CVE-2016-6211

Summary: CVE-2016-6211 affects Drupal 7.x up to 7.44 in the User module. Vulnerability: remote authenticated users can gain privileges by triggering a rebuild of the user profile form via contributed/custom code. Impact: privilege escalation as described in multiple sources. Evidence: references ...

CVE-2017-17847

CVE-2017-17847 affects Enigmail prior to 1.9.9, where the UI fails to clearly distinguish an attachment signature from a signature for the entire containing message, enabling signature spoofing. The related open-source advisories and vulnerability feeds (e.g., Mageia MGASA-2017-0477, Debian DLA-1...

CVE-2017-6307

CVE-2017-6307 affects the tnef project (MS-TNEF MIME unpacker). The issue is two out-of-bounds writes in mapi_attr_read() (src/mapi_attr.c) that could lead to invalid read/write operations, with the advisory stating vulnerable versions up to 1.4.13 and fixes delivered in newer releases. Fedora an...

CVE-2018-6315

CVE-2018-6315 affects Ming (libming) up through version 0.4.8. The vulnerability is in the outputSWF_TEXT_RECORD function (util/outputscript.c) where an integer overflow can lead to an out-of-bounds read, enabling denial of service or unspecified impact via a crafted SWF file. Connected advisorie...

CVE-2019-18603

OpenAFS vulnerable: versions before 1.6.24 and 1.8.x before 1.8.5 may leak information via uninitialized RPC output variables sent over the network during certain error conditions. Impact is information disclosure; patching to 1.6.24+ or 1.8.5+ (or newer) is the remediation. If deploying via vend...

CVE-2019-9971

The CVE-2019-9971 entry concerns PhoneSystem Terminal in 3CX Phone System (Debian-based installation) 16.0.0.1570. The issue is a privilege-escalation vulnerability where an attacker can gain root privileges by using sudo with the tcpdump command due to the -z (postrotate-command) option being un...

CVE-2020-35511

CVE-2020-35511 affects pngcheck: a global buffer overflow in pngcheck-2.4.0 (with 5 patches applied) can be triggered by a crafted PNG file, potentially enabling arbitrary code execution. Public advisories from Debian (DLA-3238-1) note fixes in pngcheck 3.0.3-1~deb10u2 for Debian 10; other entrie...

CVE-2021-36048

CVE-2021-36048 affects XMP Toolkit SDK 2020.1 and earlier and is due to Improper Input Validation, potentially leading to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a crafted file (user interaction). Public references in connected documen...

CVE-2025-0781

CVE-2025-0781 affects SimGear/FlightGear: a Nasal scripting sandbox bypass enables writing to arbitrary files the user can modify. Public advisories (Ubuntu USN-7965-1 and Fedora FEDORA-2025-725bba93b2, related Nessus entries) indicate remediation via updates; descriptions also note potential arb...

CVE-2025-38608

CVE-2025-38608 affects the Linux kernel (bpf/ktls). Description from connected docs: when sending plaintext data, ciphertext length was computed initially but not recalculated if plaintext length was later reduced by socket policy, resulting in buffers containing uninitialized data during ciphert...

CVE-2025-38684

CVE-2025-38684 affects the Linux kernel’s net/sched ETS implementation. The issue arose from purging unused DRR queues during ets_qdisc_change(), where the code used the new value of q->nbands for cleanup. The fix ensures the purge uses the old values of q->nbands (and q->nstrict), so pu...

CVE-2025-39902

The CVE-2025-39902 issue affects the Linux kernel mm/slub, where object_err() may access metadata for an invalid pointer, potentially crashing the kernel. The root cause is accessing object metadata when the pointer is invalid; a path is when alloc_consistency_checks() flags an invalid pointer du...

CVE-2025-62230

CVE-2025-62230 affects the X.Org X server family (Xwayland/Xkb handling). The issue is a use-after-free in the Xkb client resource removal path when a client disconnects, caused by improper cleanup of Xkb resources that frees the XkbInterest data but not the associated resource, potentially leadi...

CVE-2025-62231

The CVE-2025-62231 issue is a use-after-free/value overflow in the X.Org X server’s XkbSetCompatMap() that can overflow an unsigned short and cause memory corruption or a crash. Public advisories (ALMAS/ALAS) associate this with the Xorg X11/Xwayland stack and Xorg-server-Xwayland/Xorg components...

CVE-1999-0769

CVE-1999-0769 affects Vixie Cron on Linux systems. The vulnerability allows local users to modify parameters of sendmail commands by manipulating the MAILTO environment variable, as described in multiple sources. Root cause is misuse of MAILTO by cron the environment passed to mail-related comman...

CVE-2001-0456

Summary: CVE-2001-0456 affects ProFTPD in Debian 2.2 where the postinst script fails to properly adjust the “run as uid/gid root” setting when anonymous access is enabled, causing the server to run with elevated privileges. What’s affected: proftpd on Debian 2.2 (potato); issue in post-install co...

CVE-2003-0382

CVE-2003-0382 affects eterm 0.9.2 and describes a buffer overflow triggered by a long ETERMPATH environment variable, allowing local privilege escalation. The connected documents corroborate a Debian advisory (DSA-309-1) and OpenVAS entries noting that the remote host is missing a security update...

CVE-2004-1092

CVE-2004-1092 affects Midnight Commander (mc) 4.5.55 and earlier. The issue allows remote Denial-of-Service by causing mc to free unallocated memory (root cause: improper memory handling). The connected sources indicate a fix in Midnight Commander 4.6.0. Remediation: upgrade to MC 4.6.0 or newer ...

CVE-2005-2960

CVE-2005-2960 affects cfengine versions 1.6.5 and 2.1.16. The issue arises from insecure temporary file handling, allowing a local user to perform a symlink attack and overwrite arbitrary files owned by the user executing cfengine (likely root). The problem is tied to the vicf.in temporary files ...

CVE-2007-5730

CVE-2007-5730 : Heap-based buffer overflow in QEMU 0.8.2 (used by Xen and possibly other products) allows local users to execute arbitrary code via crafted data in the net socket listen option. The MiracleLinux AXSA advisories list this CVE among issues affecting Xen-related components and, in up...

CVE-2009-1073

Summary of CVE-2009-1073 : The nss-ldapd package (before 0.6.8) creates /etc/nss-ldapd.conf with world-readable permissions, allowing local users to read the bindpw (LDAP password) and potentially disclose credentials. Public sources (Debian, OpenVAS, Nessus) confirm the issue and reference fixes...

CVE-2010-3299

CVE-2010-3299 : The initial description indicates a padding oracle vulnerability in the encrypt/decrypt functions of Ruby on Rails 2.3. Connected documentation confirms this CVE and reiterates the padding oracle issue but does not provide specifics on affected versions beyond Rails 2.3, nor detai...

CVE-2010-3844

The CVE-2010-3844 entry concerns Ettercap before version 0.7.5, where an unchecked sscanf() call allows an insecure temporary settings file to overflow a stack-allocated, fixed-size buffer. Public documents in connected sources corroborate the same description. Impact indicators in the related CV...

CVE-2010-4654

Poppler before 0.16.3 has malformed commands that may cause stack corruption in the library. Affected component: poppler (pre-0.16.3). Impact per CVSS: HIGH with LOCAL attack vector, user interaction required; confidentiality, integrity, and availability for the affected scope can be compromised....

CVE-2011-2897

CVE-2011-2897 affects gdk-pixbuf through 2.31.1, where the GIF loader overflows a buffer during initialization of decompression tables due to an input validation flaw. The issue is documented with high/critical risk in the provided metrics (CVSS2/3.1). Red Hat, SUSE, and other entries reference t...

CVE-2012-6699

CVE-2012-6699 affects dhcpcd 3.x, where decode_search in dhcp.c can be triggered by a crafted DHCP response from a remote server, causing an out-of-bounds read and denial of service. Connected records confirm this vulnerability and link to advisories (e.g., Debian DSA-3534 and related OSV/NVD ent...

CVE-2012-6700

The CVE-2012-6700 issue affects dhcpcd 3.x where the decode_search function in dhcp.c fails to free allocated memory, enabling a remote DHCP server to trigger a denial-of-service via a crafted response. Root cause: improper memory deallocation in decode_search. Impact: denial of service (availabi...

CVE-2013-2868

CVE-2013-2868 affects Chromium/Google Chrome up to version 28.0.1500.71. The flaw occurs in common/extensions/sync_helper.cc where NPAPI extension synchronization proceeds without verifying a plugin permission setting, enabling a remote attacker to trigger unwanted changes to extensions through u...

CVE-2013-2869

Chromium/Chrome vulnerability CVE-2013-2869: out-of-bounds read in JPEG2000 image handling can be exploited to cause a remote denial of service. Affected versions include Chrome/Chromium up to 28.0.1500.71. Debian, Gentoo, and other advisories document the issue and state the fix is in Chromium 2...

CVE-2013-2879

Chromium/Chrome vulnerability CVE-2013-2879: Chrome before 28.0.1500.71 fails to correctly determine when a renderer process is trusted for sign-in and subsequent sync, enabling phishing via a crafted site. This affects Chrome/Chromium up to the 28.x branch and is described in multiple advisories...

CVE-2013-4077

CVE-2013-4077 affects the NBAP dissector in Wireshark 1.8.x before 1.8.8. The issue is an array index error in NBAP processing (nbap.cnf and packet-nbap.c) that can cause a denial of service (application crash) via a crafted packet. Documents validate the root cause and version bound; no exploit ...

CVE-2013-4233

CVE-2013-4233 affects libmodplug up to version 0.8.8.x (incl. 0.8.8.4) with an integer/heap overflow in load_abc.cpp when parsing crafted ABC headers, enabling potential remote denial of service and arbitrary code execution. Public advisories show that the fix is delivered by upgrading libmodplug...

CVE-2013-7448

CVE-2013-7448 concerns a path traversal in DidiWiki’s wiki.c, where the file-writer path in the API endpoint api/page/get fails to validate the page parameter, enabling remote attackers to read arbitrary files. Multiple connected sources reiterate the same vulnerability across various advisories ...

CVE-2014-9269

CVE-2014-9269 affects MantisBT, specifically the helper_api.php component. When Extended project browser is enabled, it allows remote attackers to inject arbitrary web script or HTML via the project cookie, enabling a cross-site scripting (XSS) vulnerability in MantisBT 1.1.0a1 through 1.2.x befo...

CVE-2015-6496

CVE-2015-6496 affects conntrackd in conntrack-tools 1.4.2 and earlier, where optional kernel modules may not be loaded before use. This can crash the daemon (denial of service) when processing DCCP, SCTP, or ICMPv6 traffic. Public advisories and vendor updates document the fix in newer packages (...

CVE-2015-7695

CVE-2015-7695 affects Zend Framework’s PDO adapters in versions before 1.12.16. The issue is that null bytes are not filtered in SQL statements, allowing remote attackers to execute arbitrary SQL via a crafted query. Impact is remote, with network access and high severity in typical assessments. ...

CVE-2016-2195

CVE-2016-2195 affects the Botan crypto library (C++). The root cause is an integer overflow in the PointGFp constructor used during ECC point decoding, which can trigger a heap-based buffer overflow when processing untrusted input. This could enable remote execution of code via a crafted ECC poin...

CVE-2017-11733

CVE-2017-11733 : Ming 0.4.8 is affected by a null pointer dereference in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c, leading to denial of service when processing a crafted file. Public advisories reference Ming/Fedora/Gentoo/OpenVAS entries; no explicit exploit de...

CVE-2017-13756

The Sleuth Kit (TSK) 4.4.2 contains CVE-2017-13756, where opening a crafted disk image triggers infinite recursion in dos_load_ext_table() (tsk/vs/dos.c) inside libtskvs.a, potentially causing a crash. Public notices across distributions report fixes: Debian’s sleuthkit package update (e.g., 4.4....

CVE-2017-16804

CVE-2017-16804 affects Redmine before 3.2.7 and 3.3.x before 3.3.4. The vulnerability lies in the reminders function (app/models/mailer.rb) which does not verify issue visibility, allowing remote authenticated users to disclose sensitive information by reading e-mail reminder messages. Affected v...

CVE-2017-2816

LibOFX 0.9.11 contains an exploitable buffer overflow in the tag parsing functionality. A crafted OFX file can cause a write out of bounds on the stack, potentially enabling remote code execution or a crash. Public advisories and CVE records consistently describe this vulnerability as CVE-2017-28...

CVE-2017-8808

CVE-2017-8808 is a cross-site scripting vulnerability in MediaWiki prior to 1.27.4, 1.28.x prior to 1.28.3, and 1.29.x prior to 1.29.2 when $wgShowExceptionDetails is disabled and the browser uses non-standard URL escaping. Public advisories (e.g., Debian DSA-4036, Mageia MGASA-2017-0429, Arch Li...

CVE-2018-1000041

CVE-2018-1000041 affects librsvg (renderer library used by the GNOME librsvg stack). The vulnerability is due to improper input validation in rsvg-io.c, which could cause leakage of a Windows username and NTLM password hash to remote attackers when processing a specially crafted SVG containing a ...

CVE-2018-10242

CVE-2018-10242 affects Suricata 4.0.4, where the SSH banner parsing in the SSH layer is vulnerable due to a missing length check in SSHParseBanner (app-layer-ssh.c). A malformed banner can cause an out-of-bounds read, as described in multiple sources, which could lead to DoS or potentially unauth...

CVE-2018-10380

CVE-2018-10380 affects kwallet-pam in KDE KWallet prior to 5.12.6, where local users can exploit a symlink to obtain ownership of arbitrary files. The vulnerability stems from insecure permission handling in the PAM module, enabling local privilege elevation with complete confidentiality, integri...

CVE-2018-21016

CVE-2018-21016 affects GPAC 0.7.1; audio_sample_entry_AddBox() in isomedia/box_code_base.c allows a crafted file to trigger a heap-based buffer over-read, causing denial of service (application crash). Public docs confirm GPAC vulnerability details and downstream advisories (Debian DLA-2072-1 / M...

CVE-2018-3836

Leptonica 1.74.4 is affected by CVE-2018-3836 in gplotMakeOutput, where the gplot rootname can trigger a command injection leading to arbitrary code execution. This is a local-access vulnerability; CVSS base scores indicate HIGH severity. Public references and advisories note that an improved fix...

CVE-2018-5251

CVE-2018-5251 affects Ming/libming, specifically libming 0.4.8. The issue is an integer signedness error in readSBits (util/read.c) that can be triggered by a crafted SWF file to cause a denial of service. Multiple connected advisories confirm the same vulnerability and its presence across distri...

CVE-2019-14443

CVE-2019-14443 affects Libav 12.3. The issue is a division by zero in range_decode_culshift in libavcodec/apedec.c, enabling remote denial of service (application crash); demonstrated by avconv. Associated documents confirm the vulnerability and reference exploitation context. Debian/LTS advisori...

CVE-2020-35631

CVE-2020-35631 describes multiple code-execution vulnerabilities in CGAL 5.1.1’s Nef polygon-parsing. The issues are caused by out-of-bounds reads and type confusion in the SNC_io_parser and related Nef/PM/SM parser code paths (e.g., read_sface, read_vertex, read_hedge, read_face, read_sloop, etc...