CVE-2018-10380

CVE-2018-10380 affects kwallet-pam in KDE KWallet prior to 5.12.6, where local users can exploit a symlink to obtain ownership of arbitrary files. The vulnerability stems from insecure permission handling in the PAM module, enabling local privilege elevation with complete confidentiality, integri...

CVE-2018-21016

CVE-2018-21016 affects GPAC 0.7.1; audio_sample_entry_AddBox() in isomedia/box_code_base.c allows a crafted file to trigger a heap-based buffer over-read, causing denial of service (application crash). Public docs confirm GPAC vulnerability details and downstream advisories (Debian DLA-2072-1 / M...

CVE-2018-3836

Leptonica 1.74.4 is affected by CVE-2018-3836 in gplotMakeOutput, where the gplot rootname can trigger a command injection leading to arbitrary code execution. This is a local-access vulnerability; CVSS base scores indicate HIGH severity. Public references and advisories note that an improved fix...

CVE-2020-8021

CVE-2020-8021 concerns Open Build Service (OBS). An improper access control vulnerability allows remote attackers to read files of an OBS package where sourceaccess/access is disabled. Affected OBS versions are prior to 2.10.5. Per available documents, the remediation is to upgrade to a fixed ver...

CVE-2021-28963

CVE-2021-28963 affects Shibboleth Service Provider prior to 3.2.1, where template generation uses attacker-controlled parameters, enabling content injection. Multiple connected sources (Red Hat, Ubuntu USN-4925-1, Debian/OSV entries) corroborate the vulnerability and indicate affected deployments...

CVE-2021-36051

CVE-2021-36051 is a heap-based buffer overflow in Exempi (XMP Toolkit SDK 2020.1 and earlier) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a crafted file, e.g., .cpp). Affected component: exempi (XMP Toolkit). P...

CVE-2022-24300

CVE-2022-24300 affects Minetest, where versions before 5.4.0 are vulnerable to an ItemStack meta injection flaw: attackers can add/modify arbitrary meta fields in the same item stack via saved user input. The OSV entry confirms the issue. Debian advisory DSA-5075-1 notes the vulnerabilities were ...

CVE-2022-38861

CVE-2022-38861 affects MPlayer and related tools (e.g., mencoder) built from SVN-r38374-13.0.1. The root cause is a memory corruption vulnerability in the function free_mp_image() in libmpcodecs/mp_image.c, which is cited along with other CVEs in multiple advisories. Impacts described across sour...

CVE-2022-43235

CVE-2022-43235 — libde265 heap-buffer-overflow . Libde265 v1.0.8 contains a heap-buffer-overflow in the function set by ff_hevc_put_hevc_epel_pixels_8_sse (sse-motion.cc), which can cause a Denial of Service when processing a crafted video file. The vulnerability is reported across multiple advis...

CVE-2025-38644

CVE-2025-38644 is a Linux kernel issue in the MAC80211 Wi‑Fi code. When a station not yet associated sent NL80211_TDLS_ENABLE_LINK, TDLS was processed before association, leaving sdata->u.mgd.tdls_peer uninitialized and triggering a WARN_ON() in code paths that expected a valid TDLS peer. The ...

CVE-2000-0112

Technical details for CVE-2000-0112 are not publicly available in the provided documents. The description notes an insecure Debian MBR issue, but no confirmable affected products, versions, impact, or mitigations are present here. Monitor for updates.

CVE-2000-0606

The CVE describes a buffer overflow in the kon program within Kanji on Console (KON) on Linux. The vulnerability is triggered by a long -StartupMessage parameter in KON, potentially allowing local users to gain root privileges. No versions, affected distributions, or explicit exploit details are ...

CVE-2003-0362

CVE-2003-0362 is a buffer overflow in gPS before 0.10.2 that may allow local users to trigger a denial of service (SIGSEGV) in rgpsp via long command lines. The NVD entry notes the vulnerability originates from processing lengthy arguments, with a CVSSv2 base score of 5.0 (Partial availability im...

CVE-2004-0579

The CVE-2004-0579 entry concerns the Debian-related format-string vulnerability in the program named “super.” Public documentation in the connected sources confirms that this flaw exists in versions prior to 3.23 and allows a local user to execute arbitrary code with root privileges due to a faul...

CVE-2010-3438

Consolidated details for CVE-2010-3438 indicate a format-string error in libpoe-component-irc-perl, prior to v6.32. The vulnerability arises because the module does not strip carriage returns/line feeds from inputs to the privmsg handler, enabling an attacker to craft commands (e.g., some text\rQ...

CVE-2010-3439

CVE-2010-3439 affects alien-arena 7.33; multiple connected records describe a DoS by sending invalid parameters to the download command that crashes the server. Some sources additionally classify related entries as command injection, but the core CVE detail here is the DoS via the download parame...

CVE-2010-4664

In ConsoleKit before 0.4.2, a policy restriction bypass allows an authenticated system user to escalate privileges by initiating a remote VNC session. Affected components: ConsoleKit (pre-0.4.2). Root cause: unintended security policy bypass. Impact: privilege escalation with remote VNC, cross-us...

CVE-2011-1028

The documents collectively describe a vulnerability in Smarty3 involving the $smarty.template variable, which can allow attackers to potentially execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. Core details across sources confirm this is a P...

CVE-2011-4625

The CVE-2011-4625 entry concerns simplesamlphp and its XML encryption handling. In affected versions (before 1.6.3 for squeeze and before 1.8.2 for sid), the software allegedly mishandles XML encryption, which could allow remote attackers to decrypt or forge messages. The connected documents conf...

CVE-2012-6698

CVE-2012-6698 concerns dhcpcd 3.x: the decode_search function in dhcp.c allows a remote DHCP server to cause a denial of service via an out-of-bounds write in crafted responses. The provided connected documents confirm the affected component and impact; however, they do not specify a concrete pat...

CVE-2013-1910

CVE-2013-1910 affects the yum package, where improper handling of bad metadata can cause a denial of service and potentially other unspecified impact via a Trojan horse file in the metadata of a remote repository. The vulnerability is documented with high/critical severity (CVSS 2.0/3.1) and is r...

CVE-2013-3562

Wireshark 1.8.x prior to 1.8.7 contains a vulnerability (CVE-2013-3562) in the Websocket dissector’s tvb_unmasked function (epan/dissectors/packet-websocket.c) caused by multiple integer signedness errors. This allows remote attackers to crash the application via a malformed WebSocket packet (den...

CVE-2013-6275

CVE-2013-6275 affects Horde Groupware Webmail Edition up to 5.1.2, specifically in basic.php, with multiple CSRF issues. The root cause is missing CSRF protections in several functions; exploitation details are shown in the Exploit-DB entry (Horde Groupware Web Mail Edition 5.1.2 CSRF). The conne...

CVE-2015-3232

CVE-2015-3232 is an open redirect vulnerability in the Drupal Field UI module for Drupal 7.x prior to 7.38. The flaw allows remote attackers to redirect users to arbitrary sites and conduct phishing via the destinations parameter. The vulnerability is tied to the Drupal 7.38 release, which fixes ...

CVE-2015-3427

CVE-2015-3427 affects Quassel prior to 0.12.2, where a PostgreSQL restart/reconnection could allow a remote attacker to inject SQL via a backslash in a message. The issue stems from an incomplete fix for CVE-2013-4422. Several src/documented advisories confirm public fixes: Debian (Jessie: 1:0.10...

CVE-2015-5694

Technical details for CVE-2015-5694 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-6674

Summary: CVE-2015-6674 is a buffer underflow in the Debian inspircd package for wheezy and jessie/sid. The issue is tied to an incomplete fix of CVE-2012-1836 and is described as an additional issue, affecting inspircd before 2.0.5-1+deb7u1 (wheezy) and before 2.0.16-1 (jessie/sid). The connected...

CVE-2017-17511

KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, allowing argument-injection/parameter-injection via a crafted URL (related to prefs.c and worldgui.c). Documented across multiple feeds (OSV, CNVD, Debian DLA references). The li...

CVE-2017-17845

CVE-2017-17845 affects Enigmail (Thunderbird extension) before 1.9.9. The issue is improper random secret generation because Math.Random() is used by pretty Easy privacy (pEp). Impact: potential confidentiality/integrity/availability concerns as per CVSS metrics (base score 7.3–7.5, HIGH). Affect...

CVE-2017-7483

Rxvt 2.7.10 is vulnerable to denial-of-service via a crafted terminal escape code (-2^31), causing a non-invertible integer and an out-of-bounds read that leads to a segfault. Affected product: rxvt (VT102 terminal emulator for X). Root cause: improper handling of certain escape sequences. Impact...

CVE-2017-8819

CVE-2017-8819 affects Tor prior to 0.3.1.9 (and earlier branches up to 0.2.5.16, 0.2.6–0.2.8/0.2.9, 0.3.0/0.3.1) where the replay-cache protection for v2 onion services is ineffective. An attacker can inject multiple INTRODUCE2 cells to trigger a traffic-confirmation style issue, leading to poten...

CVE-2017-9928

CVE-2017-9928 affects lrzip 0.631, where a stack buffer overflow in lrzip.c:get_fileinfo (line 979) can cause a denial of service via a crafted file. Multiple connected advisories confirm vulnerability in lrzip and list affected releases and fixes: Debian 9 stretch fixed in 0.631-1+deb9u1; Ubuntu...

CVE-2018-11319

Syntastic (vim-syntastic) up to version 3.9.0 is vulnerable due to how config files are searched: it traverses from the project directory upward toward root, enabling arbitrary code execution if an attacker can write to a parent directory of the checked project. Published fixes exist: Debian stre...

CVE-2018-11743

CVE-2018-11743 affects mruby 1.4.1. Root cause: in kernel.c, init_copy calls initialize_copy for TT_ICLASS objects. Impact: can cause a denial of service via an uninitialized pointer used by mrb_hash_keys and may have unspecified other impact, including application crash. Exploitation details are...

CVE-2018-5294

CVE-2018-5294 affects Ming/libming 0.4.8. An integer overflow in readUInt32 (util/read.c) enables a remote attacker to cause a denial of service via a crafted SWF file. Public advisories (Gentoo GLSA/ Fedora/Debian) describe multiple vendor advisories and upgrades as fixes. Remediation is to upgr...

CVE-2018-7873

CVE-2018-7873 is a heap-based buffer overflow in libming 0.4.8 (getString in util/decompile.c for INTEGER data) that can cause denial of service. Public advisories confirm fixes were applied in later libming updates (e.g., ming 0.4.9) across Fedora, Mageia, and OSV records; affected packages were...

CVE-2018-9009

CVE-2018-9009 affects libming 0.4.8. A use-after-free in decompileJUMP (decompile.c) is reported. Related advisories (Mageia/Fedora/Nessus/OpenVAS entries) show this flaw as part of a set of fixes addressing multiple CVEs for libming 0.4.8, with backported patches in newer ming packages to mitiga...

CVE-2018-9132

CVE-2018-9132 affects libming 0.4.8: a NULL pointer dereference in getInt() of decompile.c can be exploited by a crafted SWF file to cause a denial of service. Public sources (NVD/Nessus/Mageia advisory) confirm the vulnerability in libming 0.4.8 and describe a DoS outcome; Mageia MGASA-2020-0032...

CVE-2020-22029

FFmpeg 4.2 is affected by a heap-based Buffer Overflow in libavfilter/vf_colorconstancy.c (slice_get_derivative, crossfade_samples_fltp), which can lead to memory corruption. This vulnerability is documented as CVE-2020-22029. Multiple connected advisories (USN-5472-1 for Ubuntu, Debian DSA-4990-...

CVE-2021-37149

CVE-2021-37149: Improper input validation in Apache Traffic Server header parsing allows request smuggling. Affected: ATS versions 8.0.0–8.1.2 and 9.0.0–9.1.0. The issue is mitigated by upgrading to patched releases (e.g., 8.1.3 or 9.1.1 per sources). If upgrading is not feasible, refer to vendor...

CVE-2023-26314

The CVE-2023-26314 entry affects the mono package for Debian prior to 6.8.0.105+dfsg-3.3, where the MIME type application/x-ms-dos-executable is linked to an un-sandboxed Mono CLR interpreter, enabling arbitrary code execution. Debian’s advisory (DLA-3343-1) fixes this in mono 5.18.0.240+dfsg-3+d...

CVE-2023-39534

CVE-2023-39534 affects eProsima Fast DDS (DDS implementation). A malformed GAP submessage can trigger an assertion failure, causing a crash. This impacts Fast DDS versions prior to 2.10.0, 2.9.2, and 2.6.5. Debian/Ubuntu OS advisories and OSSN listings note patches in these versions, so upgrading...

CVE-2025-38700

Concrete details found in connected documents confirm CVE-2025-38700 affects the Linux kernel's SCSI libiscsi path (iscsi_conn->dd_data) during iSER setup when ib_fast_reg_mr allocation fails. The root cause is unconditional initialization of iscsi_conn->dd_data when dd_size may be 0, leadi...

CVE-2025-38724

CVE-2025-38724 affects the Linux kernel; nfsd4_setclientid_confirm() could race with an expiring confirmed client due to not checking get_client_locked() return value, risking a use-after-free. The fix applies to scenarios with an extant confirmed client by obtaining a reference earlier and handl...

CVE-2025-39760

CVE-2025-39760 concerns the Linux kernel USB subsystem: usb_parse_ss_endpoint_companion() previously read descriptor fields without ensuring the descriptor length, enabling an out-of-bounds read in SS endpoint companion parsing. The fixed code now checks the size before accessing descriptor field...

CVE-1999-1496

CVE-1999-1496 affects Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 . Local users can infer the existence of arbitrary files by attempting to execute the target filename as a program, which yields different error messages depending on whether the file exists. This indicates a minor information-dis...

CVE-2001-0128

Zope before 2.2.4 contains a bug in how local roles are computed, enabling bypass of access restrictions and privilege escalation. The issue is documented across multiple sources (NVD/CVE entry and Mandrake MDKSA-2000:086) and affects Zope 2.2.4 and earlier. Remediation is to apply the update to ...

CVE-2001-0195

The CVE-2001-0195 issue affects sash

CVE-2005-0076

CVE-2005-0076 involves multiple buffer overflows in the XView library 3.2 that can allow local users to execute arbitrary code via setuid-enabled applications using the library. Affected component: XView 3.2 (library used by some local-sandboxed/setuid programs). Root cause: buffer overflow in XV...

CVE-2006-2016

CVE-2006-2016 is tied to phpLDAPadmin and is confirmed by multiple sources as a set of cross-site scripting (XSS) vulnerabilities in versions up to 0.9.8 and earlier. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific user-controllable inputs: the dn pa...