The CVE CVE-2025-38614 affects the Linux kernel eventpoll/epoll component. The vulnerability stemmed from semi-unbounded recursion in ep_loop_check_proc() and related upwards/downwards path checks, enabling depths up to ~500 in certain graphs before a fix. The fix introduces subtree depth trackin...

CVE-2025-39824

The CVE CVE-2025-39824 affects the Linux kernel HID subsystem. A crafted HID descriptor can trigger a use-after-free in hid_input handling during hidinput_connect() after hid_hw_start(), notably via ASUS HID devices (e.g., ASUS ROG N-Key keyboard). The root cause is that capability bitmaps may no...

CVE-1999-0732

The CVE-1999-0732 entry concerns the Debian smtp-refuser package. The issue arises in the package’s logging facility, which can be abused by local users to delete arbitrary files via symbolic links. This is a local-privilege and integrity concern (no confidentiality or availability impact stated ...

CVE-2000-0867

Kernel logging daemon (klogd) in Linux (sysklogd) is vulnerable due to a 'format bug' that fails to cleanse user-supplied format strings, enabling local users to gain root privileges by triggering malformed kernel messages. Mandrake MDKSA-2000:050-1 describes a patched klogd version; Debian patch...

CVE-2002-0875

The CVE-2002-0875 issue affects FAM (File Alteration Monitor) versions around 2.6.6 and 2.6.8, where an unprivileged user could learn the names of files restricted to the root group, constituting an information-disclosure flaw. Public advisories (e.g., Debian DSA-154, Red Hat RHSA-2005:005) descr...

CVE-2004-1142

CVE-2004-1142 affects Ethereal versions 0.9.0 through 0.10.7, where a remote attacker can trigger a denial of service (CPU consumption) by sending a malformed SMB packet. The OpenVAS/OSS advisories confirm Ethereal-related fixes and security updates across platforms (e.g., SLES9, Gentoo GLSA GLSA...

CVE-2009-4013

Multiple directory traversal vulnerabilities affect lintian across 1.23.x (up to 1.23.28), 1.24.x (up to 1.24.2.1), and 2.x before 2.3.2. The root cause involves unsanitized control field names/values and control files of patch systems, enabling remote attackers to overwrite arbitrary files or di...

CVE-2010-2490

CVE-2010-2490 applies to Mumble: murm ur-server and causes DoS from a malformed client query. The OSV entry notes a fix in the openSUSE Tumbleweed package mumble-1.2.17-1.2 (GA media), indicating that the vulnerability has been addressed in that release. Other connected sources reiterate the DoS ...

CVE-2011-2800

Technical details for CVE-2011-2800 are not publicly provided in the supplied connected documents; no explicit product/version/impact/fix information beyond the initial description is available here. Monitor for updated disclosures or vendor advisories.

CVE-2011-2910

The vulnerability CVE-2011-2910 affects the AX.25 daemon (ax25d) in ax25-tools prior to version 0.0.8-13. The issue is that the daemon does not check the return value of setuid, which is intended to drop privileges. If setuid fails, the process may continue running with root privileges, enabling ...

CVE-2011-3596

Polipo is affected: versions prior to 1.0.4.1 suffer a DoD vulnerability triggered by specially-crafted HTTP POST/PUT requests. The available connected sources reiterate the issue but do not provide product-specific exploit details beyond the general impact described. Remediation/version guidance...

CVE-2013-2859

CVE-2013-2859 affects Chromium/Google Chrome prior to 27.0.1453.110. The issue allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors. Debian and Gentoo advisories document this CVE along with other related Chromium/V8 flaws and indicate r...

CVE-2013-2870

CVE-2013-2870 is a use-after-free vulnerability in Chromium/Google Chrome prior to 28.0.1500.71 that allows a remote attacker to execute arbitrary code via crafted response traffic after a URL request. Multiple connected documents confirm the issue as a network-socket related use-after-free, with...

CVE-2013-4082

CVE-2013-4082 affects Wireshark 1.8.x before 1.8.8. The vwr_read function in wiretap/vwr.c does not validate the relationship between a record length and a trailer length in the IxVeriWave file parser, enabling a remote attacker to trigger a heap-based buffer overflow and cause an application cra...

CVE-2013-4133

CVE-2013-4133 affects kde-workspace up to version 4.10.4/before 4.10.5, where the plasma desktop has a memory leak. The root cause is a leak in plasma desktop components within kde-workspace, leading to potential resource exhaustion. Context from connected advisories shows patches in KDE openSUSE...

CVE-2013-5589

Cacti is affected by CVE-2013-5589 (SQL injection) in host.php via the id parameter. The initial description specifies impact on Cacti 0.8.8b and earlier. Public sources indicate that vulnerable versions include pre-0.8.8g/0.8.8b and that fixes were released in newer builds (e.g., 0.8.8c and late...

CVE-2013-7087

CVE-2013-7087 affects ClamAV prior to 0.97.7, where WWPack corrupts heap memory. This can enable memory corruption with potential arbitrary code execution or crash. Public details across NVD/OSV/CNVD confirm the vulnerability class and version, with remediation guidance: upgrade to 0.97.7 or newe...

CVE-2013-7371

CVE-2013-7371 affects node-connects prior to 2.8.2, where a cross-site scripting vulnerability exists in the Sencha Labs Connect middleware (resulting from an incomplete fix for CVE-2013-7370). Impact is XSS via the Connect middleware as described in multiple sources. A remediation is to update t...

CVE-2014-1716

CVE-2014-1716 is a cross-site scripting (UXSS) vulnerability in Google V8’s Runtime_SetPrototype function (runtime.cc) affecting Google Chrome/Chromium prior to 34.0.1847.116. Exploitation could allow remote attackers to inject script/HTML via unspecified vectors. Publicly documented fixes includ...

CVE-2014-9272

MantisBT 1.2.0a1 through 1.2.x before 1.2.18 is affected. The vulnerability stems from string_insert_href not properly validating the URL protocol, allowing remote XSS via the javascript:// protocol. Affected component: URL handling in string_insert_href. Impact: cross-site scripting that can be ...

CVE-2015-1207

CVE-2015-1207 is a double-free vulnerability in libavformat/mov.c of FFmpeg affecting Google Chrome 41.0.2251.0, exploitable via a crafted .m4a file to cause memory corruption and a denial of service. Publicly documented in OSV and Debian advisories, with Debian noting fixes in libav 6:11.12-1~de...

CVE-2015-1396

GNU patch before 2.7.4 is vulnerable to a directory-traversal via a symlink attack in a patch file, allowing remote write of arbitrary files. Root cause: incomplete fix for CVE-2015-1196. Affected: GNU patch (up to 2.7.3). Remediation: upgrade to 2.7.4 or later; no further details provided in the...

CVE-2015-6525

CVE-2015-6525 affects Libevent’s evbuffer API. Affected: Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta; also 1.4.x is split per ADT3 but not required for 2.0/2.1. The vulnerability arises from multiple integer overflows in functions including evbuffer_add, evbuffer_prepend, evbuffer_ex...

CVE-2016-1000236

CVE-2016-1000236 affects the node-cookie-signature package prior to v1.0.6. Root cause: a timing-attack due to a non-constant-time comparison in signature verification. Impact: under favorable network conditions, an attacker could deduce the secret by exploiting slight timing differences (per-cha...

CVE-2016-3982

OptiPNG contains an off-by-one error in bmp_rle4_fread() in pngxrbmp.c, affecting versions before 0.7.6. This defect can trigger a heap-based buffer overflow, potentially leading to denial of service or arbitrary code execution when processing crafted BMP/png images. Multiple connected sources co...

CVE-2017-0370

CVE-2017-0370 relates to MediaWiki and is caused by a failure of the spam blacklist to block encoded URLs in the file inclusion syntax’s link parameter. Affected software is MediaWiki versions prior to 1.28.1, 1.27.2, and 1.23.16. The impact is that encoded URLs can bypass the blacklist, potentia...

CVE-2017-14122

The CVE-2017-14122 issue affects unrar-free (unrar 0.0.1). It is a stack-based buffer over-read in unrarlib.c, related to ExtrFile and stricomp. Debian and OSV/NVD records confirm the vulnerability and provide a fixed package version (Debian 1:0.0.1+cvs20140707-1+deb9u1). Impact details from CVSS...

CVE-2017-8821

CVE-2017-8821 in Tor allows an attacker to cause the application to ask for a password by sending crafted PEM input signaling a public key requiring a password, triggering OpenSSL to prompt. Affected releases include Tor up to 0.3.0.12 and 0.3.1 before 0.3.1.9 (also older 0.2.x series as listed i...

CVE-2017-9929

lrzip 0.631 is affected by a stack-based buffer overflow in get_fileinfo (CVE-2017-9929), enabling DoS via crafted files. Debian/Ubuntu advisories (DLA-2725-1, USN-5171-1/2) indicate fixes in updated packages and list related CVEs (CVE-2017-8844, -8846, -9928, -9929, -2018-5650, -2018-5747, -2018...

CVE-2018-16587

The CVE-2018-16587 issue affects Open Ticket Request System (OTRS) on 4.0.x up to 4.0.32, 5.0.x up to 5.0.30, and 6.0.x up to 6.0.11. An attacker can send a crafted email; if a user with admin permissions opens it, the OTRS web server user’s write-accessible files can be deleted. This is triggere...

CVE-2018-16948

CVE-2018-16948 affects OpenAFS before 1.6.23 and 1.8.x before 1.8.2, where several RPC server routines did not fully initialize output variables before returning, leaking memory contents from stack and heap. The issue arises in the OpenAFS cache manager acting as an Rx server for the AFSCB servic...

CVE-2018-16949

OpenAFS contains a vulnerability (CVE-2018-16949) where several RPC input variables are defined as unbounded arrays, only limited by the 4 GB length field. An unauthenticated attacker could send large inputs to exhaust server resources and cause denial of service. Affected versions are OpenAFS be...

CVE-2018-20761

GPAC 0.7.1 and earlier are affected by a Buffer Overflow in gf_sm_load_init (scene_manager.c) of libgpac_static.a. The issue is described across multiple advisories (USN-3926-1, MGASA/OSV/DLA entries) and can cause a crash and, in some disclosures, potentially arbitrary code execution when a spec...

CVE-2019-13222

CVE-2019-13222 affects the stb_vorbis draw_line() path in the stb library (stb_vorbis) with an out-of-range read caused by an unchecked NULL returned by get_window(). The public records in connected docs show this is addressed by vendor updates (e.g., openSUSE-SU-2025:0039-1 for stb, Debian DLA-3...

CVE-2020-11728

CVE-2020-11728 affects DAViCal Andrew's Web Libraries (AWL) up to version 0.60. The flaw is weak session management: session keys are not hard-to-guess, enabling impersonation via guessed microsecond time and incrementing session_id. Debian/DSA-4660-1 and USN-4539-1 describe fixed versions (e.g.,...

CVE-2020-15476

In ndpi (Ntop nDPI) up to version 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle (lib/protocols/oracle.c). This is the concrete root cause and affects the Oracle dissector component of the ndpi library. CVSS details from the public records show an attac...

CVE-2020-29482

CVE-2020-29482 affects Xen up to 4.14.x via oxenstored. A guest can create xenstore paths in its own namespace that exceed the pathname limit, because management tools must use absolute paths and oxenstored enforces a limit on the client-specified path. This can cause some management tools and de...

CVE-2021-31863

CVE-2021-31863 affects Redmine. The issue is described as insufficient input validation in the Git repository integration, allowing Redmine users to read arbitrary local files accessible by the application server process. Affected versions are Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x b...

CVE-2021-36048

CVE-2021-36048 affects XMP Toolkit SDK 2020.1 and earlier and is due to Improper Input Validation, potentially leading to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a crafted file (user interaction). Public references in connected documen...

CVE-2021-36057

CVE-2021-36057 affects the XMP Toolkit SDK 2020.1 and earlier. The vulnerability is a write-what-where condition during the application’s memory allocation, which can cause mismatches in memory management and lead to local denial of service in the context of the current user. The issue is confirm...

CVE-2021-3694

LedgerSMB has a vulnerability where error messages were not sufficiently HTML-encoded, allowing an authenticated user to exploit a specially crafted URL to trigger remote code execution and information disclosure. The issue is documented across multiple advisories (CVE-2021-3694 and related CVEs)...

CVE-2021-45845

CVE-2021-45845 affects FreeCAD 0.19. The Path Sanity Check script is vulnerable to OS command injection via a crafted FCStd document, allowing arbitrary commands to be executed. The issue is tracked across multiple feeds (OSV, NVD) with CVSS scores: CVSS v3.1: 7.8 (HIGH), LOCAL exploit with UI re...

CVE-2022-28203

CVE-2022-28203 is a denial-of-service in MediaWiki. A DoS can occur when requesting Special:NewFiles with an actor condition, in installations affected by MediaWiki versions prior to 1.35.6, 1.36.x prior to 1.36.4, and 1.37.x prior to 1.37.2, due to very long running queries when many files exist...

CVE-2025-38539

CVE-2025-38539 : Linux kernel tracing fix. When a module loads and adds trace events, it now takes the trace_event_sem for write while adding the event, preventing possible corruption of the ftrace_events list if two modules load simultaneously. The patch also adds a lockdep_assert_held() on the ...