CVE-2025-68670

CVE-2025-68670 affects xrdp and related components (e.g., xorgxrdp). The bug is an unauthenticated, stack-based buffer overflow caused by improper bounds checking when processing user domain information during the connection sequence. Exploitation could lead to remote code execution with network ...

CVE-2000-0888

The CVE-2000-0888 entry describes a DoS in ISC BIND 8.2–8.2.2-P6 when processing SRV records. Connected documents confirm the vulnerability in BIND’s SRV handling (the “srv bug”) and state that remote attackers can crash named by sending an SRV record. Impact is denial of service; vulnerable comp...

CVE-2001-0138

CVE-2001-0138 affects wu-ftpd; the privatepw helper allows a local user to overwrite arbitrary files via a symlink attack in wu-ftpd before version 2.6.1-6. The issue stems from a temporary file handling weakness. Mitigation: upgrade wu-ftpd to 2.6.1-6 or newer (as reflected in Debian/Mandrake ad...

CVE-2003-0360

CVE-2003-0360 corresponds to multiple buffer overflow vulnerabilities in gPS prior to 1.0.0, enabling denial of service and possibly arbitrary code execution. Debian DSA-307 notes that gps versions around 1.1.0 fixed these issues (and related protocol/buffer bugs). Affected component: the gps gra...

CVE-2003-0618

The CVE-2003-0618 entry concerns multiple information-leak vulnerabilities in suidperl, affecting perl versions up to 5.6.1 and earlier. A local user could obtain information about files for which they lack permissions. The vulnerability is documented in Debian security advisories (DSA-431-1 and ...

CVE-2004-1340

Summary: CVE-2004-1340 affects the libpam-radius-auth package on Debian GNU/Linux 3.0, where the accompanying pam_radius_auth.conf was installed world-readable, potentially exposing secrets to all local users. The issue is Debian-specific (CAN-2004-1340) and was addressed in Debian security advis...

CVE-2005-1855

CVE-2005-1855 affects the Backup Manager (backup-manager) prior to version 0.5.8. The issue arises because backup files are created with world-readable default permissions, allowing local users to access potentially sensitive information. The Debian OpenVAS/NVD entries confirm the same behavior. ...

CVE-2008-6125

CVE-2008-6125 affects Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3. It is described as an unspecified vulnerability in the user editing interface that allows remote authenticated users to gain privileges via unknown vectors. The NVD listing provides CVSSv2 base score 6.5 (MEDIUM) with net...

CVE-2010-3674

TYPO3 (CMS/CMF) versions before 4.4.1 are affected by a cross-site scripting (XSS) vulnerability in the frontend search box. The issue arises from lack of proper validation of client-side data, enabling an attacker to inject scripts that run in a user’s browser. The available connected sources co...

CVE-2011-5326

CVE-2011-5326 concerns the image library imlib2 . The connected sources confirm a vulnerability in imlib2 prior to version 1.4.9 where the ellipse drawing code could trigger a division-by-zero when rendering a 2x1 ellipse, leading to a denial of service (application crash). The issue is addressed...

CVE-2012-5644

CVE-2012-5644 : The libuser component has an information disclosure vulnerability when moving a user’s home directory. The issue is confirmed across multiple feeds (NVD entry and downstream advisories/OpenVAS/Nessus references) and is described as enabling unauthorized access to confidential data...

CVE-2012-6111

CVE-2012-6111 affects gnome-keyring: when gnome_keyring_lock_all_sync is used, stored secrets are not discarded. Public metrics indicate confidentiality impact (C: partial per CVSS2; C:H per CVSS3). No exploitation details are provided in the connected documents, and remediation details are not s...

CVE-2013-1811

CVE-2013-1811 affects MantisBT prior to 1.2.13, where users with Reporter permissions can change any issue to the New status due to an access-control flaw. The impact is an improper state change/authorization weakness; CVSS metrics in the public entry indicate a MEDIUM base severity (approx. 4.3/...

CVE-2015-0857

CVE-2015-0857 affects tardiff. The vulnerability arises from shell metacharacters in the name of a tar archive or a file within the archive, allowing arbitrary command execution. Public references in the provided documents consistently describe this issue, with Debian noting a fix in tardiff vers...

CVE-2015-2927

CVE-2015-2927 : Affected components are node 0.3.2 and URONode prior to 1.0.5r3. The vulnerability allows remote attackers to cause a denial of service via bandwidth consumption. This is documented across multiple sources (NVD, SUSE, CNVD, CVE lists) with consistent description; exploitation deta...

CVE-2015-9267

CVE-2015-9267 affects NSIS (Nullsoft Scriptable Install System) before 2.49. The vulnerability arises from the use of temporary folder locations, enabling unprivileged local users to overwrite files, which can allow replacing either an installer plugin or the uninstaller with a trojan. In practic...

CVE-2017-9989

CVE-2017-9989 affects Ming/Ming-LIB libming 0.4.8, specifically util/outputtxt.c, where memory allocation mishandling leads to a remote denial of service via crafted input, causing a NULL pointer dereference (impact: availability). Connected sources confirm the root cause is within libming 0.4.8 ...

CVE-2018-0496

CVE-2018-0496 affects DFArc and DFArc2’s D-Mod extractor (and RTsoft’s Dink Smallwood HD / ProtonSDK before 3.14). A directory traversal flaw allows an attacker to overwrite arbitrary files on the user’s system. Connected advisories confirm vulnerable components include the D-Mod extractor in DFA...

CVE-2018-13054

CVE-2018-13054 affects Cinnamon 1.9.2–3.8.6 where cinnamon-settings-users.py runs as root and can overwrite any user’s ~/.face via symlink pointing to an arbitrary location, enabling a possible privilege escalation. Connected advisories (openSUSE, Fedora, SUSE, Mageia, Ubuntu) report a fix for th...

CVE-2018-14337

The CVE-2018-14337 issue affects mruby 1.4.1 where the CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c can overflow a signed integer, potentially causing out-of-bounds memory access because mrb_str_resize does not check for a negative length. This is documented across multiple connected source...

CVE-2018-8754

CVE-2018-8754 concerns the libevt library (Windows Event Log EVT format). The issue arises in the function libevt_record_values_read_event() in libevt_record_values.c, prior to 2018-03-17, where there is insufficient validation for out-of-bounds values of user SID data size, strings size, or data...

CVE-2019-9972

The CVE-2019-9972 issue affects 3CX Phone System (Debian-based) version 16.0.0.1570, where an authenticated attacker can run arbitrary commands as the phonesystem user due to mishandling of a local input pattern: " followed by ". The vulnerability is a command injection in the PhoneSystem Termina...

CVE-2025-38513

CVE-2025-38513 : Linux kernel WiFi zd1211rw driver fix for a potential NULL pointer dereference in zd_mac_tx_to_dev(). The patch adds a NULL check before calling zd_mac_tx_status() to handle the race where skb = __skb_dequeue(q) can return NULL after the distance between queue-length checks and d...

CVE-2025-39795

CVE-2025-39795 involves a kernel block layer (blk_stack_limits) overflow where chunk_sectors could exceed an unsigned int when interpreted in bytes. The concrete fix, documented in multiple advisories (e.g., Ubuntu USN entries and Oracle/Linux ELSA/DLA), changes the validation to operate on secto...

CVE-2025-39823

CVE-2025-39823 is a Linux kernel KVM/CPU virtualization vulnerability affecting x86 where indices from the guest (min, dest_id) were used with array_index_nospec after bounds checks. The issue enables speculative execution side-channel leakage affecting confidentiality, integrity, and availabilit...

CVE-2025-39883

CVE-2025-39883 affects the Linux kernel memory-management path mm/memory-failure, where unpoisoning memory can trigger VM_BUG_ON_PAGE(PagePoisoned(page)) due to checking PG_HWPoison flags on an uninitialized page. The root cause described in the initial and connected advisories is the uninitializ...

CVE-2025-39885

CVE-2025-39885 affects the OCFS2 filesystem in Linux kernels. The vulnerability stems from a recursive semaphore deadlock during fiemap processing of a specially crafted mmap’ed file: ocfs2_fiemap() takes a read lock on ip_alloc_sem, then fiemap_fill_next_extent() accesses the extent list while a...

CVE-1999-0457

CVE-1999-0457 concerns the Linux ftpwatch program. The connected Red Hat CVE entry reiterates that Linux ftpwatch program allows local users to gain root privileges , i.e., a local-privilege-escalation vulnerability. The available documents do not specify affected distributions, versions, or the ...

CVE-1999-0831

The CVE-1999-0831 entry describes a denial-of-service affecting Linux syslogd caused by a large number of concurrent connections. According to the description, the vulnerability impacts availability (partial) with no confidentiality or integrity impact. No vendor/version specifics or remediation ...

CVE-2000-0607

Technical details about CVE-2000-0607 are not provided in the supplied connected documents. The description in the Initial document notes a buffer overflow in KON on Linux, but no affected versions, impact specifics, or remediation are disclosed here. Monitor for updates.

CVE-2001-1561

CVE-2001-1561 describes a buffer overflow in Xvt 2.1 on Debian Linux 2.2 that allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. The issue stems from argument handling in xvt, enabling code execution with elevated privileges because xvt is installed setuid root....

CVE-2004-0964

CVE-2004-0964 concerns Zinf Audio Player. The available connected sources confirm a stack/buffer overflow vulnerability in Zinf Audio Player 2.2.1 (Windows) and older Linux builds triggered by crafted .pls files. Affected component: PLS file handling in Zinf; root cause: insufficient bounds check...

CVE-2004-1009

Summary (CVE-2004-1009) Midnight Commander (mc) versions up to 4.5.55 are affected. The vulnerability allows a remote attacker to trigger a denial of service (infinite loop) via unknown attack vectors. Public sources in the connected documents tie this CVE to multiple advisories (e.g., RHSA-2005:...

CVE-2005-4347

CVE-2005-4347 affects Linux 2.4 kernel patch kernel-patch-vserver (and 2.x) for Debian; the chroot barrier is not set correctly in util-vserver, potentially permitting unauthorised escapes from a vserver to the host. OpenVAS/Debian DSAs describe that this vulnerability is limited to the 2.4 patch...

CVE-2015-5727

CVE-2015-5727 affects Botan BER decoder. Multiple connected advisories (Debian DSA-3565, OpenVAS NASL) confirm the issue: the BER decoder could allocate a large amount of memory when processing a length field, enabling a denial of service through memory exhaustion. Affected: Botan 1.10.x before 1...

CVE-2015-8473

Redmine's CVE-2015-8473 affects the Issues API: before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2, remote authenticated users could read changeset messages and obtain sensitive information from related changesets in other projects due to insufficient access checks. The issue is a informati...

CVE-2016-1000108

CVE-2016-1000108 affects yaws before 2.0.4. The vulnerability stems from not addressing RFC 3875 section 4.1.18 namespace conflicts, leaving CGI applications exposed to untrusted client data in the HTTP_PROXY environment variable. An attacker could cause a CGI application's outbound HTTP traffic ...

CVE-2016-1235

CVE-2016-1235 affects the OAR workload manager prior to 2.5.7 through its oarsh script. The vulnerability allows remote authenticated users within a cluster to access sensitive information and potentially escalate privileges via issues related to OpenSSH options. Affected component: oarsh in OAR ...

CVE-2017-0367

MediaWiki before 1.28.1 / 1.27.2 is affected by an insecure use of a temporary directory for LocalisationCache, causing insecure handling when the directory defaults to the system temp directory. Root cause: unsafe temporary-directory usage. Impact (as stated/implied): partial confidentiality, in...

CVE-2018-7871

CVE-2018-7871 corresponds to a heap-based buffer over-read in libming 0.4.8. Specifically, the getName function in util/decompile.c handles CONSTANT16 data and, under crafted input, can cause a denial of service (and potentially other impacts) due to memory over-reads. The connected advisories co...

CVE-2019-11579

CVE-2019-11579 affects the dhcpcd DHCP client (dhcpcd) before 7.2.1. It is caused by a 1-byte read overflow in the DHO_OPTSOVERLOADED handling in dhcp.c. The documented remediation is to upgrade to version 7.2.1 or apply vendor patches that address this issue.

CVE-2019-13217

CVE-2019-13217 affects stb_vorbis (part of the stb library) with a heap buffer overflow in start_decoder. Public advisories confirm impact as a potential denial of service or arbitrary code execution when loading crafted Ogg Vorbis files. Patches are issued across multiple distros: openSUSE/SUSE ...

CVE-2019-13218

CVE-2019-13218 affects stb_vorbis via a stack buffer overflow in compute_codewords(). Multiple advisories (openSUSE-SU-2025:0039-1, Debian DLA-3305-1) list stb as impacted and describe a fix by upgrading to patched libstb/stb. Affected product: stb_vorbis (library/stb). Root cause: stack buffer o...

CVE-2025-38503

CVE-2025-38503 : Linux kernel BTRFS vulnerability with block_group_tree enabled can trigger an assertion while rebuilding the free space tree, causing a kernel BUG and machine halt. The issue occurs when processing an empty block group (no extents/items) and a ret value of 1 is returned by btrfs_...

CVE-2025-38520

In CVE-2025-38520, the Linux kernel’s DRM/AMDKFD path could deadlock during MMU notifier callbacks when a process exits, potentially leaking VRAM. The root cause was calling mmput from the MMU notifier callback, risking release of the mm struct and exit_mmap/free_pgtable. The fix takes a non-zero...

CVE-2025-38543

CVE-2025-38543 is a Linux kernel vulnerability affecting the drm/tegra nvdec path. The root cause is a missing NULL check after dma_alloc_coherent, resolved by aligning with Robin's fix for vic.c (DMA API misuse). The impact, per the entry, is a HIGH availability impact with no confidentiality or...

CVE-2025-38577

CVE-2025-38577 affects the f2fs component of the Linux kernel. A use-after-free in the f2fs inode handling path leads to a KASAN failure observed during inode writeback (f2fs_update_inode/page, f2fs_write_inode) and can trigger a crash when the kernel attempts to delete a list entry in __list_del...

CVE-2025-38691

Technical details about CVE-2025-38691 are not publicly provided in the supplied connected documents. Monitor vendor advisories (Debian, Mageia, Amazon Linux) for patches and mitigations and update accordingly.

CVE-2025-38725

CVE-2025-38725 affects the Linux kernel net: usb: asix_devices driver handling of ax88772 MDIO bus. Without a phy_mask, the driver could create up to 32 MDIO phy devices (addresses 0x00–0x1f). Only one main phy binds to the net phy driver, causing issues during suspend/resume where phy_polling_mo...

CVE-2025-39757

CVE-2025-39757 is a Linux kernel/ALSA USB-audio issue where UAC3 cluster segment descriptors were not validated for sizes against declared lengths or allocated buffers, enabling potential out-of-bounds (OOB) access. Connected advisories (Astra Linux and kernel security bulletins) confirm the vuln...