CVE-2025-39691

CVE-2025-39691 (Linux kernel) is a use-after-free in fs/buffer when bh_read() is used during ntfs3 mount, where a stack variable map_bh passed to ntfs_get_block_vbo() may be freed before end_buffer_read_sync(), risking stack overrun on put_bh. The issue is triggered in the I/O path for buffer hea...

CVE-2001-0690

CVE-2001-0690 describes a format-string vulnerability in Exim in batched SMTP mode that can let an unauthenticated remote attacker execute arbitrary code via format strings in SMTP headers. The entry specifies affected Exim versions: 3.22-10 (Red Hat), 3.12 (Debian), and 3.16 (Conectiva). Attack ...

CVE-2002-0912

CVE-2002-0912 affects in.uucpd (UUCP server) in Debian GNU/Linux 2.2; long input strings were not terminated properly, enabling remote denial of service (likely via buffer overflow). Debian DSA-129-1 fixes uucp with updated versions 1.06.1-11potato3 (potato) and 1.06.1-18 (woody); OpenVAS notes t...

CVE-2003-0098

CVE-2003-0098 concerns the apcupsd daemon (APC UPS management) with remote root-privilege risk due to buffer/format-string issues in the slave/server information path. Affected versions are apcupsd < 3.8.6 and 3.10.x

CVE-2004-0583

The CVE-2004-0583 entry concerns Webmin 1.140 and Usermin 1.070 where the account lockout function fails to parse certain character strings, enabling remote brute-force attempts to guess user IDs and passwords. Root cause: input parsing flaw in the account lockout logic. Impact is limited to unau...

CVE-2004-0833

CVE-2004-0833 affects Debian GNU/Linux Sendmail prior to 8.12.3 when sasl/sasl-bin is used. The Debian security advisory indicates that the Sendmail configuration script initializes the sasl database with a fixed username and password, enabling a remote attacker to use Sendmail as an open mail re...

CVE-2004-1027

CVE-2004-1027 describes a directory traversal vulnerability in unarj, exploited via the -x (extract) option to create/write files outside the archive directory when filenames include “..”. The impact documented across connected sources includes potential overwriting of arbitrary files and, in com...

CVE-2004-1139

CVE-2004-1139 corresponds to an unknown vulnerability in Ethereal’s DICOM dissector that affects version 0.10.4 through 0.10.7 and can be exploited remotely to crash the application, causing a denial of service. The connected advisories reference multiple vendor/security pages (Red Hat, Gentoo GL...

CVE-2010-4661

CVE-2010-4661 affects udisks prior to 1.0.3, where a local user can load arbitrary Linux kernel modules. The vulnerability is triggered by the udisks component handling module loading, enabling local privilege impact (I) with partial confidentiality, integrity, and availability implications. Mult...

CVE-2011-1934

CVE-2011-1934 affects the lilo bootloader: the lilo-uuid-diskid component causes lilo.conf to be world-readable in lilo 23.1, resulting in information disclosure about boot configuration. Documentation across Red Hat, Debian, Ubuntu, and OSV entries corroborates the same description; no further t...

CVE-2011-2818

CVE-2011-2818 is a use-after-free memory corruption in Chrome/Safari related to display box rendering, enabling remote code execution or DoS via a crafted web page. Affected: Google Chrome before 13.0.782.107; exploitation via elements with certain styles as siblings/children of floated elements....

CVE-2012-6136

CVE-2012-6136 affects the Linux tuned daemon (e.g., tuned 2.10.0) where the PID file is created with insecure permissions, enabling local users to kill arbitrary processes. Technical details across multiple advisories (SUSE, Debian/Ubuntu, Red Hat) confirm the same root cause and impact. Remediat...

CVE-2013-2484

Vulnerability: CVE-2013-2484 in Wireshark CIMD dissector. Affected software: Wireshark 1.6.x (before 1.6.14) and 1.8.x (before 1.8.6). Root cause/impact: A malformed CIMD protocol packet can cause the Wireshark application to crash, enabling a remote attacker to trigger a denial of service throug...

CVE-2013-2485

Wireshark CVE-2013-2485 affects the FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6. A malformed packet can cause a denial of service via an infinite loop. Patches exist in the referenced advisories to fix the issue (Wireshark 1.6.14 and 1.8.6).

CVE-2013-2858

The CVE-2013-2858 entry concerns a use-after-free in the HTML5 Audio implementation of Chromium/Open Chrome before 27.0.1453.110. This vulnerability could allow a remote attacker to cause a denial of service or potentially other unspecified impact via unknown vectors. Affected products include Ch...

CVE-2013-3555

CVE-2013-3555 affects Wireshark 1.8.x in the GTPv2 dissector (epan/dissectors/packet-gtpv2.c). It is triggered by calling incorrect functions in certain contexts related to ciphers, allowing remote attackers to crash the application via a malformed packet (DoS). Affected version: Wireshark 1.8.x ...

CVE-2014-3495

CVE-2014-3495 affects duplicity 0.6.24, with the root cause described as improper verification of SSL certificates. The CVSS v3.1 base score is 7.5 (HIGH), driven by confidentiality impact. Exploitation details, affected environments, and remediation steps are not provided in the supplied documen...

CVE-2014-4911

CVE-2014-4911 affectsPolarSSL: the ssl_decrypt_buf function in ssl_tls.c is vulnerable in 1.2.x before 1.2.11 and in 1.3.x before 1.3.8, allowing remote DoS (crash) via GCM cipher suites (as demonstrated with Defensics). Mitigation is upgrading to PolarSSL 1.2.11 or 1.3.8+ (or newer) where the is...

CVE-2014-9764

CVE-2014-9764 affects imlib2, specifically the GIF loader. A crafted GIF can cause a segmentation fault (DoS) in versions before 1.4.7. Connected advisories show multiple vendors addressing imlib2 GIF/PNM/GIF-w/o-colormap issues; patches upgrade imlib2 to at least 1.4.9 (openSUSE openSUSE-2016-60...

CVE-2016-3153

CVE-2016-3153 affects SPIP: 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1. The issue is a remote code execution vulnerability via content addition related to the filtrer_entites function, allowing an attacker to execute arbitrary PHP code. The provided connected documents consist...

CVE-2017-14121

CVE-2017-14121 affects unrarlib.c in unrar-free / unrar-gpl (version 0.0.1). The flaw is a NULL pointer dereference triggered by a crafted RAR archive, potentially causing an application crash. Debian and OSV/Nessus entries note this alongside related CVEs and report a fix in Debian’s unrar-free ...

CVE-2017-15574

CVE-2017-15574 affects Redmine before 3.2.6 and 3.3.x before 3.3.3, enabling stored XSS via an SVG attachment. The vulnerability is evidenced in multiple sources: the NVD entry and CNVD/Nessus listings confirm the SVG-based XSS in Redmine’s attachment handling. Debian security advisories (DSA-419...

CVE-2018-10060

CVE-2018-10060 affects Cacti prior to 1.1.37, where the sanitize_uri function in lib/functions.php fails to reject unintended characters, enabling cross-site scripting (XSS). The issue is described across multiple sources (Cacti CVE entry, CNVD CNVD-2018-08679, Debian DLA-2965-1, and OpenVAS entr...

CVE-2018-5747

CVE-2018-5747 is a use-after-free in lrzip 0.631 (Long Range ZIP) within ucompthread (stream.c) that could allow a remote attacker to cause a denial of service via a crafted lrz file. Affected product is lrzip; root cause is use-after-free in the decoding/stream path. Debian DLA-2725 fixes this i...

CVE-2019-13221

CVE-2019-13221 affects the stb_vorbis component (stb) in the compute_codewords() path. Multiple connected advisories (e.g., openSUSE-SU-2025:0039-1 and OSV-OPENSUSE-SU-2025:0039-1) describe a stack/buffer overflow in that area and list it among the fixes for stb via updated libstb packages. The v...

CVE-2019-13223

CVE-2019-13223 is a vulnerability in the stb_vorbis component of the stb library affecting multiple distributions (e.g., openSUSE, Debian). The root cause is a division by zero in predict_point() within Vorbis code, exploitable through crafted Vorbis data, with impacts documented as a crash/denia...

CVE-2025-38237

CVE-2025-38237 pertains to the Linux kernel, specifically the media: platform: exynos4-is code path. The issue arises in fimc_is_hw_change_mode(), where camera mode changes occur without waiting for hardware completion, risking data corruption or system hangs if subsequent operations race with ha...

CVE-2025-38491

CVE-2025-38491: In the Linux kernel, the mptcp fallback action and fallback decision were made atomic to fix a race condition reported by Syzkaller. The issue affected the Multipath TCP (MPTCP) path establishment logic, potentially enabling a race between fallback paths during connection setup. T...

CVE-2025-38602

CVE-2025-38602 affects the Linux kernel’s iwlwifi driver. Root cause: missing check for alloc_ordered_workqueue return value, which may yield NULL, leading to NULL dereference. Impact: local attacker could exploit a vulnerability with high impact on availability, per the CVSS metrics (LOCAL, LOW ...

CVE-2025-38706

In CVE-2025-38706, the Linux kernel ASoC core vulnerability arises when snd_soc_remove_pcm_runtime() is called with rtd == NULL, leading to a NULL pointer dereference. The issue was reproduced during topology loading and marking a link as ignore due to a missing hardware component; on module remo...

CVE-1999-0730

CVE-1999-0730 concerns the zsoelim program in the Debian man-db package, where a symlink attack allows local users to overwrite files. The vulnerability is described across multiple connected records (Red Hat, CVE listing, NVD) as a local attack with potential complete impact on confidentiality, ...

CVE-1999-0986

The CVE-1999-0986 entry concerns the Linux ping command (Linux 2.0.3x) where local users can cause a denial of service by sending oversized packets using the -R (record route) option. The available data identifies the affected component as the ping utility and the root cause as improper handling ...

CVE-2000-0229

The CVE-2000-0229 issue affects the gpm package, specifically gpm-root, which does not properly drop privileges. Local users can gain elevated group privileges by starting a utility from gpm-root, with the gpm-root running with root group privileges and a failed setgid behavior. Impact is local p...

CVE-2001-0441

CVE-2001-0441 describes a buffer overflow in the slrn news reader (wrapping and unwrapping functions) that allows remote code execution via a long message header. The vulnerability affects versions prior to the fixed releases cited in connected advisories: Debian DSA-040-1 and Mandrake MDKSA-2001...

CVE-2003-0440

CVE-2003-0440 concerns the semi MIME library and its fork wemi, where insecure temporary-file handling allows a local attacker to overwrite arbitrary files via a symlink attack. Public sources (NVD entry) cite semi up to version 1.14.5 and wemi up to 1.14.0 as vulnerable; Debian, Red Hat, and Ope...

CVE-2004-1090

CVE-2004-1090 affects Midnight Commander (mc) up to version 4.5.55, where a remote attacker could trigger a denial of service via a corrupt section header. Multiple issuances (RHSA, DSA, CentOS advisories, Debian) indicate mc updates were released to fix this and related issues (e.g., upgraded to...

CVE-2004-1095

CVE-2004-1095 describes multiple integer overflows in zgv 5.8 image readers (readbmp.c, readgif.c, readmrf.c, readpcx.c, readpng.c, etc.) that allow remote code execution via crafted image headers. Connected advisories identify the same issue across Gentoo/OpenVAS contexts (zgv, GLSA 200411-12; D...

CVE-2004-1174

The CVE-2004-1174 vulnerability affects Midnight Commander (mc) up to and including version 4.5.55, in which direntry.c contains the flaw that allows a denial of service via manipulating non-existing file handles. The description clearly states this is a denial of service condition caused by the ...

CVE-2005-1916

CVE-2005-1916 is documented in ekg-related advisories as a local vulnerability in the ekg package (linki.py contributed script). The issue arises from insecure temporary-file handling in contributed scripts, which can be exploited by a local attacker to overwrite/create files and, in at least som...

CVE-2005-2960

CVE-2005-2960 affects cfengine versions 1.6.5 and 2.1.16. The issue arises from insecure temporary file handling, allowing a local user to perform a symlink attack and overwrite arbitrary files owned by the user executing cfengine (likely root). The problem is tied to the vicf.in temporary files ...

CVE-2006-5873

CVE-2006-5873 affects l2tpns: Buffer overflow in cluster_process_heartbeat() of cluster.c can cause remote denial of service via a large heartbeat packet. Connected sources confirm the issue in l2tpns before 2.1.21. Debian security advisories indicate the patch is in 2.1.21-1 (unstable) with 2.0....

CVE-2007-2833

CVE-2007-2833 affects GNU Emacs 21; user-assisted attackers could crash Emacs by crafting GIF images in VM mode due to an image-size calculation issue. Mitigations are available via vendor advisories (Debian DSA-1316-1, Ubuntu USN-504-1, SUSE patches, Mandriva MDKSA-2007:133, etc.). OpenVAS/Red H...

CVE-2008-3325

CVE-2008-3325 affects Moodle 1.6.x (before 1.6.7) and 1.7.x (before 1.7.5). The described CSRF flaw allows remote attackers to modify profile settings and gain privileges as other users via links or IMG tags to the user edit profile page. Connected sources corroborate the vulnerability in Moodle’...

CVE-2010-4493

Summary: CVE-2010-4493 is a use-after-free in Google Chrome prior to 8.0.552.215, related to handling of mouse dragging events, causing a denial of service when exploited remotely. The connected sources confirm the issue in Chrome/WebKit contexts and document remediation via browser/webkit update...

CVE-2011-0703

The CVE-2011-0703 issue affects gksu-polkit prior to 0.0.3, where the xauth source file may contain arbitrary commands. This could allow an attacker to take over an administrator X11 session. Connected sources corroborate the same description (gksu-polkit

CVE-2011-1292

CVE-2011-1292 is a use-after-free vulnerability in Chrome’s frame-loader that allows remote denial of service and possibly other impact via unknown vectors, affecting Google Chrome (and Chromium) prior to 10.0.648.204. Connected advisories confirm multiple related issues (CVE-2011-1293, -1440, -1...

CVE-2013-2012

The CVE-2013-2012 entry affects autojump prior to 21.5.8. Local privilege escalation is possible when a Trojan horse named custom_install in the current working directory is exploited, granting elevated privileges to local users. The vulnerability is due to improper handling of a directory in the...

CVE-2013-2873

CVE-2013-2873 is a use-after-free vulnerability in Chrome/Chromium related to resource loading. Affected product: Google Chrome before 28.0.1500.71 (and Chromium components referenced in advisories). Impact per sources: potential denial of service and possibly other unspecified effects via exploi...

CVE-2013-3558

CVE-2013-3558 affects Wireshark’s PPP CCP dissector in the 1.8.x line. The vulnerable component is the dissect_ccp_bsdcomp_opt function in epan/dissectors/packet-ppp.c, which fails to terminate a bit-field list, enabling remote attackers to crash the application via a malformed packet. The adviso...

CVE-2013-6364

CVE-2013-6364 concerns the Horde Groupware Webmail Edition, where saving a search as a virtual address book is vulnerable to CSRF and XSS. The vulnerability arises in the webmail component when performing the save operation, enabling an attacker to induce cross-site requests or script execution i...