CVE-2020-8284

CVE-2020-8284 affects curl's handling of FTP PASV responses, enabling a malicious FTP server to coax curl into connecting to an attacker-controlled IP/port and potentially reveal private services (port scanning, banner extraction). Affects curl prior to patched versions; multiple advisories refer...

CVE-2023-4762

CVE-2023-4762 is a Type Confusion in V8 affecting Google Chrome/Chromium prior to 116.0.5845.179 that allows remote code execution via a crafted HTML page. The vulnerability is documented in multiple sources (Chrome/Chromium release notes; Debian security advisory stating fixes in 116.0.5845.180 ...

CVE-2024-20952

CVE-2024-20952 affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (Security component). Affected Oracle Java SE versions: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; GraalVM for JDK: 17.0.9, 21.0.1; GraalVM Enterprise Edition: 20.3.12, 21.3.8, 22.3.4. The initia...

CVE-2024-53150

The CVE-2024-53150 issue affects the Linux kernel USB-audio (ALSA: usb-audio). The root cause is that the driver does not validate the bLength field of descriptors while traversing clock-related descriptors, allowing a bogus shorter descriptor to cause out-of-bounds reads. The public patch adds s...

CVE-2024-28219

CVE-2024-28219 affects the Pillow Python imaging library. In _imagingcms.c, a buffer overflow was introduced because strcpy was used instead of a safer copy like strncpy, impacting Pillow before version 10.3.0. The issue filename and function indicate a likely overflow related to fixed-length str...

CVE-2019-2975

CVE-2019-2975 affects Oracle Java SE/Scripting (and Java SE Embedded) with known affected builds: Java SE 8u221, 11.0.4, and 13; Java SE Embedded 8u221. The vulnerability concerns loading/executing untrusted code in environments like sandboxed Web Start/Applet contexts and can allow an unauthenti...

CVE-2017-3136

CVE-2017-3136 is an assertion-failure denial of service in ISC BIND when handling DNS64 queries with break-dnssec yes. Affected versions span 9.8.0–9.11.1rc1 (exactly as listed: 9.8.0–9.8.8-P1; 9.9.0–9.9.9-P6; 9.9.10b1–9.9.10rc1; 9.10.0–9.10.4-P6; 9.10.5b1–9.10.5rc1; 9.11.0–9.11.0-P3; 9.11.1b1–9....

CVE-2017-3142

CVE-2017-3142: ISC BIND could allow bypass of TSIG authentication for AXFR requests, enabling zone transfers to unauthorized recipients or acceptance of bogus NOTIFY packets when only TSIG is relied upon. Affected BIND versions include 9.4.0–9.8.8, 9.9.0–9.9.10-P1, 9.10.0–9.10.5-P1, 9.11.0–9.11.1...

CVE-2018-1061

CVE-2018-1061 refers to a denial-of-service vulnerability in Python's difflib.IS_LINE_JUNK method caused by catastrophic backtracking. The issue affects multiple Python releases (e.g., 2.7.x, 3.4.x–3.7.0) and is documented across several advisories (e.g., Debian DSA-4307/4306, ALAS-2019-1230, Cen...

CVE-2019-14907

Summary (CVE-2019-14907) : Samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12, and 4.11.x before 4.11.5 have a flaw where, if log level is set to 3 or higher, a client string obtained after a failed character conversion can be printed during NTLMSSP negotiation. In the Samba AD DC this may...

CVE-2024-3864

A memory safety bug exists in Firefox , Firefox ESR , and Thunderbird , leading to memory corruption . With sufficient effort, this vulnerability could be exploited to execute arbitrary code . The issue affects Firefox < 125 , Firefox ESR < 115.10 , and Thunderbird

CVE-2011-5325

CVE-2011-5325 is a vulnerability in BusyBox tar before 1.22.0 (v5) that enables a directory traversal by abusing symlinks. The affected component is BusyBox tar, and the root cause is how tar handles tar entries that, via a symlink, point to files outside the current working directory. The descri...

CVE-2021-21344

Summary: CVE-2021-21344 affects the XStream Java XML serialization library. In versions before 1.4.16, a remote attacker can load and execute arbitrary code by manipulating the processed input stream. The risk is mitigated if the security framework whitelist is properly configured; otherwise the ...

CVE-2020-26217

XStream (Java) vulnerable to remote code execution via insecure XML deserialization. The issue affects versions before 1.4.14 where processing input streams can lead to arbitrary shell execution. The advisory notes that only users relying on a blocklist are affected, while those using the securit...

CVE-2021-27803

CVE-2021-27803 affects wpa_supplicant’s P2P (Wi‑Fi Direct) provision discovery processing in the file p2p/p2p_pd.c. Affects wpa_supplicant prior to version 2.10; an attacker within radio range could cause denial of service or potentially execute arbitrary code. Multiple connected advisories confi...

CVE-2021-45417

AIDE (Advanced Intrusion Detection Environment) is affected by CVE-2021-45417: before version 0.17.4, a heap-based buffer overflow in the base64 output path can be triggered by crafted file metadata (e.g., XFS extended attributes, tmpfs ACLs), allowing local users to escalate to root. The vulnera...

CVE-2023-20593

CVE-2023-20593 is described as a vulnerability in AMD/Zen 2 microarchitectural behavior that could allow an attacker to access sensitive information under specific conditions. In the provided documents, the description is broad and does not list concrete affected products, versions, root cause de...

CVE-2019-17055

CVE-2019-17055 affects the Linux kernel up to 5.3.2, where base_sock_create in drivers/isdn/mISDN/socket.c did not enforce CAP_NET_RAW, allowing unprivileged users to create a raw socket via AF_ISDN. The issue is tracked with CID CID-b91ee4aa2a21 and was addressed in upstream kernel commits 0edc3...

CVE-2020-11619

CVE-2020-11619 affects Jackson Databind 2.x before 2.9.10.4 and is caused by mishandling the interaction between serialization gadgets and typing (related to spring-aop). This deserialization issue can lead to arbitrary code execution when a crafted JSON is processed, as described in IBM/ISIQ con...

CVE-2021-0326

CVE-2021-0326 affects wpa_supplicant (P2P/Wi-Fi Direct) where a missing bounds check in p2p_copy_client_info can cause an out-of-bounds write. The flaw may enable remote code execution or other impacts when a device participates in P2P group info processing and is within radio range; no user inte...

CVE-2021-36369

CVE-2021-36369 affects Dropbear up to version 2020.81. The issue stems from a non-RFC-compliant check of available authentication methods in the client-side SSH code, allowing an SSH server to influence the login process, bypassing security measures such as FIDO2 tokens or SSH-Askpass, and enabli...

CVE-2018-10546

CVE-2018-10546 affects PHP versions prior to 5.6.36, 7.0.x prior to 7.0.30, 7.1.x prior to 7.1.17, and 7.2.x prior to 7.2.5. The root cause is an infinite loop in ext/iconv/iconv.c caused by the iconv stream filter not rejecting invalid multibyte sequences. Consequences include potential denial o...

CVE-2020-36322

The CVE-2020-36322 issue affects the Linux kernel FUSE filesystem implementation, where fuse_do_getattr() could call make_bad_inode() in inappropriate situations, potentially causing a system crash. The vulnerability is tied to the FUSE path and was partially addressed by a fix, with the incomple...

CVE-2019-3857

CVE-2019-3857 - libssh2 : An integer overflow flaw in libssh2 (pre-1.8.1) affects parsing of SSH_MSG_CHANNEL_REQUEST packets with an exit signal, enabling potential out-of-bounds writes. A remote attacker who controls a SSH server could execute code on a client when a user connects to that server...

CVE-2020-27783

The CVE-2020-27783 issue is a XSS vulnerability in python-lxml's HTML Cleaner. The Cleaner’s parser did not sufficiently emulate browsers, causing mismatches between sanitization and the rendered page. This can allow a remote attacker to run arbitrary HTML/JS in a victim’s browser. Affected produ...

CVE-2020-8285

CVE-2020-8285 is a curl/libcurl vulnerability in the FTP wildcard match parsing. The issue triggers uncontrolled recursion leading to a stack overflow when the internal callback returns CURL_CHUNK_BGN_FUNC_SKIP repeatedly, potentially causing a crash. Affected software includes curl/libcurl from ...

CVE-2021-33560

CVE-2021-33560 affects Libgcrypt 1.8.x (before 1.8.8) and 1.9.x (before 1.9.3). The issue is a mishandling of ElGamal due to lack of exponent blinding in mpi_powm and improper window size, enabling side-channel leakage in OpenPGP scenarios. Affected products include environments using libgcrypt w...

CVE-2021-3748

CVE-2021-3748 affects the QEMU virtio-net device. A use-after-free can occur when the descriptor’s address lies in the non-direct-access region and num_buffers is set after the virtqueue element is unmapped, enabling a guest to crash QEMU or potentially execute code on the host with QEMU privileg...

CVE-2022-27666

CVE-2022-27666 describes a heap buffer overflow in IPsec ESP transformation code (net/ipv4/esp4.c and net/ipv6/esp6.c) that can allow a local user to overwrite kernel heap objects and may lead to local privilege escalation. Connected advisories confirm kernel patches are available (e.g., AlmaLinu...

CVE-2019-2422

CVE-2019-2422 affects Oracle Java SE Libraries in Java SE 7u201, 8u192, 11.0.1 (and Java SE Embedded 8u191). The issue is a memory disclosure in FileChannelImpl that could allow an unauthenticated, network-reachable attacker to read a subset of data, with user interaction required in some context...

CVE-2019-2949

CVE-2019-2949 affects Oracle/OpenJDK Java SE Kerberos components. Affected Java SE: 7u231, 8u221, 11.0.4, 13; Java SE Embedded: 8u221. Exploitation requires network access via Kerberos and unauthenticated access could lead to leakage of sensitive data or elevated access. Connected documents show ...

CVE-2019-3862

CVE-2019-3862 affects libssh2 before 1.8.1, where SSH_MSG_CHANNEL_REQUEST packets with an exit status and no payload are parsed incorrectly. A remote attacker that can cause a SSH server to connect to a client could cause a Denial of Service or read memory in the client. Multiple connected adviso...

CVE-2020-14061

CVE-2020-14061 concerns Jackson Databind 2.x before 2.9.10.5, where deserialization gadgets typing interaction (including oracle.jms.AQjms* components) can be exploited. IBM and NVD references show a high-severity exposure (base scores up to 8.1–9.8) with network attack vector and partial to high...

CVE-2021-35550

CVE-2021-35550 is a network-authenticated TLS vulnerability in the JSSE component of Oracle Java SE and Oracle GraalVM Enterprise Edition, affecting Java SE 7u311, 8u301, 11.0.12 and GraalVM EE 20.3.3/21.2.0. Exploitation is possible over TLS with unauthenticated access and can lead to confidenti...

CVE-2023-42916

Technical details about CVE-2023-42916 are not provided in the connected documents. Please monitor for updates from official advisories.

CVE-2024-44308

CVE-2024-44308 affects WebKit-derived components (Apple WebKit in Safari and WebKitGTK/WebKit2GTK for Linux). The issue, caused by improper handling of maliciously crafted web content, can lead to arbitrary code execution. Public details in the Apple advisory cite a fix in Safari 18.1.1, iOS 18.1...

CVE-2019-18679

The CVE-2019-18679 issue affects Squid 2.x–4.x (through 4.8) and arises from incorrect data management during HTTP Digest Authentication, where nonce tokens contain the raw pointer byte value from heap memory. This information disclosure reduces ASLR effectiveness and could assist attackers targe...

CVE-2019-19068

CVE-2019-19068 affects the Linux kernel Realtek RTL8xxxU USB Wi‑Fi driver (rtl8xxxu_submit_int_urb in rtl8xxxu_core.c, up to 5.3.11). The root cause is a memory leak when usb_submit_urb() fails during interrupt-URB submission, which can lead to DoS via memory consumption. Connected document F5 ad...

CVE-2020-14351

CVE-2020-14351 is a Linux kernel vulnerability in the perf subsystem that enables a local attacker with perf event access to trigger a use-after-free, potentially corrupt memory and escalate privileges. Public sources in connected advisories describe the vulnerability as a local use-after-free af...

CVE-2020-29661

The entry CVE-2020-29661 describes a local, kernel-space vulnerability in the Linux tty subsystem (drivers/tty/tty_jobctrl.c) that can enable a use-after-free through TIOCSPGRP. A locking issue in this path allows memory corruption and potential privilege escalation or system impact when an attac...

CVE-2022-21427

CVE-2022-21427 affects Oracle MySQL Server (component: Server: FTS). Affected: MySQL 5.7.37 and earlier, 8.0.28 and earlier. An attacker with high privileges and network access via multiple protocols can cause a hang or frequent crash (DoS). The connected advisories indicate fixes in newer MySQL ...

CVE-2020-17507

CVE-2020-17507 affects Qt up to version 5.15.x prior to 5.15.1. The issue is a buffer over-read in read_xbm_body (gui/image/qxbmhandler.cpp) that occurs in Qt 5.12.9 and in 5.13.x–5.15.x. Several connected advisories confirm the affected component and the exact file path. The consolidated impact ...

CVE-2020-29660

This CVE (CVE-2020-29660) affects the Linux kernel tty subsystem, specifically in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c, where a locking inconsistency can enable a local attacker to perform a read-after-free against TIOCGSID. Consequences stated in multiple advisories include memory ...

CVE-2021-23961

CVE-2021-23961 is an information-disclosure vulnerability affecting Mozilla Firefox prior to 85, with related entries in Thunderbird. The connected advisories describe that a malicious webpage leveraging slipstream techniques could expose internal network hosts and services on the client’s machin...

CVE-2022-1462

CVE-2022-1462 is an out-of-bounds read in the Linux kernel TeleTYpe subsystem triggered by a race using ioctls (TIOCSPTLCK, TIOCGPTPEER, TIOCSTI, TCXONC). Local users can crash the system or read unauthorized memory. Public advisories link this CVE to Linux kernel versions across multiple distrib...

CVE-2022-44729

CVE-2022-44729 describes a Server-Side Request Forgery (SSRF) in Apache Batik (Apache XML Graphics Batik) affecting version 1.16, where a crafted SVG could trigger loading external resources by default. This behavior can lead to resource consumption and potential information disclosure. The conne...

CVE-2023-34319

CVE-2023-34319 is a Linux kernel netback driver buffer overrun caused by an edge case where an entire packet is fragmented into the maximum pieces yet remains smaller than the area that preserves all headers together, after the XSA-423 fix. Exploitation could enable local denial-of-service or ins...

CVE-2016-1285

CVE-2016-1285 affects ISC BIND 9.x (before 9.9.8-P4 and 9.10.x before 9.10.3-P4). The issue arises from improper handling of control-channel input to rndc, causing assertion failure and named daemon exit via a malformed packet. Connected advisories describe related impact for DNAME records (CVE-2...

CVE-2020-14062

CVE-2020-14062 affects jackson-databind 2.x prior to 2.9.10.5, where interaction between serialization gadgets and typing (related to JNDIConnectionPool) can lead to deserialization abuse with high impact. IBM/X-Force entries consolidate this as a 9.8/3.0 vulnerability. In the connected IBM bulle...

CVE-2021-20221

CVE-2021-20221 affects QEMU’s ARM Generic Interrupt Controller emulator up to version 4.2.0 on AArch64. The vulnerability is an out-of-bounds heap buffer access when writing an interrupt ID to controller memory, where the interrupt ID is not masked to 4 bits, potentially corrupting controller sta...