CVE-2017-12151

CVE-2017-12151 affects Samba where the client could lose the requirement for signing/encrypting to DFS redirects when using SMB3 max protocol. Affected: Samba client before 4.4.16, 4.5.14 and 4.6.8. Description from connected docs confirms MITM-read/modify risk on DFS redirects due to insufficien...

CVE-2019-17675

Summary: CVE-2019-17675 affects WordPress up to version 5.2.3; the flaw stems from type confusion during referer validation in admin pages, enabling CSRF. Impact: CSRF against WordPress admin; no explicit exploitation details are provided in the connected docs beyond this description. Remediation...

CVE-2019-5798

CVE-2019-5798: In Google Chrome, a lack of proper bounds checking in Skia allowed out-of-bounds memory read via a crafted HTML page. Affected product is Chrome (before 73.0.3683.75); root cause is insufficient bounds checking in Skia’s handling of HTML content. Impact stated: remote attacker coul...

CVE-2021-22876

The Connected documents confirm CVE-2021-22876 affects curl/libcurl 7.1.1 through 7.75.0, where libcurl fails to remove user credentials from URLs when populating the Referer header, leading to leakage of credentials to the server of the second request. The root cause is improper handling of cred...

CVE-2021-33574

CVE-2021-33574 affects the GNU C Library (glibc) mq_notify function in versions 2.32 and 2.33, where a notification thread attributes object passed via struct sigevent may be freed by the caller and then used, causing denial of service (crash) or other impact. Connected advisories confirm this is...

CVE-2019-11035

CVE-2019-11035 affects the PHP EXIF extension: reading past the allocated buffer in exif_iif_add_value can disclose information or crash. Affected are PHP 7.1.x < 7.1.28, 7.2.x < 7.2.17, and 7.3.x

CVE-2026-9256

NGINX Plus and NGINX Open Source expose a vulnerability in the ngx_http_rewrite_module when a rewrite directive uses distinct, overlapping PCRE captures (e.g., ^/((.*))$) and the replacement references multiple captures (e.g., $1$2) in redirects or arguments. An unauthenticated attacker can send ...

CVE-2016-5766

CVE-2016-5766 affects the GD Graphics Library (libgd) via an integer overflow in _gd2GetHeader() in gd_gd2.c, before libgd 2.2.3. This can cause a heap-based overflow when processing crafted GD2 images, leading to a denial of service (and potentially other impact) on the host application using th...

CVE-2018-14498

CVE-2018-14498 affects libjpeg-turbo (and MozJPEG) where get_8bit_row in rdbmp.c is vulnerable to a heap-based buffer over-read when processing a crafted 8-bit BMP, allowing denial of service. The issue exists in libjpeg-turbo up to version 1.5.90 and MozJPEG up to 3.3.1. Affected products: libjp...

CVE-2019-3856

CVE-2019-3856 is an integer overflow flaw in libssh2 (pre-1.8.1) related to parsing of keyboard prompt requests. Exploitation could allow code execution on the client when a user connects to a compromised SSH server. Public advisories across multiple vendors (Red Hat, Debian, CentOS, Amazon Linux...

CVE-2023-27561

CVE-2023-27561 affects runc; a race condition in volume mounts between two containers with shared mounts can enable an escalation of privileges via libcontainer/rootfs_linux.go. The issue is a regression of CVE-2019-19921 and requires two containers with custom volume-mount configurations and cus...

CVE-2014-3704

CVE-2014-3704 affects Drupal core 7.x; the expandArguments function in the database abstraction API does not properly construct prepared statements, enabling remote SQL injection via an array with crafted keys. Affected are Drupal core 7.x prior to 7.32 (pre-auth vulnerability). Potential impact ...

CVE-2019-25051

CVE-2019-25051 affects GNU Aspell 0.60.8 and is caused by a heap-based buffer overflow in acommon::ObjStack::dup_top (invoked from acommon::StringMap::add and acommon::Config::lookup_list). The connected advisories confirm this issue and note security updates/patches are available across multiple...

CVE-2019-12450

GLib2 (GNOME GLib) vulnerability CVE-2019-12450 affects gio/gfile.c: file_copy_fallback does not properly restrict file permissions during in-progress copies, causing default permissions to be used. Exploitation could impact confidentiality, integrity, and availability. Connected advisories show ...

CVE-2021-32762

CVE-2021-32762 affects Redis components (redis-cli, redis-sentinel) via an integer overflow when parsing large multi-bulk network replies due to an overflow in the underlying hiredis library. The vulnerability can lead to heap overflow on affected platforms, with fixed defaults noted: the vulnera...

CVE-2022-23222

CVE-2022-23222 affects the Linux kernel Bitcoin? No. It targets kernel/bpf/verifier.c where pointer arithmetic on *_OR_NULL types can lead to privilege escalation. Affected: Linux kernel through 5.15.14 (local attacker). Connected advisories reference fixes in kernel package updates (e.g., ALAS/M...

CVE-2017-12613

CVE-2017-12613 affects the Apache Portable Runtime (APR) library: out-of-bounds memory access when apr_time_exp*() or apr_os_exp_time*() are given an invalid month, potentially exposing heap contents or triggering a denial of service. A fix was released in APR 1.6.3 (and later backported in some ...

CVE-2022-21123

CVE-2022-21123 stems from incomplete cleanup of multi-core shared buffers on some Intel processors, enabling potential information disclosure via local access by an authenticated user. The linked Astra Linux advisory and multiple Linux kernel advisories corroborate the issue and its local impact....

CVE-2018-14773

In Symfony, CVE-2018-14773 affects HttpFoundation (versions 2.7.0–2.7.48, 2.8.0–2.8.43, 3.3.0–3.3.17, 3.4.0–3.4.13, 4.0.0–4.0.13, 4.1.0–4.1.2). The issue arises from legacy IIS headers X-Original-URL and X-Rewrite-URL being used by Request::prepareRequestUri(), allowing an attacker to override th...

CVE-2018-14851

CVE-2018-14851 : PHP’s exif.c vulnerability in exif_process_IFD_in_MAKERNOTE allows remote attackers to cause a denial of service via a crafted JPEG, caused by an out-of-bounds read. Affected are PHP releases prior to 5.6.37, 7.0.x prior to 7.0.31, 7.1.x prior to 7.1.20, and 7.2.x prior to 7.2.8....

CVE-2019-17023

CVE-2019-17023 is a protocol-downgrade vulnerability in NSS (Network Security Services). After a HelloRetryRequest is sent during TLS, a client may negotiate a lower protocol than TLS 1.3, causing an invalid TLS state transition and causing subsequent Application Data records to be ignored. This ...

CVE-2022-27776

CVE-2022-27776 is a curl vulnerability where credentials could be leaked during HTTP redirects to the same host on a different port. Root cause: insufficiently protected credentials in redirect handling. Impact: potential exposure of authentication or cookie headers. Affected: curl/libcurl across...

CVE-2018-3183

CVE-2018-3183 affects OpenJDK/OpenJDK-based runtimes (Java SE/Java SE Embedded/JRockit) specifically the Scripting engine. Public records in connected advisories show affected OpenJDK versions including Java 8u182 and 11 (and 8u181 for embedded/JRockit R28.3.19). The underlying issue is a scripti...

CVE-2019-15165

The CVE-2019-15165 issue affects libpcap: sf-pcapng.c in libpcap before 1.9.1 fails to validate PHB header length before memory allocation, enabling potential memory exhaustion. Confirmed references from multiple advisories indicate the vulnerability is addressed by upgrading to libpcap 1.9.1 or ...

CVE-2021-42260

CVE-2021-42260 affects TinyXML up to version 2.6.2. A crafted XML message can trigger an infinite loop in TiXmlParsingData::Stamp() inside tinyxmlparser.cpp when processing the TIXML_UTF_LEAD_0 case, causing a denial of service. Connected advisories confirm the issue and note mitigating fixes are...

CVE-2019-10126

CVE-2019-10126 affects the Linux kernel Marvell mwifiex wireless kernel driver. The issue is a heap-based buffer overflow in mwifiex_uap_parse_tail_ies (drivers/net/wireless/marvell/mwifiex/ie.c) that can lead to memory corruption. Public documents in the Connected set identify the affected compo...

CVE-2021-3669

CVE-2021-3669 is a Linux kernel vulnerability where measuring shared memory usage does not scale with large shared memory segment counts, enabling resource exhaustion and DoS. Connected sources confirm the issue affects multiple kernel versions and distributions, with remediations following vendo...

CVE-2019-13616

CVE-2019-13616 affects SDL up to 1.2.15 and 2.x up to 2.0.9, with a heap-based buffer over-read in BlitNtoN (video/SDL_blit_N.c) invoked via SDL_SoftBlit (video/SDL_blit.c). Several connected advisories confirm the root issue is in SDL’s handling of image data (notably BMP loading) or surface cop...

CVE-2021-41817

CVE-2021-41817 is a Ruby-related ReDoS in Date parsing. The vulnerability affects Ruby’s date parsing pathways (notably date parsing methods) up to versions around 3.2.0, enabling denial-of-service via crafted date strings. The fixed releases cited in the sources are 3.2.1, 3.1.2, 3.0.2, and 2.0....

CVE-2023-6816

The CVE-2023-6816 issue affects the X.Org Server (xorg-x11-server) and stems from a heap overflow in DeviceFocusEvent and ProcXIQueryPointer due to allocating space only for the device’s button count; extra bits (up to 255) can cause overflow when bigger values are used. This impacts X.Org Server...

CVE-2020-10029

CVE-2020-10029 affects the GNU C Library (glibc) up to version 2.31.x, with a on‑stack buffer overflow during range reduction for 80‑bit long double inputs containing non‑canonical bit patterns on x86 targets. The issue is tied to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c and can occur when an input ...

CVE-2020-10672

CVE-2020-10672 affects FasterXML jackson-databind 2.x prior to 2.9.10.4. The issue arises from deserialization gadget/typing interaction (related to org.apache. Aries transaction JMS XaPooledConnectionFactory), enabling high-severity impact on data confidentiality/integrity/availability. Connecte...

CVE-2016-5385

CVE-2016-5385 affects PHP up to 7.0.8, where PHP did not protect against the HTTP_PROXY namespace clash, potentially allowing a remote attacker to redirect a script’s outbound HTTP traffic to an attacker‑controlled proxy via a crafted Proxy header. Public analyses reference CGI/CGI‑like environme...

CVE-2023-3611

Consolidated details confirm CVE-2023-3611 affects the Linux kernel’s net/sched sch_qfq code. The vulnerability is an out-of-bounds write in qfq_change_agg where lmax is updated based on packet sizes without proper bounds checks, enabling local privilege escalation. The issue is triggered in sch_...

CVE-2023-45133

CVE-2023-45133 affects Babel’s traversal layer. The issue allows arbitrary code execution during compilation when compiling code crafted by an attacker via plugins that rely on path.evaluate() or path.evaluateTruthy(). Affected in: @babel/traverse prior to 7.23.2 and 8.0.0-alpha.4, and all versio...

CVE-2006-3747

CVE-2006-3747 describes an off-by-one error in the LDAP scheme handling of Apache’s mod_rewrite. The issue affects Apache versions with RewriteEngine enabled and certain LDAP URL rules, allowing remote attackers to trigger a denial of service and potentially execute arbitrary code. Affected range...

CVE-2010-0434

CVE-2010-0434 affects the Apache HTTP Server 2.2.x series (pre-2.2.15) where the ap_read_request handling in server/protocol.c for multithreaded MPMs could disclose memory contents by accessing headers of subrequests tied to an earlier request. Public sources in connected docs (e.g., Debian secur...

CVE-2017-3142

CVE-2017-3142: ISC BIND could allow bypass of TSIG authentication for AXFR requests, enabling zone transfers to unauthorized recipients or acceptance of bogus NOTIFY packets when only TSIG is relied upon. Affected BIND versions include 9.4.0–9.8.8, 9.9.0–9.9.10-P1, 9.10.0–9.10.5-P1, 9.11.0–9.11.1...

CVE-2020-8284

CVE-2020-8284 affects curl's handling of FTP PASV responses, enabling a malicious FTP server to coax curl into connecting to an attacker-controlled IP/port and potentially reveal private services (port scanning, banner extraction). Affects curl prior to patched versions; multiple advisories refer...

CVE-2016-2148

CVE-2016-2148 concerns a heap-based buffer overflow in BusyBox’s udhcpc DHCP client, exploitable remotely via DHCP OPTION_6RD parsing in BusyBox versions earlier than 1.25.0. The F5 advisory reiterates that this can enable Remote Code Execution and notes that exploitation is contingent on AOM net...

CVE-2017-3136

CVE-2017-3136 is an assertion-failure denial of service in ISC BIND when handling DNS64 queries with break-dnssec yes. Affected versions span 9.8.0–9.11.1rc1 (exactly as listed: 9.8.0–9.8.8-P1; 9.9.0–9.9.9-P6; 9.9.10b1–9.9.10rc1; 9.10.0–9.10.4-P6; 9.10.5b1–9.10.5rc1; 9.11.0–9.11.0-P3; 9.11.1b1–9....

CVE-2018-3081

CVE-2018-3081 affects the MySQL Client component of Oracle MySQL. Affected versions: 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior, and 8.0.11 and prior. Attackers with network access via multiple protocols can exploit it to cause a hang or a crash (DoS) and may update/insert/delete data i...

CVE-2019-18678

CVE-2019-18678 affects Squid 3.x and 4.x up to 4.8. It arises from a request header with whitespace between a header name and a colon, enabling an attacker to smuggle HTTP requests through frontend software to a Squid instance. The resulting Response messages corrupt caches between the client and...

CVE-2019-5108

CVE-2019-5108 is an exploitable denial-of-service in the Linux kernel prior to mainline 5.3. An attacker can trigger IAPP location updates for stations before authentication completes by forging Authentication/Association Request packets, leading to potential CAM-table attacks or traffic flapping...

CVE-2019-5418

CVE-2019-5418 (Rails/Action View) affects Rails/Action View versions prior to 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3. The flaw is a File Content Disclosure via specially crafted accept headers in combination with calls to render file:, allowing an attacker to disclose contents of arbitrary fi...

CVE-2022-1048

The CVE CVE-2022-1048 is a use-after-free vulnerability in the Linux kernel sound subsystem (ALSA PCM) caused by a race between concurrent hw_params and hw_free ioctls. Attacker-controlled timing on local access can crash the system or potentially escalate privileges. Affected component: Linux ke...

CVE-2011-5325

CVE-2011-5325 is a vulnerability in BusyBox tar before 1.22.0 (v5) that enables a directory traversal by abusing symlinks. The affected component is BusyBox tar, and the root cause is how tar handles tar entries that, via a symlink, point to files outside the current working directory. The descri...

CVE-2019-14907

Summary (CVE-2019-14907) : Samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12, and 4.11.x before 4.11.5 have a flaw where, if log level is set to 3 or higher, a client string obtained after a failed character conversion can be printed during NTLMSSP negotiation. In the Samba AD DC this may...

CVE-2021-36369

CVE-2021-36369 affects Dropbear up to version 2020.81. The issue stems from a non-RFC-compliant check of available authentication methods in the client-side SSH code, allowing an SSH server to influence the login process, bypassing security measures such as FIDO2 tokens or SSH-Askpass, and enabli...

CVE-2018-1061

CVE-2018-1061 refers to a denial-of-service vulnerability in Python's difflib.IS_LINE_JUNK method caused by catastrophic backtracking. The issue affects multiple Python releases (e.g., 2.7.x, 3.4.x–3.7.0) and is documented across several advisories (e.g., Debian DSA-4307/4306, ALAS-2019-1230, Cen...