CVE-2021-3246

CVE-2021-3246 describes a heap buffer overflow in libsndfile’s msadpcm_decode_block (v1.0.30) that can allow arbitrary code execution through a crafted WAV file. Multiple connected advisories confirm the vulnerable component and affected library (libsndfile) and show vendor advisories for various...

CVE-2021-34693

CVE-2021-34693 affects the Linux kernel, specifically the net/can/bcm.c implementation. The issue is an information disclosure caused by uninitialized memory in a data structure, allowing a local attacker to read kernel stack memory. Affected releases include kernel versions up to 5.12.10 (as not...

CVE-2022-21663

CVE-2022-21663 affects WordPress (multisite) where users with Super Admin can bypass explicit hardening via object injection. The underlying issue is insufficient hardening in multisite configurations. The vulnerability has been patched in WordPress 5.8.3, and older affected versions are addresse...

CVE-2024-29944

The CVE-2024-29944 issue affects Mozilla Firefox on desktop (not mobile), allowing an attacker to inject an event handler into a privileged object to achieve arbitrary JavaScript execution in the parent process. Affects Firefox versions older than 124.0.1 and Firefox ESR older than 115.9.1; multi...

CVE-2024-5629

CVE-2024-5629 describes an out-of-bounds read in the PyMongo BSON deserializer. The advisory notes that PyMongo 4.6.2 and earlier can deserialize malformed BSON provided by a server, potentially raising an exception that may contain arbitrary memory. Affected component: PyMongo’s bson module. Imp...

CVE-2018-1000026

CVE-2018-1000026 affects the Linux kernel in the Broadcom NetXtreme II (bnx2x) driver. The issue is described as insufficient input validation in the bnx2x driver that can allow a remote attacker to trigger a denial of service by sending specially crafted, very large packets, potentially from an ...

CVE-2019-19906

CVE-2019-19906 affects Cyrus SASL 2.1.27 (and related builds) with an out-of-bounds write in _sasl_add_string in common.c, leading to unauthenticated remote denial-of-service when processing malformed LDAP packets (used by OpenLDAP in the chain). Remediation is to upgrade to a patched Cyrus SASL ...

CVE-2019-19947

CVE-2019-19947 affects the Linux kernel up to version 5.4.6, where the kvaser_usb_leaf.c driver (drivers/net/can/usb/kvaser_usb) leaks information from uninitialized memory to a USB device (CID-da2311a6385c). Connected advisories corroborate this kernel info-leak issue and link it to the Kvaser C...

CVE-2020-14797

CVE-2020-14797 affects Oracle/OpenJDK Java SE Libraries (path validation) across multiple Java versions. Connected sources indicate this vulnerability residing in the Libraries component with affected OpenJDK packages such as java-1.8.0-openjdk and related ALAS/Amazon advisories, listing path val...

CVE-2020-2659

CVE-2020-2659 affects Oracle Java SE/SE Embedded (Networking) with vulnerable openjdk7/8 builds (7u241, 8u231; Embedded 8u231). The issue is a networking component flaw in DatagramChannelImpl that could let an unauthenticated attacker cause a partial denial of service over the network. Several co...

CVE-2021-23926

CVE-2021-23926 involves Apache XMLBeans up to 2.6.0, where XML parsers did not set necessary protections against malicious XML input, enabling an XML External Entity (XXE) attack and related.entity expansion concerns. The main impact cited is a potential denial of service or information disclosur...

CVE-2021-33813

CVE-2021-33813 concerns an XXE vulnerability in JDOM’s SAXBuilder up to version 2.0.6, allowing denial-of-service via a crafted HTTP request. Connected advisories confirm the issue affects jdom/jdom2 and list downstream fixes/upgrades in Linux distributions (e.g., Amazon Linux advisories ALAS2-20...

CVE-2022-0530

CVE-2022-0530 affects the unzip utility. Affected component: unzip (wide-string to local-string conversion) can cause a heap out-of-bounds write, leading to crash or potential code execution when processing crafted zip files. Public details show multiple vendors reporting the issue with similar d...

CVE-2022-26373

CVE-2022-26373 concerns Intel processors where non-transparent sharing of return-predictor targets between contexts may allow an authorized local user to disclose information. The provided documents describe this issue as a local-information-disclosure risk but do not specify a vendor patch/versi...

CVE-2023-4047

CVE-2023-4047 is a vulnerability in Firefox popup notifications delay calculation that could allow an attacker to trick a user into granting permissions. The issue affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR

CVE-2023-4132

CVE-2023-4132 is a use-after-free vulnerability in the Linux kernel’s sono smsusb module triggered during device initialization when the Sono device is plugged in. Exploitation by a local user could crash the system, causing a denial of service. Connected Astra Linux security bulletins reiterate ...

CVE-2009-1955

CVE-2009-1955 affects the Expact XML parser used by the apr_xml_* interface in xml/apr_xml.c of APR-util, with the vulnerability present in APR-util prior to 1.3.7. In Apache HTTP Server deployments that enable mod_dav and mod_dav_svn, a crafted XML document containing a large number of nested en...

CVE-2018-1068

CVE-2018-1068 affects the Linux kernel: the 32-bit compatibility layer for ebtables did not sufficiently validate offset values in a 64-bit kernel. A local attacker with CAP_NET_ADMIN (in a namespace) could use this to overwrite kernel memory, potentially leading to privilege escalation. Public a...

CVE-2019-20096

CVE-2019-20096 affects the Linux kernel before 5.1, where a memory leak in __feat_register_sp() (net/dccp/feat.c) can lead to denial of service. The Unity Linux Nessus advisories (UTSA-2026-003899/004383/000228) reference the same description block, confirming the issue and impact. No specific pa...

CVE-2020-14578

CVE-2020-14578 affects Oracle Java SE and Java SE Embedded (Libraries component) with Java SE 7u261 and 8u251; Java SE Embedded 8u251. It is exploitable over a network (multiple protocols) by unauthenticated attackers, including via sandboxed Java Web Start apps, applets, or direct API input, lea...

CVE-2021-1844

CVE-2021-1844 is a memory corruption vulnerability in WebKit/WebKitGTK/WebKitGTK-related workflows triggered by processing malicious web content, with potential arbitrary code execution. Affected components include WebKit/WebKitGTK in Apple products (Safari 14.0.3 and iOS/iPadOS/macOS updates) an...

CVE-2021-28153

GLib/GNOME GLib before 2.66.8 is affected by CVE-2021-28153: when g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it may create the target as an empty file. This behavior could be security-relevant if the symlink is attacker-controlled...

CVE-2021-39141

The CVE-2021-39141 entry concerns the XStream Java library, where an attacker can load and execute arbitrary code by manipulating the processed input stream. Affected versions permit code execution from a remote host; mitigation is to upgrade to XStream 1.4.18, which replaces a reliance on blackl...

CVE-2017-11176

CVE-2017-11176 is a local vulnerability in the Linux kernel’s Netlink mq_notify path. The issue arises because mq_notify does not set the sock pointer to NULL when entering retry logic, enabling a use-after-free scenario during a user-space close of a Netlink socket. Public sources describe poten...

CVE-2019-2977

CVE-2019-2977 affects Oracle Java SE/OpenJDK Hotspot in Java SE 11.0.4 and 13. The connected sources confirm a vulnerability in the Hotspot component with an out-of-bounds issue in the String indexOf path, enabling unauthenticated network access to read a subset of data and cause a partial DOS. P...

CVE-2020-25656

CVE-2020-25656 is a Linux kernel use-after-free in the console subsystem related to ioctls KDGKBSENT and KDSKBSENT. A local attacker could read memory out of bounds, impacting data confidentiality. Several advisories (CloudLinux, Amazon Linux, CentOS/RHEL, Cloud Foundry/usn, etc.) reference this ...

CVE-2020-28974

CVE-2020-28974 is a slab-out-of-bounds read in the Linux kernel’s fbcon driver, fixed in kernel 5.9.7. The flaw arises in KD_FONT_OP_COPY within drivers/tty/vt/vt.c and could allow a local attacker to read privileged kernel memory or cause a kernel crash. Several connected documents describe the ...

CVE-2020-8184

The CVE-2020-8184 entry concerns a vulnerability in rack where a reliance on cookies without validation or integrity checks allows forging a secure or host-only cookie prefix. Affected are rack versions older than 2.2.3 and older than 2.1.4. The underlying issue is insufficient cookie validation/...

CVE-2023-31248

CVE-2023-31248 is a Linux kernel nf_tables (nftables) use-after-free vulnerability. The issue occurs in nf_tables when using nft_chain_lookup_byid, where a chain’s active state wasn’t properly checked, enabling a local attacker with CAP_NET_ADMIN in any user or network namespace to escalate privi...

CVE-2017-1000158

CVE-2017-1000158 affects CPython up to 2.7.13, where an integer overflow in PyString_DecodeEscape within stringobject.c can cause a heap-based buffer overflow and may lead to arbitrary code execution. Publicly documented impacts across distributions confirm this vulnerability in older Python 2.7 ...

CVE-2018-17182

Summary : CVE-2018-17182 is a Linux kernel use-after-free vulnerability in the vmacache subsystem. The root cause is that the function vmacache_flush_all mishandles sequence number overflows, allowing a local attacker to trigger a use-after-free via certain thread creation/map/unmap/invalidation/...

CVE-2018-8037

CVE-2018-8037 affects Apache Tomcat 9.0.0.M9–9.0.9 and 8.5.5–8.5.31. The issue is a race condition where an async request completes as the container times out, plus a related NIO/NIO2 connector closure-tracking bug, which could cause a user to receive a response intended for another user. Impact ...

CVE-2019-20382

Summary of CVE-2019-20382 (mode C) QEMU 4.1.0 is affected by a memory leak in zrle_compress_data (ui/vnc-enc-zrle.c) during a VNC disconnect. The leak is due to incorrect use of libz, where memory allocated in deflateInit2 may not be freed by deflateEnd. This leads to a leak of allocated memory o...

CVE-2019-2999

CVE-2019-2999 is a Java SE Javadoc vulnerability affecting multiple OpenJDK/OpenJDK-derived builds (e.g., Java 7u231, 8u221, 11.0.4, 13.0.1) where the Javadoc component could allow unauthenticated network access leading to data exposure/updating under a sandboxed Java Web Start/Applet context. Co...

CVE-2021-31810

CVE-2021-31810 affects Ruby up to 2.6.7, 2.7.x up to 2.7.3, and 3.x up to 3.0.1. A malicious FTP server can abuse the PASV response to persuade Net::FTP to connect to an attacker-specified IP/port, enabling potential information disclosure about private services (e.g., port scans and service bann...

CVE-2023-2156

CVE-2023-2156 is a Linux kernel networking flaw in the RPL protocol handling that stems from improper processing of user-supplied data. The description in the initial document states that an unauthenticated remote attacker could cause a denial of service by triggering an assertion failure. Connec...

CVE-2023-27530

CVE-2023-27530 is a Denial of Service vulnerability in Rack’s Multipart MIME parsing. The issue affects Rack versions prior to v3.0.4.2, v2.2.6.3, v2.1.4.3, and v2.0.9.3, where crafted multipart requests can cause parsing to take disproportionately long. Public connected advisories confirm this i...

CVE-2024-32021

CVE-2024-32021 affects Git prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. When cloning a local repository that contains symlinks over the filesystem, Git may create hardlinks to arbitrary user-readable files in the destination repo’s objects/ directory. Also, clonin...

CVE-2024-50602

CVE-2024-50602 affects libexpat prior to 2.6.4. There is a crash in XML_ResumeParser when XML_StopParser can stop/suspend an unstarted parser. Affected: expat library used by various products; root cause is improper handling of parser state. Impact is a crash (DoS potential) as described in linke...

CVE-2010-3873

CVE-2010-3873 affects the Linux kernel X.25 implementation prior to 2.6.36.2. The vulnerability arises from improper parsing of facilities, allowing a remote attacker to trigger heap memory corruption and a kernel panic (partial availability) via malformed X25_FAC_CALLING_AE or X25_FAC_CALLED_AE ...

CVE-2018-10323

CVE-2018-10323 relates to the Linux kernel where the function xfs_bmap_extents_to_btree in fs/xfs/libxfs/xfs_bmap.c can trigger a NULL pointer dereference in xfs_bmapi_write when processing crafted XFS images. The vulnerability affects kernels up to 4.16.3 and can lead to denial of service via lo...

CVE-2018-10925

CVE-2018-10925 affects PostgreSQL before certain fixed releases: 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24. The flaw: failure to properly authorize certain INSERT ... ON CONFLICT DO UPDATE statements. An attacker with CREATE TABLE privileges (and potentially INSERT/limited UPDATE privileges on a t...

CVE-2018-20169

CVE-2018-20169 affects the Linux kernel USB subsystem. It stems from missing size checks in __usb_get_extra_descriptor when reading an extra descriptor, potentially enabling denial-of-service (and, per CVSS hints, high impact on confidentiality/integrity/availability). Affected versions: Linux ke...

CVE-2019-2964

CVE-2019-2964 affects Oracle Java SE/Java SE Embedded across multiple OpenJDK branches, including Java 7u231, 8u221, 11.0.4 and 13 (and Embedded 8u221) with vulnerable components in Concurrency. Exploitation can occur via APIs by unauthenticated network access, potentially causing a partial denia...

CVE-2019-2978

CVE-2019-2978 relates to the OpenJDK/Java SE Networking component. Affected Java releases include Java SE: 7u231, 8u221, 11.0.4, 13 and Java SE Embedded: 8u221. Root cause: incorrect handling of nested jar: URLs in the Jar URL handler, which can be triggered via network interaction. Impact: poten...

CVE-2019-7222

The CVE-2019-7222 issue affects the KVM component of the Linux kernel up to version 4.20.5, where a vulnerability allowed information leakage by exposing uninitialized kernel stack contents to a guest. Connected documents explicitly refer to “KVM: leak of uninitialized stack contents to guest (CV...

CVE-2020-15466

Wireshark GVCP dissector (Wireshark 3.2.0–3.2.4) could enter an infinite loop due to a non-progressing offset in GVCP parsing. The root cause is in epan/dissectors/packet-gvcp.c; the fix ensures the offset advances in all code paths. Affected products include Wireshark 3.2.0–3.2.4 across multiple...

CVE-2021-23177

CVE-2021-23177 concerns an improper link resolution flaw in libarchive when extracting archives. A crafted archive could trigger changes to the ACL of the link target, potentially allowing a local attacker to modify file ACLs and gain higher privileges. The vulnerability is described across multi...

CVE-2021-31806

CVE-2021-31806 is a memory-management bug in Squid’s HTTP Range request processing that enables a Denial of Service against all clients using the proxy. Affected are Squid releases before 4.15 and 5.x before 5.0.6. Public advisories and vendor/procurer notes corroborate impact as DoS (not informa...

CVE-2022-21443

CVE-2022-21443 is an Oracle Java SE/GraalVM EE vulnerability affecting the Libraries component. Affected: Oracle Java SE 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM EE 20.3.5, 21.3.1, 22.0.0.2. Exploitation is network-based and can lead to a partial denial of service, with unauthenticated a...