CVE-1999-0872

CVE-1999-0872 is a vulnerability in Vixie cron where a buffer overflow can be triggered by a long MAILTO value in a crontab, enabling local users to gain root access. The Red Hat CVE entry and related records confirm the issue but do not provide remediation steps or patched versions in the connec...

CVE-2000-0145

The CVE-2000-0145 issue affects gnucash on Debian GNU/Linux via the libguile.so library installed with world-writable permissions. The root cause is a world-writable libguile.so, which could allow unauthorized modifications to the file. Impact is described as enabling modification of the library,...

CVE-2001-0112

The CVE-2001-0112 entry concerns the splitvt utility: multiple buffer overflows in splitvt prior to 1.6.5 allow local users to execute arbitrary commands. Public details in the connected documents confirm affected software (splitvt) and the vulnerable version range (before 1.6.5), with Debian and...

CVE-2001-0139

Inn 2.2.3 is vulnerable to a local temporary-file race condition. The root cause is inn creating temporary files in a world-writable directory (or being configured to use one), enabling symlink attacks that may modify files writable by the news user. Mandrake/MDKSA-2001:010 notes a patch that rel...

CVE-2004-0455

CVE-2004-0455 describes a local buffer overflow in www-sql (cgi.c) that allows local users to execute arbitrary code via a crafted web page processed by www-sql. The issue affects www-sql versions prior to 0.5.7. Debian’s DSA-523-1 fixes the vulnerability in version 0.5.7-17woody1, with reference...

CVE-2004-1175

CVE-2004-1175 affects Midnight Commander (mc); the fish protocol handler allows remote code execution via insecure filename quoting, potentially with shell metacharacters. Public advisories (e.g., Debian DSA-639-1, Red Hat RHSA-2005:512, CentOS advisory) describe the issue and list the affected M...

CVE-2006-4250

The CVE-2006-4250 entry corresponds to a heap-based buffer overflow in the man and mandb utilities (man-db) affecting 2.4.3 and earlier, exploitable by local users via crafted arguments to the -H flag to potentially run arbitrary code with the user’s privileges (often root in vendor advisories). ...

CVE-2011-4361

MediaWiki before 1.17.1 does not check read permissions for action=ajax, enabling remote data leakage on private wikis. Exploitation can occur by abusing SpecialUpload::ajaxGetExistsWarning or via extensions such as CategoryTree, ExtTab, and InlineEditor. No explicit remediation is provided in th...

CVE-2012-5644

CVE-2012-5644 : The libuser component has an information disclosure vulnerability when moving a user’s home directory. The issue is confirmed across multiple feeds (NVD entry and downstream advisories/OpenVAS/Nessus references) and is described as enabling unauthorized access to confidential data...

CVE-2013-1429

Summary of CVE-2013-1429 : The vulnerability affects Lintian prior to 2.5.12, wherein crafted symlinks can allow an attacker to gather information about the host system. This is a local issue (per CVSSv3: LOCAL) with a base score of 6.3 and a partial confidentiality impact (per CVSSv2: 4.3; per C...

CVE-2013-2876

CVE-2013-2876 affects Google Chrome up to version 28.0.1500.71. The issue is that browser extensions were not properly restricting the capture of screenshots, which could let a remote attacker glean sensitive information from a previously visited page via an interstitial-page flow. This is docume...

CVE-2014-0159

CVE-2014-0159 affects OpenAFS: the GetStatistics64 RPC in OpenAFS 1.4.8 before 1.6.7 is vulnerable to a buffer overflow that can cause a remote denial of service (crash). Connected advisories confirm the issue exists in OpenAFS before 1.6.7 and indicate remediation by upgrading to newer OpenAFS r...

CVE-2014-9057

Summary of CVE-2014-9057 (Movable Type SQLi) : A SQL injection in the XML-RPC interface of Movable Type affected versions including 5.x up to 5.18, 5.2.x prior to 5.2.11, and 6.x prior to 6.0.6. The vulnerability allowed remote attackers to execute arbitrary SQL commands via unspecified vectors. ...

CVE-2014-9271

CVE-2014-9271 affects MantisBT 1.2.x up to 1.2.18. It is a cross-site scripting (XSS) vulnerability in file_download.php that allows an attacker to inject arbitrary web script or HTML via a Flash file with an image extension (e.g., a .swf.jpeg filename) related to inline attachments. Root cause: ...

CVE-2015-0858

Summary: CVE-2015-0858 affects tardiff (Cool Projects). The vulnerability is a local symlink attack on a pathname under /tmp/tardiff-$$, allowing local users to write to arbitrary files. Debian security advisory DLA-564-1 fixes this in tardiff version 0.1-1+deb7u1 for Debian 7 (Wheezy). CVSS data...

CVE-2015-2684

CVE-2015-2684 affects the Shibboleth Service Provider (SP) prior to version 2.5.4. It allows a remote authenticated attacker to cause a denial of service (crash) by sending crafted SAML messages; multiple sources confirm a fix involves upgrading/shifting to newer SP releases (e.g., 2.5.4+ and rel...

CVE-2015-9267

CVE-2015-9267 affects NSIS (Nullsoft Scriptable Install System) before 2.49. The vulnerability arises from the use of temporary folder locations, enabling unprivileged local users to overwrite files, which can allow replacing either an installer plugin or the uninstaller with a trojan. In practic...

CVE-2016-9646

CVE-2016-9646 affects ikiwiki prior to version 3.20161229. The issue arises from ikiwiki calling CGI::FormBuilder->field (analogous to CGI->param) in a way that can enable commit metadata forgery. The vulnerability is tied to the CGI::FormBuilder context-dependent API usage and can be trigg...

CVE-2017-0357

CVE-2017-0357 is a heap-overflow flaw in the -tr loader of iucode-tool, affecting versions from v1.4 up to, but not including, v2.1.1. The vulnerability can cause SIGSEGV or heap corruption. Multiple connected records confirm the issue and point to downstream fixes: OpenSUSE OSV entry notes that ...

CVE-2018-0493

CVE-2018-0493 affects remctl’s server component, specifically remctld, up to version before 3.14. A use-after-free condition occurs when an attacker who is authorized to run a command that uses the sudo option can cause a daemon crash, memory corruption, or arbitrary command execution. Public det...

CVE-2018-1000098

Teluu PJSIP (Teluu PJProject) vulnerability CVE-2018-1000098: an Integer Overflow in the pjmedia SDP parser affects version 2.7.1 and earlier, potentially causing a crash when handling a specially crafted message. The issue has been fixed in version 2.7.2. Affected products are PJSIP/PJProject bu...

CVE-2018-1000637

The CVE-2018-1000637 issue affects zutils, specifically the zcat utility, where a buffer overflow exists in versions prior to 1.8-pre2. According to the connected documents, an attacker could trigger this via opening a crafted compressed file, potentially leading to denial of service or arbitrary...

CVE-2018-10061

CVE-2018-10061 affects Cacti prior to 1.1.37. The root cause is XSS due to certain htmlspecialchars calls being used without the ENT_QUOTES flag when the html_escape function in lib/html.php is not invoked. Publicly documented variants describe multiple XSS vulnerabilities in Cacti and explicitly...

CVE-2020-8020

CVE-2020-8020 concerns an improper neutralization of input during web page generation in open-build-service, enabling remote attackers to store arbitrary JavaScript and trigger XSS. Affected: openSUSE/open-build-service versions prior to 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb. Severity is mediu...

CVE-2023-24758

CVE-2023-24758 affects libde265 (v1.0.10) and is a NULL pointer dereference in the ff_hevc_put_weighted_pred_avg_8_sse function (sse-motion.cc), leading to a Denial of Service via crafted input. Multiple connected sources confirm the same issue and point to a fix in newer libde265 releases (e.g.,...

CVE-2023-31137

MaraDNS (Deadwood) suffers a remote DoS in versions 3.5.0024 and earlier due to an integer underflow in Decompress.c decomp_get_rddata when handling TXT records. If rdlength < total, len becomes negative and is passed to decomp_append_bytes, causing an attempted massive allocation and an exit ...

CVE-2025-38565

CVE-2025-38565: In the Linux kernel perf_mmap() path, if buffer allocation fails the code still invokes event_mapped(), which can increment perf_rdpmc_allowed on x86 and leaks references because perf_mmap_close() is not called. The documented fix is to return early on failure to prevent the refer...

CVE-2025-38572

CVE-2025-38572 affects the Linux kernel IPv6 path, where an attacker could craft IPv6 extension headers to overflow skb->transport_header via ipv6_gso_segment() when processing very long headers. The root cause is related to the 16-bit transport header field handling, with a suggested fix addi...

CVE-2025-39682

CVE-2025-39682 relates to the Linux kernel TLS ULP handling of TLS records during recvmsg(). The issue concerns zero-length records in the rx_list and how records are processed: a recvmsg() must handle either contiguous DATA records (any number) or one non-DATA record. If a record type changes mi...

CVE-1999-0831

The CVE-1999-0831 entry describes a denial-of-service affecting Linux syslogd caused by a large number of concurrent connections. According to the description, the vulnerability impacts availability (partial) with no confidentiality or integrity impact. No vendor/version specifics or remediation ...

CVE-2004-1091

CVE-2004-1091 affects Midnight Commander (mc) up to version 4.5.55 and earlier, where a remote user can cause a denial of service by triggering a null pointer dereference. The issue is listed among multiple MC vulnerabilities (with related CVEs) and is discussed in various advisories and vulnerab...

CVE-2005-0159

CVE-2005-0159 concerns insecure temporary file handling in the Debian-specific tpkg-* scripts within toolchain-source (version 3.0.4 in Woody; later fixes in 3.4-5 for sid). A local attacker could exploit symlink tricks to overwrite arbitrary files via insecure temporary files, enabling local pri...

CVE-2005-1855

CVE-2005-1855 affects the Backup Manager (backup-manager) prior to version 0.5.8. The issue arises because backup files are created with world-readable default permissions, allowing local users to access potentially sensitive information. The Debian OpenVAS/NVD entries confirm the same behavior. ...

CVE-2006-0050

CVE-2006-0050 : Debian’s snmptrapfmt vulnerability allows local users to overwrite arbitrary files via a symlink attack on a temporary log file. It arises from not preventing overwriting when writing temp files. Public docs corroborate a Debian advisory (DSA-1013-1) with a fixed version cited for...

CVE-2007-6599

CVE-2007-6599 describes a race condition in the OpenAFS fileserver that can cause a remote daemon crash (DoS) when file callbacks are acquired and returned concurrently, triggering linked-list operations without host_glock locking. Affected versions range from OpenAFS 1.3.40/1.3.50? through 1.4.5...

CVE-2011-4900

TYPO3 before 4.5.4 is affected by an Information Disclosure vulnerability in the backend. Multiple sources (NVD, OSV, CNVD, OpenVAS advisories) confirm the flaw allows disclosure of backend information due to a root issue in access/authorization handling, with the product version range clearly st...

CVE-2012-1104

CVE-2012-1104 affects phpCAS (Central Authentication Service) library version 1.2.2 from the Jasig project, where the security bypass arises from how proxying of services is managed. The vulnerability enables bypass of certain security controls due to the proxying logic rather than a flaw in the ...

CVE-2012-4533

This CVE affects ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16, where an XSS exists in the DiffSource._get_row function (lib/viewvc.py). The vulnerability allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line in th...

CVE-2013-1811

CVE-2013-1811 affects MantisBT prior to 1.2.13, where users with Reporter permissions can change any issue to the New status due to an access-control flaw. The impact is an improper state change/authorization weakness; CVSS metrics in the public entry indicate a MEDIUM base severity (approx. 4.3/...

CVE-2013-3556

Wireshark is affected by CVE-2013-3556 in the ASN.1 BER dissector (fragment_add_seq_common in epan/reassemble.c). The issue is an incorrect pointer dereference during a comparison, allowing a remote attacker to crash the application via a malformed packet (denial of service). Public fixes are doc...

CVE-2013-4394

CVE-2013-4394 concerns systemd’s SetX11Keyboard function. When PKLA is used to change group permissions on XKB layouts, local users in that group may modify the Xorg X11 Server configuration file and potentially gain privileges through vectors involving special and control characters. The vulnera...

CVE-2015-2927

CVE-2015-2927 : Affected components are node 0.3.2 and URONode prior to 1.0.5r3. The vulnerability allows remote attackers to cause a denial of service via bandwidth consumption. This is documented across multiple sources (NVD, SUSE, CNVD, CVE lists) with consistent description; exploitation deta...

CVE-2016-1000108

CVE-2016-1000108 affects yaws before 2.0.4. The vulnerability stems from not addressing RFC 3875 section 4.1.18 namespace conflicts, leaving CGI applications exposed to untrusted client data in the HTTP_PROXY environment variable. An attacker could cause a CGI application's outbound HTTP traffic ...

CVE-2016-10247

CVE-2016-10247 is a buffer overflow in the my_getline function of jstest_main.c in MuPDF (Artifex MuPDF) prior to 1.10, enabling a remote attacker to cause a denial of service via a crafted file (out-of-bounds write). Connected advisories indicate multiple related mupdf issues and a Debian LTS fi...

CVE-2016-2054

Xymon (formerly Hobbit) is affected by CVE-2016-2054 and related CVEs in 4.1.x–4.3.x prior to 4.3.25. The issue arises from improper handling of user-supplied input in the config command, which can trigger a stack-based buffer overflow via a long filename, enabling remote code execution or a deni...

CVE-2016-4570

CVE-2016-4570 affects the mxml library (mxml 2.9, 2.7, and earlier) via the mxmlDelete function in mxml-node.c, allowing denial of service (stack exhaustion) when processing crafted XML files. Connected advisories confirm this vulnerability and show patched packages in multiple distros: Debian (D...

CVE-2018-14337

The CVE-2018-14337 issue affects mruby 1.4.1 where the CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c can overflow a signed integer, potentially causing out-of-bounds memory access because mrb_str_resize does not check for a negative length. This is documented across multiple connected source...

CVE-2018-20004

CVE-2018-20004 affects Mini-XML (mxml) 2.12. It describes a stack-based buffer overflow in mxml_write_node (mxml-file.c) triggered via vectors involving a double-precision number and the substring . The issue is documented across multiple advisories (e.g., Mageia MGASA-2019-0159 and Fedora update...

CVE-2020-15569

MilkyTracker up to version 1.02.00 is affected by CVE-2020-15569 due to a use-after-free in PlayerGeneric destructor. Public references confirm the flaw in PlayerGeneric.cpp and variants across OSV/NVD records. Debian’s DLA-2292-1 fixes this and related CVEs in milkytracker by upgrading to 0.90.8...

CVE-2020-15954

KDE KMail 19.12.3 (aka 5.13.3) is affected by CVE-2020-15954 due to defaulting to unencrypted POP3 communication even when the UI shows encryption. Concrete references in connected docs identify the affected package as KDE components (kdepim-runtime/kmail) and note that the issue was fixed in dis...