CVE-2018-7489

CVE-2018-7489 affects FasterXML jackson-databind; an incomplete fix for CVE-2017-7525 allowed unauthenticated remote code execution via JSON input to ObjectMapper.readValue, with a blacklist bypass if c3p0 is present in the classpath. Affected versions per the initial record include 2.7.9.3, 2.8....

CVE-2019-12086

CVE-2019-12086 involves a polymorphic typing issue in FasterXML jackson-databind 2.x prior to 2.9.9. When Default Typing is enabled for an externally exposed JSON endpoint and a victim service has mysql-connector-java (8.0.14 or earlier) on the classpath, an attacker can send a crafted JSON to re...

CVE-2020-27170

The CVE-2020-27170 flaw affects the Linux kernel prior to 5.11.8, where in kernel/bpf/verifier.c there is undesirable out-of-bounds speculation on pointer arithmetic. This can enable a side-channel attack that defeats Spectre mitigations and may allow an attacker to obtain sensitive information f...

CVE-2020-2756

CVE-2020-2756 affects Oracle Java SE/Java SE Embedded (component: Serialization). Affected: Java SE 7u251, 8u241, 11.0.6, 14; Java SE Embedded 8u241. An unauthenticated, network-exposed attacker can exploit to cause a partial Denial of Service. Connected advisories show remediation via updating t...

CVE-2023-39417

CVE-2023-39417 concerns a SQL injection in PostgreSQL extension scripting substitutions (@extowner@/@extschema@ inside quotes) that can, with administrator-installed vulnerable non-bundled extensions and database CREATE privilege, allow arbitrary code execution as the bootstrap superuser. Affecte...

CVE-2023-5485

CVE-2023-5485 affects Google Chrome/Chromium: an inappropriate Autofill implementation prior to 118.0.5993.70 allows a remote attacker to bypass Autofill restrictions via a crafted HTML page. The vulnerability is characterized with a Low Chromium security severity and a Medium CVSS v3.1 base scor...

CVE-2019-5782

CVE-2019-5782 is a Chrome/V8 vulnerability in TurboFan’s typer module where an incorrect type inference for arguments.length causes BCE to elide a bounds check, enabling out-of-bounds access and, per the Connected documents, reliable code execution. The CVE targeted Chrome versions around 63–72, ...

CVE-2021-23239

The CVE-2021-23239 entry concerns the sudoedit personality in sudo up to version 1.9.4 (before 1.9.5). A race condition in sudoedit (sudo_edit.c) can allow a local, unprivileged user to determine directory existence by substituting a user-controlled directory with a symlink to an arbitrary path, ...

CVE-2021-44717

CVE-2021-44717 affects Go on UNIX: a flaw in erroneous closing of file descriptor 0 after exhaustion can allow writing to an unintended file or network connection. Public documentation confirms the root cause and that affected Go versions include 1.16.x prior to 1.16.12 and 1.17.x prior to 1.17.5...

CVE-2022-47929

CVE-2022-47929 is a Linux kernel vulnerability: a NULL pointer dereference in the traffic control subsystem (affecting qdisc_graft in net/sched/sch_api.c) that allows an unprivileged user to trigger a denial of service (system crash) via crafted tc qdisc/class configurations. Exploitation is loca...

CVE-2017-6074

CVE-2017-6074 affects the Linux kernel up to 4.9.11, where dccp_rcv_state_process in net/dccp/input.c mishandles DCCP_PKT_REQUEST data in LISTEN state. This can allow a local user to gain root privileges or trigger a denial of service (double free) via an application using IPV6_RECVPKTINFO setsoc...

CVE-2019-13115

CVE-2019-13115 affects libssh2 prior to 1.9.0, where kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c can overflow an integer, leading to an out-of-bounds read when processing server packets. The vulnerability could allow a remote attacker controlling a SSH server to disclose...

CVE-2019-2769

CVE-2019-2769 affects Oracle Java SE/Java SE Embedded, with affected components in Utilities and related subsystems. The initial description identifies Java SE versions 7u221, 8u212, 11.0.3 and 12.0.1 and Java SE Embedded 8u211 as impacted, enabling network-based, unauthenticated exploitation tha...

CVE-2020-14792

CVE-2020-14792 is an Oracle Java OpenJDK vulnerability affecting Java SE and Embedded runtimes (Hotspot/Libraries components) with the root issue described as “Better range handling.” Affected versions include Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. The connected advisories...

CVE-2022-21166

CVE-2022-21166 is described in connected Astra Linux bulletin as an issue in incomplete cleanup in specific special register write operations for some Intel processors, potentially allowing an authenticated local user to disclose information. The description mirrors the vulnerability text in the ...

CVE-2022-21305

CVE-2022-21305 is present across multiple Oracle Java SE and GraalVM Enterprise Edition components (Hotspot, Serialization, JAXP, ImageIO, Libraries, 2D/3D) affecting Java versions 7u321, 8u311, 11.0.13, 17.0.1 (and GraalVM EE 20.3.4/21.3.0). Public advisories describe unauthenticated network-bas...

CVE-2014-2324

CVE-2014-2323 and CVE-2014-2324 affect lighttpd prior to 1.4.35. The issues include: (1) SQL injection in mod_mysql_vhost.c via the host name (CVE-2014-2323); and (2) directory traversal via host-name input in mod_evhost and mod_simple_vhost (CVE-2014-2324). These allow remote attackers to manipu...

CVE-2018-1000802

CVE-2018-1000802 affects CPython 2.7, where shutil.make_archive is vulnerable to command injection. A specially crafted input to the function can lead to Denial of Service and potential information gain via arbitrary file creation, as described in multiple advisories. The issue stems from imprope...

CVE-2021-22890

CVE-2021-22890 affects curl 7.63.0 through 7.75.0. When using TLS 1.3 with an HTTPS proxy, libcurl could confuse TLS session tickets from the proxy as if they came from the remote server, potentially causing the host’s session ticket to be resumed incorrectly and bypass server certificate checks,...

CVE-2021-39151

CVE-2021-39151 is part of a family of vulnerabilities in XStream, a Java library used for XML serialization. The connected documents confirm that, in affected versions, an attacker can load and execute arbitrary code on a remote host by manipulating the processed input stream, with no user intera...

CVE-2018-19788

Polkit (policykit) vulnerability CVE-2018-19788: improper handling of UIDs greater than INT_MAX allows an unprivileged user to execute systemctl commands, effectively bypassing authentication. This affects polkit 0.115 and earlier. Mitigations documented in multiple advisories recommend upgrading...

CVE-2018-5803

CVE-2018-5803 affects the Linux kernel SCTP chunk handling: a length check flaw in _sctp_make_chunk() (net/sctp/sm_make_chunk.c) can trigger a kernel crash/DoS. Affected kernel versions include 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102. Public advisories (Debian, CentOS/Red Hat, Ubunt...

CVE-2019-3861

Summary: CVE-2019-3861 is an out-of-bounds read flaw in libssh2 before 1.8.1 related to parsing SSH packets with a padding length greater than the packet length. A remote attacker could cause a Denial of Service or read client memory. Affected software: libssh2 (client-side library) across multip...

CVE-2021-3444

CVE-2021-3444 affects the Linux kernel’s eBPF verifier, where mod32 destination register truncation can be mishandled when the source is known to be zero. This enables a local attacker loading BPF programs to read kernel memory (information disclosure) and potentially perform out-of-bounds writes...

CVE-2017-12629

CVE-2017-12629 affects Apache Solr before 7.1 (with Lucene before 7.1). The issue combines an XXE in the XML Query Parser (deftype=xmlparser) that can upload data to /upload or enable blind XXE for local file reads, and a second RCE path via RunExecutableListener reachable through a Config API ad...

CVE-2018-6360

mpv = 0.27.1, Mageia citing 0.27.2+, and Alpine noting vulnerability up to 0.28.0). If exploitation details are not provided in a document, they are not assumed; rely on the stated fixes.

CVE-2019-2894

CVE-2019-2894 affects Oracle Java SE/OpenJDK components (Security) in Java SE 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Impact: allows an unauthenticated attacker over the network to read a subset of data in Java SE/Embedded. Public advisories confirm this CVE is being addressed in mu...

CVE-2020-12662

CVE-2020-12662 affects the Unbound DNS resolver. Upstream, the issue is a network amplification (NXNSAttack) vulnerability triggered by random subdomains in NS records, with Unbound versions before 1.10.1 identified as vulnerable. Connected advisories note that Red Hat Enterprise Linux 7 received...

CVE-2020-16092

CVE-2020-16092 affects QEMU up to 5.0.0, specifically the network packet processing path. The vulnerability is an assertion failure in net_tx_pkt_add_raw_fragment() within hw/net/net_tx_pkt.c, impacting the e1000e and vmxnet3 devices. A malicious guest user/process could trigger this assertion to...

CVE-2020-8037

CVE-2020-8037 affects tcpdump’s ppp decapsulator and can cause unbounded memory allocation, leading to DoS. Public documents corroborate that tcpdump 4.9.3 and later patch levels address this issue by upgrading the tcpdump package (e.g., 4.9.3-3 in some distributions; Ubuntu/Debian updates list 4...

CVE-2023-45145

CVE-2023-45145 affects Redis: on startup Redis opens a Unix socket before applying configured permissions, enabling a brief race condition if umask is permissive. The issue has been fixed in Redis 7.2.2, 7.0.14, and 6.2.14. Connected advisories (Astra Linux, Amazon Linux variants, Debian DLA) cor...

CVE-2020-8698

CVE-2020-8698 is an information-disclosure vulnerability in Intel microcode affecting shared-resource isolation. An authenticated local attacker could disclose data via RAPL/isolation weaknesses. Public detail confirms affected Intel processors and that mitigations are microcode updates released ...

CVE-2021-3516

CVE-2021-3516 affects libxml2’s xmllint prior to 2.9.11. The issue is a use-after-free in xmllint when processing a crafted file, with impact to confidentiality, integrity, and availability. Remediation: update libxml2 to 2.9.11 or later (or apply vendor patch). The connected sources corroborate ...

CVE-2021-3580

CVE-2021-3580 describes a flaw in nettle’s RSA decryption that allows specially crafted ciphertext to cause remote crashes and DoS. The connected advisories confirm affected nettle deployments and provide remediation guidance: upgrading nettle to a fixed version resolves the issue. For Debian, fi...

CVE-2022-1184

CVE-2022-1184 affects the Linux kernel ext4 file-system code (fs/ext4/namei.c:dx_insert_block). The flaw is a use-after-free that can be triggered by a local user to cause a denial of service. Astra Linux bulletin also documents this exact issue. The connected documents do not specify a fixed ver...

CVE-2023-34151

CVE-2023-34151 affects ImageMagick. The issue is an undefined behavior caused by casting double to size_t in SVG, MVG, and other coders, leading to vulnerability exposure. Public references document multiple advisories confirming patches across distributions (e.g., Debian DSA-5628-1 and DLA-3737-...

CVE-2024-21068

CVE-2024-21068 affects Oracle Java SE Hotspot (and related GraalVM/JavaFX components) across multiple supported JDK/OpenJDK lines. Affected versions include 8u401, 11.0.22, 17.0.10, 21.0.2, 22 (and GraalVM JDK 17.0.10/21.0.2/22; EE 21.3.9). Impact is unauthenticated remote compromise with possibl...

CVE-2017-13079

CVE-2017-13079 is a KRACK-type vulnerability affecting WPA/WPA2 where reinstallation of the Integrity Group Temporal Key (IGTK) can occur during the 4-way handshake. An attacker in radio range can spoof frames from APs to clients by exploiting IGTK reinstallation. Public disclosures and advisorie...

CVE-2017-13080

CVE-2017-13080 corresponds to the WPA2/Wi‑Fi Key Reinstallation Attack (KRACK) risk, where a network-adjacent attacker can leverage a flaw in the group key handshake to reinstall GTK keys and replay frames. The core description in the initial document confirms: an attacker in radio range can repl...

CVE-2018-20482

CVE-2018-20482 affects GNU tar: when using --sparse, tar can enter an infinite read loop during file shrinkage, enabling a local attacker to cause a denial of service by modifying a file being archived by another user. Affected until upstream tar versions prior to the fix; remediation is to upgra...

CVE-2021-30002

The CVE-2021-30002 issue affects the Linux kernel prior to 5.11.3. It is caused by a memory leak in video_usercopy inside drivers/media/v4l2-core/v4l2-ioctl.c when handling large webcam arguments. This memory leak can lead to memory exhaustion on affected systems. Connected advisories (e.g., Debi...

CVE-2021-3759

CVE-2021-3759 is a memory overflow in the Linux kernel memcg IPC path, where repeated semget calls by a local user can exhaust memory and cause a denial of service. Public docs confirm impact is local and availability-focused. Debian LTS advisory DLA-3244-1 and Amazon ALAS2KERNEL advisories for k...

CVE-2021-46828

CVE-2021-46828 – libtirpc is linked to a DoS in the RPC library where idle TCP connections are mishandled. This can exhaust a process’s file descriptors and cause an svc_run loop that stops accepting new connections. The vulnerability is tied to libtirpc versions before 1.3.3rc1. A fix is availab...

CVE-2022-1789

CVE-2022-1789 targets KVM in the Linux kernel. With shadow paging enabled, INVPCID can lead to a NULL pointer dereference when CR0.PG=0, because the invlpg callback is not set, causing a crash in kvm_mmu_invpcid_gva. The same issue is echoed in Astra Linux and AlmaLinux advisories, which list KVM...

CVE-2022-24070

CVE-2022-24070 affects Subversion’s mod_dav_svn, where a use-after-free during path-based authorization lookups can lead to memory corruption and likely denial-of-service (HTTPD worker crash). The affected range is Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive); other Subversion...

CVE-2023-21400

CVE-2023-21400 affects the Linux kernel io_uring subsystem, specifically in multiple functions within io_uring.c where improper locking on rings with IOPOLL can cause kernel memory corruption. This memory corruption could enable local privilege escalation to kernel System execution privileges wit...

CVE-2018-1000204

CVE-2018-1000204 affects Linux kernel versions 3.18–4.16 where an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV and an empty 6-byte cmdp can cause the kernel to copy up to 1000 heap pages to userspace. The root cause is improper handling of SG_IO data flow leading to information ...

CVE-2018-1126

procps-ng (before version 3.3.15) is vulnerable to an integer size/overflow issue in file2strvec and wrappers for standard allocators (proc/alloc.*). Root cause: truncation/overflow in heap- or memory-related paths, enabling local privilege escalation or crashes. Affects procps utilities (ps/top/...

CVE-2018-1128

CVE-2018-1128 describes a replay vulnerability in the Cephx authentication protocol where a packet sniffer on a Ceph cluster network can authenticate to Ceph services due to insufficient verification of clients. The issue affects the msgr2 protocol (used by most Ceph communication) and can compro...

CVE-2019-14809

CVE-2019-14809 (Go): The issue arises in net/url parsing in Go before 1.11.13 and 1.12.x before 1.12.8, where malformed hosts in URLs can allow an authorization bypass by crafting a Host field suffix not present in Hostname() or Port(). Example: a javascript:// URL yielding a hostname like google...