CVE-2013-2478

CVE-2013-2478 concerns the MS-MMS dissector in Wireshark, where epan/dissectors/packet-ms-mms.c mishandles string lengths, allowing a remote attacker to crash the application (denial of service) via a malformed packet that overflows an integer or contains embedded NULLs. The issue affects Wiresha...

CVE-2013-2488

The CVE-2013-2488 issue affects the DTLS dissector in Wireshark, with versions 1.6.x before 1.6.14 and 1.8.x before 1.8.6 lacking validation of the fragment offset prior to the reassembly state machine. This can cause a denial of service (application crash) due to writes to invalid memory when a ...

CVE-2013-4076

Wireshark 1.8.x before 1.8.8 has a buffer overflow in the PPP dissector (dissect_iphc_crtp_fh in epan/dissectors/packet-ppp.c) that can be triggered by a crafted packet, causing the application to crash (DoS). The vulnerability affects the PPP dissector in Wireshark 1.8.x era; exploitation would ...

CVE-2014-9771

CVE-2014-9771 is an integer overflow in Imlib2 before 1.4.7 that allows remote attackers to cause a denial of service (memory exhaustion or crash) via a crafted image by triggering an invalid read/write during image handling. Public reports in multiple advisories confirm the issue affect the Imli...

CVE-2015-2776

CVE-2015-2776 affects FreeXL versions earlier than 1.0.0i. The vulnerability resides in the parse_SST function and can be exploited remotely via a crafted shared strings table in a workbook to cause a Denial of Service (memory consumption). Public sources consistently describe DoS as the impact; ...

CVE-2015-7810

CVE-2015-7810 affects the libbluray MountManager class, where a time-of-check time-of-use (TOCTOU) race can occur during the expansion of JAR files. The available connected material confirms the vulnerable component (MountManager in libbluray) and the underlying issue (TOCTOU race condition) but ...

CVE-2015-7827

CVE-2015-7827 affects Botan cryptographic library: historical versions Bot an 1.10.x prior to 1.10.13 and 1.11.x prior to 1.11.22 are vulnerable. The root cause is a timing side-channel during PKCS#1 padding decoding, enabling remote attackers to mount million-message attacks. Public references i...

CVE-2017-0916

GitLab Community Edition (CE) 10.3 is vulnerable to remote code execution due to a lack of input validation in the system_hook_push queue via the web hook component. This is caused by improper input validation in the affected code path, as documented by multiple sources (NVD entry CVE-2017-0916; ...

CVE-2017-12874

CVE-2017-12874 affects the SimpleSAMLphp InfoCard module (version 1.0) and is caused by an incorrect check of return values in signature validation utilities, enabling spoofing of XML messages. The issue is documented in multiple security advisories (e.g., Debian DSA-4127-1) and is listed among a...

CVE-2017-2919

The CVE-2017-2919 issue concerns the libxls library (v1.3.4) where the function xls_getfcell has a stack-based buffer overflow vulnerability. A crafted XLS file can cause memory corruption, enabling remote code execution . Public references consistently tie this to the libxls code path used when ...

CVE-2017-8822

CVE-2017-8822 affects Tor relays with incompletely downloaded descriptors, enabling them to pick themselves in a circuit path and cause a degradation of anonymity. Descriptions across connected advisories confirm the issue and upstream fix is to upgrade to Tor 0.3.1.9 (or newer). Upstream notes a...

CVE-2018-11319

Syntastic (vim-syntastic) up to version 3.9.0 is vulnerable due to how config files are searched: it traverses from the project directory upward toward root, enabling arbitrary code execution if an attacker can write to a parent directory of the checked project. Published fixes exist: Debian stre...

CVE-2019-11222

CVE-2019-11222 affects GPAC 0.7.1, specifically the gf_bin128_parse function in utils/os_divers.c, where parsing a crafted_drm_file.xml can trigger a buffer overflow. The connected records corroborate this vulnerability detail and describe the issue as a buffer overflow in gpac’s handling of craf...

CVE-2019-14442

CVE-2019-14442 affects Libav 12.3, specifically the function mpc8_read_header in libavformat/mpc8.c, where processing a crafted input file can trigger an avio_seek infinite loop and 100% CPU utilization, enabling denial of service. Multiple connected advisories corroborate this issue and its reme...

CVE-2021-21842

The CVE-2021-21842 issue affects the GPAC Project on Advanced Content library v1.0.1, where an exploitable integer overflow in the MPEG-4 decoding path (processing an atom with the 'ssix' FourCC) leads to a heap-based buffer overflow and memory corruption. Unchecked arithmetic during decoding all...

CVE-2021-30163

CVE-2021-30163 is an information disclosure vulnerability in Redmine: older Redmine versions (before 4.0.8 and 4.1.x before 4.1.2) can allow an attacker to discover the names of private projects when issue journals contain changes to project_id values. Remediations vary by release: Debian LTS adv...

CVE-2023-26314

The CVE-2023-26314 entry affects the mono package for Debian prior to 6.8.0.105+dfsg-3.3, where the MIME type application/x-ms-dos-executable is linked to an un-sandboxed Mono CLR interpreter, enabling arbitrary code execution. Debian’s advisory (DLA-3343-1) fixes this in mono 5.18.0.240+dfsg-3+d...

CVE-2023-29415

CVE-2023-29415 affects libbzip3.a in bzip3 prior to version 1.3.0. The issue can cause a denial of service (process hang) when handling a crafted archive, due to improper interaction with libsais. Affects bzip3 users compiling or distributing the library prior to 1.3.0. The vulnerability increase...

CVE-2025-38601

Mode C: The CVE-2025-38601 entry concerns the Linux kernel, specifically the ath11k/ srng handling. The root cause described across sources is that after two crash/recovery cycles, ath11k_hal_srng_deinit() destroys srng lists but does not reset per-list ->initialized flags. A subsequent call t...

CVE-2025-38724

CVE-2025-38724 affects the Linux kernel; nfsd4_setclientid_confirm() could race with an expiring confirmed client due to not checking get_client_locked() return value, risking a use-after-free. The fix applies to scenarios with an extant confirmed client by obtaining a reference earlier and handl...

CVE-1999-0872

CVE-1999-0872 is a vulnerability in Vixie cron where a buffer overflow can be triggered by a long MAILTO value in a crontab, enabling local users to gain root access. The Red Hat CVE entry and related records confirm the issue but do not provide remediation steps or patched versions in the connec...

CVE-2003-0615

Technical details for CVE-2003-0615 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-0076

CVE-2005-0076 involves multiple buffer overflows in the XView library 3.2 that can allow local users to execute arbitrary code via setuid-enabled applications using the library. Affected component: XView 3.2 (library used by some local-sandboxed/setuid programs). Root cause: buffer overflow in XV...

CVE-2005-3847

CVE-2005-3847 affects Linux kernel 2.6.11 up to but not including 2.6.13 and 2.6.12.6, allowing local users to cause a deadlock by sending SIGKILL to a real-time thread that is dumping core. SUSE/ Debian OpenVOS references confirm the issue and its remediation. The known fix is in 2.6.12.6 via th...

CVE-2011-1488

CVE-2011-1488 affects rsyslogd prior to 5.7.6. The issue is a memory leak in how log messages are logged when RepeatedMsgReduction is enabled, which a local attacker can exploit to crash the rsyslogd daemon by flooding it with a sequence of repeated messages in a short time. Publicly available co...

CVE-2011-1799

CVE-2011-1799 affects Google Chrome/Chromium browser components (WebKit) where improper casts of variables during interaction with WebKit can enable remote denial of service or unspecified impact. Public sources in the Debian security advisories (DSA-2245-1) and Debian/OpenVAS entries confirm the...

CVE-2011-4361

MediaWiki before 1.17.1 does not check read permissions for action=ajax, enabling remote data leakage on private wikis. Exploitation can occur by abusing SpecialUpload::ajaxGetExistsWarning or via extensions such as CategoryTree, ExtTab, and InlineEditor. No explicit remediation is provided in th...

CVE-2013-6461

Nokogiri gem versions 1.5.x and 1.6.x are affected by a DoS vulnerability when parsing XML entities due to failing to apply limits. The issue is described across multiple connected sources (SUSE, Ubuntu, Debian security trackers, RubyGems advisories, and NVD). The CVE entry itself lists DoS as th...

CVE-2013-6890

CVE-2013-6890: DenyHosts 2.6 contains an incorrect regular expression in the SSH authentication log parser. This can allow a remote attacker to trigger a Denial of Service by submitting crafted login names, potentially causing incorrect blocking of IPs. Affected software/version: DenyHosts 2.6. I...

CVE-2014-0159

CVE-2014-0159 affects OpenAFS: the GetStatistics64 RPC in OpenAFS 1.4.8 before 1.6.7 is vulnerable to a buffer overflow that can cause a remote denial of service (crash). Connected advisories confirm the issue exists in OpenAFS before 1.6.7 and indicate remediation by upgrading to newer OpenAFS r...

CVE-2014-9057

Summary of CVE-2014-9057 (Movable Type SQLi) : A SQL injection in the XML-RPC interface of Movable Type affected versions including 5.x up to 5.18, 5.2.x prior to 5.2.11, and 6.x prior to 6.0.6. The vulnerability allowed remote attackers to execute arbitrary SQL commands via unspecified vectors. ...

CVE-2016-2057

The CVE-2016-2057 issue affects Xymon 4.1.x, 4.2.x, and 4.3.x up to 4.3.25, where an internal IPC message queue is created with weak permissions (666). This allows a local user to inject arbitrary messages by writing to the queue, bypassing network ACLs. Related advisories (Debian DSA-3495-1; Mag...

CVE-2016-4024

CVE-2016-4024 affects imlib2 prior to 1.4.9 on 32-bit platforms, caused by an integer overflow in image dimension handling that leads to an out-of-bounds heap write and remote code execution. Connected advisories (Gentoo GLSA-201611-12, Ubuntu USN-3075-1, Fedora advisories) confirm imlib2 remote ...

CVE-2016-4571

CVE-2016-4571 affects the mxml library. The vulnerability is in the function mxml_write_node (file mxml-file.c) and can allow remote attackers to cause a denial of service via crafted XML, affecting versions 2.9, 2.7 and possibly earlier. Several advisories document fixes: Debian/DLA-1641-1 notes...

CVE-2017-0357

CVE-2017-0357 is a heap-overflow flaw in the -tr loader of iucode-tool, affecting versions from v1.4 up to, but not including, v2.1.1. The vulnerability can cause SIGSEGV or heap corruption. Multiple connected records confirm the issue and point to downstream fixes: OpenSUSE OSV entry notes that ...

CVE-2017-0368

CVE-2017-0368 affects MediaWiki where the flaw enables rawHTML mode to apply to system messages in affected builds (MediaWiki

CVE-2017-11732

CVE-2017-11732 is a heap-based buffer overflow in Ming 0.4.8 (util/decompile.c: function dcputs called via decompileIMPLEMENTS) that allows denial of service via a crafted SWF file. Connected sources (GLSA 201904-24, Fedora/OpenVAS/NASL entries) confirm the vulnerability in Ming 0.4.8 along with ...

CVE-2017-17848

CVE-2017-17848 affects Enigmail before 1.9.9. It describes signature spoofing for multipart/related messages: a signed part can be referenced with a cid: URI but not displayed, making the recipient see a signed message while none of the signed text is actually shown. Connected sources indicate fi...

CVE-2018-1000098

Teluu PJSIP (Teluu PJProject) vulnerability CVE-2018-1000098: an Integer Overflow in the pjmedia SDP parser affects version 2.7.1 and earlier, potentially causing a crash when handling a specially crafted message. The issue has been fixed in version 2.7.2. Affected products are PJSIP/PJProject bu...

CVE-2018-7876

CVE-2018-7876 is a memory exhaustion vulnerability in libming 0.4.8. The issue is in parseSWF_ACTIONRECORD (util/parser.c) and can cause a denial of service via a crafted SWF file. Connected documents confirm libming 0.4.8 is affected and that multiple advisories (Fedora/Mageia) reference fixes/p...

CVE-2020-36426

An explicit technical detail: CVE-2020-36426 affects Arm Mbed TLS prior to 2.24.0, where mbedtls_x509_crl_parse_der has a one-byte buffer over-read. The connected documents corroborate this in multiple advisories (e.g., GLSA-202301-08 and Debian DLA/Debian advisories) and note a fixed release in ...

CVE-2025-38514

CVE-2025-38514 affects the Linux kernel RXRPC path. When an AF_RXRPC service socket is opened/bound and calls are preallocated, rxrpc_alloc_incoming_call() may oops if the rxrpc_backlog struct is not allocated yet. The fix returns NULL from rxrpc_alloc_incoming_call() when no backlog exists, caus...

CVE-2025-38540

CVE-2025-38540 relates to the Linux kernel HID quirk handling for two Chicony Electronics HP 5MP Cameras (USB IDs 04F2:B824 and 04F2:B82C). The vulnerability arises because the HID sensor interface is non-functional by design, and attempting to access it via iio_info can cause the system to hang ...

CVE-2025-38565

CVE-2025-38565: In the Linux kernel perf_mmap() path, if buffer allocation fails the code still invokes event_mapped(), which can increment perf_rdpmc_allowed on x86 and leaks references because perf_mmap_close() is not called. The documented fix is to return early on failure to prevent the refer...

CVE-2025-38574

CVE-2025-38574 affects the Linux kernel PPTP transmit path (pptp_xmit). A missing bound check on skb length could allow reading uninitialized data in pptp_xmit(), similar to changes made for ppp_sync_txmunge. The issue is fixed by the upstream commit aabc6596ffb3 and related bound-checking change...

CVE-2025-38670

CVE-2025-38670 affects ARM64 Linux kernel. The vulnerability arises in cpu_switch_to() and call_on_irq_stack() where masking and saving the DAIF state and SCS pointers are not atomic across stack switches, allowing a race during task/IRQ stack transitions. Interrupts (SErrors/Debug Exceptions) ca...

CVE-1999-1565

CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...

CVE-2000-0145

The CVE-2000-0145 issue affects gnucash on Debian GNU/Linux via the libguile.so library installed with world-writable permissions. The root cause is a world-writable libguile.so, which could allow unauthorized modifications to the file. Impact is described as enabling modification of the library,...

CVE-2001-0112

The CVE-2001-0112 entry concerns the splitvt utility: multiple buffer overflows in splitvt prior to 1.6.5 allow local users to execute arbitrary commands. Public details in the connected documents confirm affected software (splitvt) and the vulnerable version range (before 1.6.5), with Debian and...

CVE-2001-0139

Inn 2.2.3 is vulnerable to a local temporary-file race condition. The root cause is inn creating temporary files in a world-writable directory (or being configured to use one), enabling symlink attacks that may modify files writable by the news user. Mandrake/MDKSA-2001:010 notes a patch that rel...