10003 matches found
CVE-2014-1935
The CVE-2014-1935 entry affects 9base versions 1:6-6 and 1:6-7, where temporary files are created insecurely, producing predictable filenames. Root cause and impact are described in the connected data; CVSS details from NVD indicate a base score of 5.3 (MEDIUM) for CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S...
CVE-2013-4134
OpenAFS is affected by CVE-2013-4134 due to weak DES encryption for Kerberos keys. Affected versions: OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26. Impact: remote attackers could obtain the service key. Remediation: upgrade to the fixed versions (OpenAFS 1.4.15+, 1.6.5+, or ...
CVE-2013-4584
CVE-2013-4584 affects Perdition before 2.2, where an error in handling outbound connections during STARTTLS for IMAP/POP causes ssl_outgoing_ciphers not to be applied. This results in weaker security for outbound connections; the literature does not provide exploit vectors, affected versions beyond
CVE-2014-2387
CVE-2014-2387 affects Pen 0.18.0, which has insecure temporary file creation. The vulnerability allows local attackers to exploit symlink attacks via temporary files such as "/tmp/webfile.html" and "/tmp/penctl.cgi", potentially corrupting system files. The provided documents state the issue but ...
CVE-2015-0971
CVE-2015-0971 affects Suricata’s DER parser used to decode SSL/TLS certificates. The vulnerability allows remote attackers to trigger a denial of service (crash) by sending crafted DER-encoded data, impacting Suricata versions prior to 2.0.8. Several advisories and posts (including Debian DSA-325...
CVE-2016-7143
CVE-2016-7143 affects the Charybdis IRC daemon (m_authenticate in modules/m_sasl.c) prior to version 3.5.3. The vulnerability lets remote attackers spoof certificate fingerprints and log in as another user via a crafted AUTHENTICATE parameter, with impact described as partial confidentiality/inte...
CVE-2017-16899
CVE-2017-16899 affects the Xfig figure conversion tool (fig2dev) in the fig2dev program, with an array index error related to a negative font value in dev/gentikz.c and in the read_textobject routines (read.c and read1_3.c). The vulnerability can allow remote attackers to cause a denial-of-servic...
CVE-2018-7487
CVE-2018-7487 describes a heap-based buffer overflow in the LoadPCX function (in_pcx.cpp) of sam2p 0.49.4. A crafted input may cause a denial of service or unspecified impact. The entry is corroborated by multiple connected records (CNVD-2018-06417, OSV entries) noting the same LoadPCX heap overf...
CVE-2019-11766
CVE-2019-11766 affects dhcpcd: dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature. Fixed in 6.11.7 and 7.2.2 (or later). Upgrade to a patched release to mitigate.
CVE-2020-15472
CVE-2020-15472 affects ndpi (nDPI) up to version 3.2. The H.323 dissector contains a heap-based buffer over-read in ndpi_search_h323 (lib/protocols/h323.c) triggered by a payload with insufficient length, exposed over the network. Impact per sources ranges from Partial confidentiality/availabilit...
CVE-2025-38530
CVE-2025-38530 relates to the Linux kernel’s Comedi pcl812 code. The vulnerability arises from a test that shifts a constant with a user-supplied option: (1 <options[1]) & board->irq_bits. Since it->options[1] is unchecked from userspace, the shift amount can be negative or out of bounds...
CVE-2025-38543
CVE-2025-38543 is a Linux kernel vulnerability affecting the drm/tegra nvdec path. The root cause is a missing NULL check after dma_alloc_coherent, resolved by aligning with Robin's fix for vic.c (DMA API misuse). The impact, per the entry, is a HIGH availability impact with no confidentiality or...
CVE-2025-38581
CVE-2025-38581 affects the Linux kernel crypto CCP driver. When CONFIG_CRYPTO_DEV_CCP_DEBUGFS is enabled, rebinding the CCP device could crash the kernel due to a NULL-dereference in debugfs setup. The connected Unity Linux/UTSA advisory notes a patch that fixes this by setting ccp_debugfs_dir to...
CVE-2025-38652
CVE-2025-38652: In the Linux kernel, a f2fs path handling bug can cause out-of-bounds access when constructing devs.path for a device, due to sbi->devs.path[] not leaving space for the trailing null terminator. Root cause: device path storage (path[MAX_PATH_LEN]) can be fully filled, causing p...
CVE-2025-38679
CVE-2025-38679 – Linux kernel media venus OOB read : The vulnerability is in media: venus where event_seq_changed() processes a firmware property count without validating the payload length, enabling out-of-bounds memory access. Impact: kernel crashes and potential information disclosure if firmw...
CVE-2025-38727
Linux kernel vulnerability CVE-2025-38727 affects netlink in the Linux kernel. A bug in netlink_attachskb() may cause an infinite retry loop when memory checks for skb->truesize against sk_rcvbuf are inconclusive (rmem + skb->truesize > sk_rcvbuf), potentially triggering an rcu_sched sta...
CVE-2025-39819
CVE-2025-39819 affects the Linux kernel (fs/smb). The issue is an inconsistent refcount update in smb2_compound_op that could leak resources; a fix adds an extra cleanup goto to ensure cfile is dropped on all paths, including ENOMEM paths. The problem is limited to the kernel SMB path and is miti...
CVE-2025-39845
CVE-2025-39845 : In the Linux kernel, the patch defines ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() to ensure page-table synchronization when calling p*d_populate_kernel(). For 5-level paging, synchronization uses pgd_populate_kernel(); for 4-level paging, pgd_populate() is a no-op ...
CVE-2025-39913
CVE-2025-39913 is a Linux kernel vulnerability related to tcp_bpf: when tcp_bpf_send_verdict() fails to allocate psock->cork, the code previously could proceed silently. The patch ensures sk_msg_free() is called if the cork allocation fails and that the copied count is set to 0, preventing cor...
CVE-2004-0451
CVE-2004-0451 describes multiple format-string vulnerabilities in the Software Upgrade Protocol (SUP) affecting the internal logging functions logquit, logerr, and loginfo. The underlying issue allows a remote attacker to cause arbitrary code execution via format specifiers contained in syslog me...
CVE-2012-0842
CVE-2012-0842 affects surf: the cookie jar can be read by a local user, enabling potential private cookie disclosure. The available documents describe the issue and its local access impact but do not provide exploitation details or remediation guidance.
CVE-2013-0326
Technical details about CVE-2013-0326 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2013-6049
apt-listbugs before 0.1.10 creates temporary files insecurely, enabling attackers to achieve unspecified impact via unknown vectors. The issue is documented across multiple sources (CVE-2013-6049 and related records) and is tied to an insecure temporary-file approach in the package. Root cause: u...
CVE-2015-6587
OpenAFS vlserver (OpenAFS) is affected by CVE-2015-6587: before version 1.6.13, remote authenticated users can trigger a denial of service via a crafted regular expression in VL_ListAttributesN2 RPC, causing an out-of-bounds read/crash. The issue is documented in Debian’s DLA-342-1 and OpenAFS ad...
CVE-2016-7118
CVE-2016-7118 affects the aufs 3.2.x patch in the Linux kernel on Debian Wheezy (kernel 3.2.81-1). Calling fcntl() on a directory on an AUFS filesystem can trigger an oops, enabling local denial-of-service. Debian’s DLA-609-1 fixes this in linux 3.2.81-2; Jessie had earlier fixes for other CVEs, ...
CVE-2017-7671
CVE-2017-7671 is linked to a TLS handshake DoS in Apache Traffic Server (ATS). The Vulners/EUVD/OpenVAS/Nessus-derived documents confirm: vulnerable ATS versions are 5.2.0–5.3.2, 6.0.0–6.2.0, and 7.0.0, with the issue leading to a server coredump. Public references also show Debian DSAs recommend...
CVE-2018-7868
The CVE-2018-7868 issue is a heap-based buffer over-read in libming 0.4.8, specifically in util/decompile.c:getName for CONSTANT8 data, leading to denial of service. Multiple connected sources corroborate this vulnerability and references to libming up to 0.4.8 (and related CVEs) being addressed ...
CVE-2023-39946
Summary: CVE-2023-39946 affects eProsima Fast DDS. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, a heap overflow can be triggered by a PID_PROPERTY_LIST containing a crafted CDR string. In ParameterPropertyList_t::push_back_helper, the second memcpy can copy user-controlled data from the CD...
CVE-2025-38630
CVE-2025-38630 involves the Linux kernel fbdev imxfb driver. The issue arises when fb_add_videomode() returns -ENOMEM from internal kmalloc(), leaving the modelist empty but the driver still registers, risking a null pointer dereference. The patch adds a check on the return value to prevent this,...
CVE-2025-38728
Technical details for CVE-2025-38728 are not publicly provided in the supplied documents. Monitor official advisories and vendor notices for updates.
CVE-1999-1330
The CVE-1999-1330 issue affects the db library’s snprintf usage in version 1.85.4, where the size parameter is ignored and could permit buffer overflows that proper snprintf implementation would prevent. This describes a potential local memory corruption risk. Exploitation details or concrete rem...
CVE-2000-0512
CUPS 1.04 and earlier versions are affected: they do not properly delete request files, allowing a remote attacker to cause a denial of service. Exploitation is network-based and does not require authentication; a patch exists (cups-DoS.patch) and related updates are referenced in the CVE context...
CVE-2000-0513
CVE-2000-0513 affects CUPS 1.04 and earlier. The vulnerability allows remote DoS when an attacker authenticates with a username that either does not exist or lacks a shadow password. Impact is denial of service (PARTIAL availability). The reports reference a DoS patch (cups-DoS.patch) and public ...
CVE-2006-4245
CVE-2006-4245 affects archivemail 0.6.2, which insecurely uses temporary files, creating a possible race condition. Fixed in later packages (e.g., archivemail-0.9.0-9.2 on openSUSE GA media); upgrade recommended. If upgrading not available, consult vendor advisories. Exploitation status not provi...
CVE-2006-6614
The CVE-2006-6614 issue affects Fully Automatic Installation (FAI) 2.10.1 (and possibly 3.1.2). When verbose mode is enabled, the save_log_local function writes the root password hash to /var/log/fai/current/fai.log, and the log file’s permissions permit copying to other hosts when fai-savelog is...
CVE-2010-4532
CVE-2010-4532 affects offlineimap prior to 6.3.2. The issue is that SSL certificate validation is not performed when the option “ssl = yes” is used, enabling potential man-in-the-middle attacks. This is caused by missing certificate validation in the SSL path of the client. Impact is limited to c...
CVE-2014-7210
CVE-2014-7210 concerns PowerDNS (pdns) in Debian prior to 3.3.1-1. The issue is that the mysqldb backend’s maintainer scripts grant overly broad permissions to the pdns user, yielding a too-privileged MySQL user. Other backends are not affected. Connected sources confirm the Debian advisory conte...
CVE-2018-12601
CVE-2018-12601 : Concrete detail available — sam2p 0.49.4 has a heap-based buffer overflow in the ReadImage function of input-tga.ci, leading to denial of service or possibly other impact. Affected component is the ReadImage routine in sam2p’s TGA input handling; the vulnerability is triggered by...
CVE-2018-7552
CVE-2018-7552 describes an invalid free in Mapping::DoubleHash::clear within sam2p 0.49.4 that can cause a segmentation fault. Public disclosures in multiple feeds (OSV, Debian DLA-1340-1, OSV-UBUNTU-CVE-2018-7552, NVD, and related entries) indicate this vulnerability may lead to denial of servic...
CVE-2025-38639
CVE-2025-38639 affects the Linux kernel netfilter xt_nfacct component. The issue is triggered by assuming the acct name is null-terminated, which can enable out-of-bounds reads. Multiple advisories note this is resolved by upgrading kernel versions; for example, Mariner/Mariner-like reports indic...
CVE-2025-38699
CVE-2025-38699 is a Linux kernel double-free fix in the SCSI bfad (bfa) path. When bfad_im_probe() fails during init, bfad->im is freed but not set to NULL. If the driver is later uninstalled and bfad_sm_stopping triggers bfad_im_probe_undo(), the memory at bfad->im can be freed again, enab...
CVE-2025-39694
The CVE-2025-39694 entry concerns the Linux kernel component s390/sclp. The vulnerability arises from an improper NULL pointer check in the SCCB present check logic used during interrupt handling: the NULL check is performed after physical-to-virtual address translation, and if the kernel identit...
CVE-2025-39701
Technical details for CVE-2025-39701 are not provided in the supplied documents. Monitor official kernel advisories for affected versions, impact, and remediation, as available information in connected sources is not detailed for this CVE.
CVE-1999-0804
CVE-1999-0804 affects Linux 2.2.x kernels, where the vulnerability lies in ICMP handling. Malformed ICMP packets with unusual types, codes and IP header lengths can cause a denial of service. The NVD CVSS v2 base score is 5.0 (Medium), with network attack vector, low attack complexity, and partia...
CVE-2004-1093
CVE-2004-1093 affects Midnight Commander (mc) up to version 4.5.55. The issue is a memory-management vulnerability (use-after-free) that can cause a denial of service when a vulnerable file/operation triggers freeing of memory that is subsequently used. Public references in the provided documents...
CVE-2009-5043
Technical details for CVE-2009-5043 are not publicly available in the provided connected documents. No affected products, versions, or remediation are specified here; monitor for updated advisories.
CVE-2012-2350
Technical details about CVE-2012-2350 are not publicly available in the provided documents; monitor for updates from vendors and security trackers.
CVE-2012-4384
CVE-2012-4384 affects letodms and involves multiple XSS issues: reflected XSS on the login page, and stored XSS in the Document Owner/User name and in the Calendar. The provided documents do not specify affected versions, root-cause details beyond generic XSS, exploit status, or available remedia...
CVE-2013-4135
CVE-2013-4135 affects OpenAFS 1.6.x up to before 1.6.5: when using the -encrypt option, the vos command only provides integrity protection and transmits data in cleartext, enabling potential network sniffing of sensitive information. Public advisories consistently reference this as part of OpenAF...