CVE-2020-2773

CVE-2020-2773 is a vulnerability in Oracle Java SE and Java SE Embedded (component: Security) that can be exploited remotely by unauthenticated attackers to cause a partial denial of service on affected Java runtimes. Affected versions include Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedde...

CVE-2019-13751

CVE-2019-13751 is a SQLite-related information disclosure in Google Chrome/Chromium. The issue arises from an uninitialized value in the SQLite library, exploited via a crafted HTML page to read potentially sensitive data from the process memory. Publicly documented fixes are included in Chromium...

CVE-2020-2781

CVE-2020-2781 concerns Oracle/OpenJDK Java SE JSSE vulnerability that allows unauthenticated network access to degrade availability in Java SE and Java SE Embedded (client/server deployment). The Chainguard data confirms affected OpenJDK JSSE components and versions, aligning with the CVE descrip...

CVE-2020-28935

CVE-2020-28935 is a local symlink-traversal vulnerability in Unbound (up to 1.12.0) and NSD (up to 4.3.3) when writing the PID file: if the PID file path is a symlink, the process may chown and rewrite the target file on restart, potentially allowing a local attacker running as the Unbound/NSD us...

CVE-2021-21350

CVE-2021-21350 affects the XStream Java library. Connected sources confirm that before version 1.4.16 XStream allowed remote code execution by manipulating the processed input stream, with guidance to enable a security whitelist and upgrade to at least 1.4.16. Debian security advisories (DSA-5004...

CVE-2021-23133

CVE-2021-23133 is a race condition in the Linux kernel SCTP sockets (net/sctp/socket.c) prior to 5.12-rc8. If sctp_destroy_sock executes without sock_net(sk)->sctp.addr_wq_lock, an element is removed from the auto_asconf_splist list without proper locking, enabling a local attacker with networ...

CVE-2021-38160

CVE-2021-38160 affects the Linux kernel “virtio_console” driver. In drivers/char/virtio_console.c, if an untrusted device supplies a buf->len value larger than the destination buffer, data corruption or loss can occur. The issue is fixed in Linux kernel 5.13.4 (ChangeLog-5.13.4). The vendor no...

CVE-2018-0495

CVE-2018-0495 affects Libgcrypt prior to 1.7.10 and 1.8.x prior to 1.8.3. The root cause is a memory-cache side-channel (ROHNP) in the ECDSA signing path (_gcry_ecc_ecdsa_sign in cipher/ecc-ecdsa.c), enabling an attacker with local or co-resident VM access to recover ECDSA private keys. Mitigatio...

CVE-2022-21282

CVE-2022-21282 is a combined Java/Oracle Java SE/GraalVM issue reported across multiple advisories. The connected documents identify assorted affected components and versions, notably: Serialization , JAXP , Libraries , Hotspot , and ImageIO within Oracle Java SE and GraalVM Enterprise Edition. A...

CVE-2022-37050

CVE-2022-37050 affects Poppler 22.07.0 and is a crash/DoS in PDFDoc::savePageAs (PDFDoc.c) caused by mishandling the xref data structure during getCatalog processing; it is described as stemming from an incomplete patch to CVE-2018-20662. Connected sources confirm this CVE and show multiple advis...

CVE-2023-2602

CVE-2023-2602 affects the libcap library via the pthread_create() path, where error handling can cause memory leakage and potential local denial of service. Connected advisories show multiple vendors applying fixes (e.g., libcap2 updates in Debian 11, Amazon Linux 2/2023, AlmaLinux, Cloud Foundry...

CVE-2017-3738

CVE-2017-3738 is an overflow bug in the AVX2 Montgomery multiplication used for 1024-bit moduli in OpenSSL. The issue affects x86_64 builds with AVX2 (not ADX) and can, in very unlikely cases, enable private-key recovery on affected architectures. OpenSSL 1.0.2n fixes the flaw; OpenSSL 1.1.0 is n...

CVE-2019-8942

CVE-2019-8942 affects WordPress core prior to 4.9.9 and 5.x prior to 5.0.1. Affected component is the _wp_attached_file Post Meta; an attacker with author privileges can replace the Post Meta with an arbitrary string (e.g., ending with .jpg?file.php) and, via a crafted image containing PHP in Exi...

CVE-2020-0556

Concretely, CVE-2020-0556 affects BlueZ HID/HOGP handling. The vulnerability arises from improper access control: BlueZ before 5.54 does not require bonding between HID devices and hosts, enabling an unauthenticated attacker with adjacent access to impersonate an HID device, establish encrypted l...

CVE-2020-14583

CVE-2020-14583 affects Oracle Java SE/Java SE Embedded (Libraries component). Affected: Java SE 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded 8u251. Exploitation requires network access with user interaction and can lead to takeover of Java SE/Embedded with high impact on confidentiality, int...

CVE-2021-31810

CVE-2021-31810 affects Ruby up to 2.6.7, 2.7.x up to 2.7.3, and 3.x up to 3.0.1. A malicious FTP server can abuse the PASV response to persuade Net::FTP to connect to an attacker-specified IP/port, enabling potential information disclosure about private services (e.g., port scans and service bann...

CVE-2020-12769

CVE-2020-12769 affects the Linux kernel prior to 5.4.17. The issue is in drivers/spi/spi-dw.c, where concurrent calls to dw_spi_irq and dw_spi_transfer_one can trigger a kernel panic (local exploit). The vulnerability is fixed in Linux kernel 5.4.17 (see ChangeLog-5.4.17). No exploit details are ...

CVE-2020-25212

CVE-2020-25212 affects the NFSv4 client in the Linux kernel and is caused by a TOCTOU mismatch where a size check is performed in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c. This can allow a local attacker to corrupt memory or cause unspecified impacts. The issue is addressed in the upstream k...

CVE-2020-8696

CVE-2020-8696 is an information-disclosure issue in Intel processors resolved by microcode updates. The vulnerability arises from improper removal of sensitive data before storage/transfer, enabling a local attacker with authenticated access to potentially disclose information. Connected advisori...

CVE-2021-34428

CVE-2021-34428 affects Eclipse Jetty up to 9.4.40, 10.0.2, and 11.0.2. The root cause is an exception in SessionListener#sessionDestroyed() that prevents the session ID from being invalidated in the session ID manager, which in clustered deployments can leave a user session active on a shared mac...

CVE-2021-35564

CVE-2021-35564 affects Java SE (Keytool) and Oracle GraalVM Enterprise Edition, with affected Java SE versions 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. The vulnerability is exploitable remotely with unauthenticated network access and can lead to unauthorized updates/insertions/dele...

CVE-2022-21443

CVE-2022-21443 is an Oracle Java SE/GraalVM EE vulnerability affecting the Libraries component. Affected: Oracle Java SE 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM EE 20.3.5, 21.3.1, 22.0.0.2. Exploitation is network-based and can lead to a partial denial of service, with unauthenticated a...

CVE-2024-26146

CVE-2024-26146 affects Rack (Ruby web server interface). It describes a Denial of Service due to header parsing delays caused by crafted Accept and Forwarded headers. Public details in connected sources confirm the impact is a DoS threat from header parsing in Rack; affected code path is Rack::Re...

CVE-2024-8096

The CVE-2024-8096 issue affects curl’s TLS OCSP stapling verification, where an OCSP response that signals an error other than revoked (e.g., unauthorized) may be treated as valid. This can allow invalid certificates to be accepted when curl uses OCSP stapling, depending on the TLS backend (notab...

CVE-2017-13081

CVE-2017-13081 describes a KRACK-class flaw in WPA/WPA2 where the Integrity Group Temporal Key (IGTK) can be reinstalled during the group key handshake. This enables an attacker within radio range to spoof frames from APs to clients, potentially undermining confidentiality and integrity of WPA/WP...

CVE-2017-17742

CVE-2017-17742 affects Ruby with WEBrick: HTTP Response Splitting via crafted headers in WEBrick, impacting Ruby versions: <2.2.10, 2.3.x <2.3.7, 2.4.x <2.4.4, 2.5.x

CVE-2018-20482

CVE-2018-20482 affects GNU tar: when using --sparse, tar can enter an infinite read loop during file shrinkage, enabling a local attacker to cause a denial of service by modifying a file being archived by another user. Affected until upstream tar versions prior to the fix; remediation is to upgra...

CVE-2020-2583

CVE-2020-2583 affects OpenJDK/OpenJDK-derived packages across multiple vendors and OSes, with the Serialization component (and related areas) being impacted. Public advisories in Debian (DLA-2128-1) and CentOS/Red Hat family outline affected versions such as Java 7u241/8u231/11.0.5/13.0.1 (and em...

CVE-2020-12767

The CVE-2020-12767 issue affects libexif version 0.6.21, where exif_entry_get_value in exif-entry.c has a divide-by-zero condition. Multiple connected notices confirm this specific vulnerability in libexif 0.6.21 and reference fix/mitigation in subsequent releases (notably libexif 0.6.22). Practi...

CVE-2020-23804

CVE-2020-23804 affects the poppler PDF rendering library (pdfinfo/pdfops) with an uncontrolled recursion/stack overflow in the XRef::readXRefTable path, enabling a remote attacker to cause denial of service via crafted PDFs. The issue is present in Poppler 0.89.0 and related lines of the release ...

CVE-2020-2601

CVE-2020-2601 affects Oracle Java SE and Java SE Embedded Security components. Affected Java SE: 7u241, 8u231, 11.0.5, 13.0.1; Java SE Embedded: 8u231. Root cause is a Kerberos-related issue that can be exploited by an unauthenticated attacker with network access, potentially allowing access to s...

CVE-2020-8130

CVE-2020-8130 is an OS command injection in Ruby Rake prior to 12.3.3, affecting the Rake::FileList handling of filenames starting with the pipe character |. Root cause: unsafe processing of external input in FileList leads to command execution. Impact: potential arbitrary OS commands if such fil...

CVE-2022-21824

CVE-2022-21824 is a prototype pollution vulnerability in Node.js linked to console.table properties. It affects Node.js prior to patched releases and can be triggered when user-controlled data is passed as the first parameter with a plain object containing an own property such as proto . Public a...

CVE-2024-21094

CVE-2024-21094 affects Oracle Java SE Hotspot and Oracle GraalVM variants, with affected versions including Java SE 8u401/11.0.22/17.0.10/21.0.2/22 and GraalVM JDK 17.0.10/21.0.2/22, and GraalVM Enterprise 20.3.13/21.3.9. The vulnerability can be exploited remotely via multiple protocols to allow...

CVE-2017-1000158

CVE-2017-1000158 affects CPython up to 2.7.13, where an integer overflow in PyString_DecodeEscape within stringobject.c can cause a heap-based buffer overflow and may lead to arbitrary code execution. Publicly documented impacts across distributions confirm this vulnerability in older Python 2.7 ...

CVE-2018-1000026

CVE-2018-1000026 affects the Linux kernel in the Broadcom NetXtreme II (bnx2x) driver. The issue is described as insufficient input validation in the bnx2x driver that can allow a remote attacker to trigger a denial of service by sending specially crafted, very large packets, potentially from an ...

CVE-2019-19062

CVE-2019-19062 describes a memory leak in the crypto_report() function (crypto/crypto_user_base.c) of Linux kernels up to 5.3.11, which can cause denial of service via memory exhaustion when crypto_report_alg() failures occur. The connected documents confirm the vulnerability and its impact but d...

CVE-2021-27218

CVE-2021-27218 concerns GNOME GLib. On 64-bit platforms, if g_byte_array_new_take() is called with a buffer of 4GB or more, the length is truncated modulo 2**32, causing unintended length truncation. Affected: GLib before 2.66.7 and 2.67.x before 2.67.4. Impact is described as length miscalculati...

CVE-2022-37601

Prototype pollution in webpack loader-utils: parseQuery.js via the name variable affects all versions prior to 1.4.1 and 2.0.3. CVSS v3.1 base score 9.8 (CRITICAL) with high impact on confidentiality, integrity, and availability. Remediation: upgrade loader-utils to 1.4.1+ or 2.0.3+ (patched vers...

CVE-2023-5485

CVE-2023-5485 affects Google Chrome/Chromium: an inappropriate Autofill implementation prior to 118.0.5993.70 allows a remote attacker to bypass Autofill restrictions via a crafted HTML page. The vulnerability is characterized with a Low Chromium security severity and a Medium CVSS v3.1 base scor...

CVE-2014-3515

CVE-2014-3515 affects the SPL component of PHP prior to 5.4.30 and 5.5.x prior to 5.5.14. Root cause is a type-confusion in unserialize() for SPL ArrayObject and SPLObjectStorage, where certain data structures may be incorrectly treated as arrays after unserialization. This leads to remote code e...

CVE-2017-11176

CVE-2017-11176 is a local vulnerability in the Linux kernel’s Netlink mq_notify path. The issue arises because mq_notify does not set the sock pointer to NULL when entering retry logic, enabling a use-after-free scenario during a user-space close of a Netlink socket. Public sources describe poten...

CVE-2019-3859

CVE-2019-3859 affects libssh2 prior to 1.8.1, with an out-of-bounds read in the _libssh2_packet_require and _libssh2_packet_requirev paths. Multiple connected advisories confirm this as part of a broader set of libssh2 issues (CVE-2019-3855 to 3863) that can allow a remote attacker (via a comprom...

CVE-2020-0569

CVE-2020-0569 : Intel® PROSet/Wireless WiFi software for Windows 10 is affected by an out-of-bounds write vulnerability that could allow an authenticated local user to cause a denial of service via adjacent access. Intel’s advisory lists affected products including Intel® Wi-Fi 6 AX201/AX200, Wir...

CVE-2020-14593

CVE-2020-14593 is a vulnerability in the 2D component of Oracle Java SE/SE Embedded. Affected: Java SE 7u261, 8u251, 11.0.7, 14.0.1; Java SE Embedded 8u251. Vulnerability type is unspecified in the provided sources, but exploitation is described as unauthenticated with network access via multiple...

CVE-2021-1844

CVE-2021-1844 is a memory corruption vulnerability in WebKit/WebKitGTK/WebKitGTK-related workflows triggered by processing malicious web content, with potential arbitrary code execution. Affected components include WebKit/WebKitGTK in Apple products (Safari 14.0.3 and iOS/iPadOS/macOS updates) an...

CVE-2021-34552

Pillow (Python Imaging Library) vulnerability CVE-2021-34552: Buffer overflow in Convert.c when passing controlled parameters to convert(), affecting Pillow <= 8.2.0 and PIL

CVE-2021-46848

CVE-2021-46848 affects GNU libtasn1 prior to 4.19.0, due to an off-by-one array size check in the ETYPE_OK path that can impact ASN.1 DER encoding (asn1_encode_simple_der). Public details in connected sources indicate vulnerable versions are

CVE-2022-22576

CVE-2022-22576 is an improper authentication vulnerability in curl 7.33.0 through 7.82.0 that may allow reuse of OAuth2-authenticated connections without confirming the credentials used for the transfer, affecting SASL-enabled protocols (SMPTP(S), IMAP(S), POP3(S), LDAP(S) via OpenLDAP). The root...

CVE-2010-2941

CVE-2010-2941 affects the Common UNIX Printing System (CUPS) cupsd component, specifically ipp.c in CUPS 1.4.4 and earlier. The vulnerability arises from improper memory allocation for attribute values with invalid string data types, enabling a remote attacker to cause a use-after-free and crash,...