CVE-2018-10925

CVE-2018-10925 affects PostgreSQL before certain fixed releases: 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24. The flaw: failure to properly authorize certain INSERT ... ON CONFLICT DO UPDATE statements. An attacker with CREATE TABLE privileges (and potentially INSERT/limited UPDATE privileges on a t...

CVE-2018-20169

CVE-2018-20169 affects the Linux kernel USB subsystem. It stems from missing size checks in __usb_get_extra_descriptor when reading an extra descriptor, potentially enabling denial-of-service (and, per CVSS hints, high impact on confidentiality/integrity/availability). Affected versions: Linux ke...

CVE-2018-5711

The vulnerability CVE-2018-5711 affects the GD Graphics Library (libgd2) as used by PHP. Affected GIF parsing code in gd_gif_in.c suffers an integer signedness error that can cause an infinite loop when processing crafted GIF data via imagecreatefromgif or imagecreatefromstring, potentially leadi...

CVE-2020-14390

CVE-2020-14390 affects the Linux kernel (pre-5.9-rc6). A change in screen size can trigger an out-of-bounds memory write, causing memory corruption or denial of service; the possibility of privilege escalation is not ruled out. Affected component is the kernel’s frame/ framebuffer-related handlin...

CVE-2022-24302

CVE-2022-24302 describes a race condition in Paramiko's write_private_key_file (between creation and chmod) that could allow unauthorized information disclosure. Affected are Paramiko releases before 2.10.1. Connected sources corroborate the race condition and flag it for Paramiko; mitigation is ...

CVE-2023-4046

CVE-2023-4046 corresponds to a bug where an incorrect value used during WASM JIT compilation could cause a stale global variable to influence compilation, yielding an exploitable crash in the content process. The vulnerability affects Firefox plus ESR branches: Firefox < 116, ESR < 102.14, ...

CVE-2024-4767

CVE-2024-4767 is a fault in Firefox/Thunderbird where IndexedDB files were not properly deleted when a window closed if browser.privatebrowsing.autostart is enabled. Affected products include Firefox versions older than 126, Firefox ESR older than 115.11, and Thunderbird older than 115.11. The is...

CVE-2010-1205

CVE-2010-1205 is a buffer overflow in libpng (pngpread.c) that could allow remote code execution via a crafted PNG image. Affected libpng versions are prior to 1.2.44 and prior to 1.4.3. The overflow is tied to the internal copy in pngpread.c and is described across advisories mentioning memory c...

CVE-2016-1583

CVE-2016-1583 affects the Linux kernel: ecryptfs_privileged_open (fs/ecryptfs/kthread.c) allows a local attacker to gain privileges or cause a denial of service via crafted mmap calls for /proc pathnames, triggering recursive pagefault handling. Affects kernels prior to 4.6.3; patch released in 4...

CVE-2018-14463

CVE-2018-14463 affects tcpdump before 4.9.3 with a buffer over-read in the VRRP parser (print-vrrp.c:vrrp_print) for VRRP version 2. The connected AlmaLinux advisory confirms the vulnerability and points to upgrading tcpdump to 4.9.3 or later as a remediation; no exploitation details are provided...

CVE-2019-5477

CVE-2019-5477 affects Nokogiri up to v1.10.3, where a command injection could occur if Ruby’s Kernel.open is used on an unsafe filename produced by Nokogiri::CSS::Tokenizer#load_file. Rexical v1.0.6 and earlier generate the problematic code; the issue was addressed when Rexical v1.0.7 and Nokogir...

CVE-2020-15466

Wireshark GVCP dissector (Wireshark 3.2.0–3.2.4) could enter an infinite loop due to a non-progressing offset in GVCP parsing. The root cause is in epan/dissectors/packet-gvcp.c; the fix ensures the offset advances in all code paths. Affected products include Wireshark 3.2.0–3.2.4 across multiple...

CVE-2020-24513

The CVE-2020-24513 entry concerns Intel microcode affecting some Intel Atom processors, described as a domain-bypass transient execution vulnerability that could enable information disclosure via local access for an authenticated user. Connected advisories show the vulnerability is mitigated by u...

CVE-2022-23219

The CVE-2022-23219 entry is supported by concrete details in connected sources: glibc’s sunrpc clnt_create copies its hostname onto the stack without length validation (through glibc 2.34). This can cause a stack-based buffer overflow, leading to denial of service or, on systems without stack pro...

CVE-2017-14494

CVE-2017-14494 affects dnsmasq: when acting as a DHCPv6 relay, it could leak memory contents there by forwarding process memory in crafted DHCPv6 requests. This information disclosure vulnerability is tied to the DHCPv6 relay code path. Public advisories (e.g., ALAS2-2019-1251, CESA-2017:2836, AR...

CVE-2018-1320

CVE-2018-1320 affects Apache Thrift: Java client library versions 0.5.0–0.11.0. The issue stems from an assert in TSaslTransport.isComplete that validates SASL handshakes; disabling this check can leave SASL negotiation validation incomplete, enabling a security bypass. Multiple connected sources...

CVE-2018-3665

CVE-2018-3665 affects systems using Intel Core-based CPUs with Lazy FP state restore enabled. A local attacker could exploit speculative execution side channels to read FP/SIMD state from other processes or the kernel. Public details in connected docs show Linux kernel mitigations (disable Lazy F...

CVE-2020-25672

The CVE-2020-25672 entry refers to a memory-leak vulnerability in the Linux kernel NFC LLCP path (llcp_sock_connect). The issue is described as a memory leak in the NFC LLCP implementation, which can lead to resource exhaustion and denial of service when non-blocking socket operations trigger the...

CVE-2022-1941

CVE-2022-1941 affects Protocol Buffers parsing for protobuf-cpp and protobuf-python, causing out-of-memory and DoS on parsing malformed MessageSet inputs. Affected versions include protobuf-cpp up to 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1, 3.21.5 and protobuf-python up to 4.21.5, with 3.16/3.17 n...

CVE-2022-27774

CVE-2022-27774 affects curl. The vulnerability is described as an insufficiently protected credentials issue where credentials could be leaked during HTTP(S) redirects when authentication is involved, potentially leaking to other hosts across different protocols or ports. Connected advisories sho...

CVE-2018-18335

CVE-2018-18335 is a heap/buffer overflow in the Skia component of Chromium/Google Chrome before 71.0.3578.80, exploitable via a crafted HTML page to achieve remote code execution or heap corruption. The linked advisories confirm this CVE as part of a set affecting Chromium/Chromium-based products...

CVE-2020-5312

CVE-2020-5312 is a Pillow vulnerability where libImaging/PcxDecode.c may overflow the PCX P mode buffer in Pillow versions before 6.2.2. The issue arises during decoding PCX images and could impact memory handling in affected builds. Public advisories and release notes indicate upgrading Pillow t...

CVE-2022-3970

LibTIFF vulnerability CVE-2022-3970 affects TIFFReadRGBATileExt in libtiff, causing an integer overflow and enabling remote impact. The issue is publicly disclosed; remediation is to apply the patch referenced as 227500897dfb07fb7d27f7aa570050e62617e3be (no explicit version). Multiple connected a...

CVE-2024-47175

CVE-2024-47175 affects CUPS via libppd, where ppdCreatePPDFromIPP2 does not sanitize IPP attributes when building the PPD buffer. When used with functions such as cfGetPrinterAttributes5, attacker-controlled input can lead to code execution through Foomatic, contributing to an exploit chain descr...

CVE-2017-2666

CVE-2017-2666 affects Undertow’s HTTP request line parsing, where invalid characters are allowed. This misparsing can be exploited with a proxy that interprets the same request differently, enabling data to be injected into the HTTP response. Practical consequences stated include web-cache poison...

CVE-2019-2988

CVE-2019-2988 affects Oracle Java SE/SE Embedded (component 2D). Affected: Java SE 7u231, 8u221, 11.0.4, 13; Java SE Embedded 8u221. Root cause: issues in the 2D graphics subsystem enabling unauthenticated network-based access to trigger a partial denial of service. Impact is explicitly a partial...

CVE-2020-0034

CVE-2020-0034 describes an out-of-bounds read in libvpx’s vp8_decode_frame (decodeframe.c) due to improper input validation that could leak information remotely if error correction is enabled. The vulnerability is exploitable remotely with no user interaction and could lead to information disclos...

CVE-2020-12771

CVE-2020-12771 involves the Linux kernel component drivers/md/bcache/btree.c , where the function btree_gc_coalesce may deadlock if a coalescing operation fails. The connected Unity/Nessus entries reproduce: an issue in the kernel up to 5.6.11 with deadlock in the btree GC coalescing path, impact...

CVE-2020-15706

CVE-2020-15706 affects GRUB2 (2.04 and earlier) and is a race-condition/use-after-free in grub_script_function_create() triggered by redefining a function during execution, leading to arbitrary code execution and Secure Boot restriction bypass. Remediation is to upgrade to patched GRUB2 packages ...

CVE-2021-43975

CVE-2021-43975 is described in connected material as a Linux kernel vulnerability up to version 5.15.2 where the hw_atl_utils_fw_rpc_wait() function in the aQuantia AQtion Ethernet driver (drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c) allows a local attacker who can introduce a cr...

CVE-2022-40150

CVE-2022-40150 affects the Jettison JSON/XML parser library (libjettison-java). Public sources describe a Denial of Service vulnerability caused by parsing untrusted input, leading to Out of Memory or related exhaustion that can crash the parser. Exploitation details are not provided beyond this ...

CVE-2017-6964

CVE-2017-6964 describes a local privilege escalation in eject via the dmcrypt-get-device helper, which does not check return values from setuid() and setgid(). The flaw allows code execution with root privileges when using eject, as reported for Debian/Ubuntu packages (eject versions prior to 2.1...

CVE-2018-3169

CVE-2018-3169 — concrete details found : The vulnerability affects Oracle Java SE/Java SE Embedded (Hotspot) with affected versions Java SE 7u191, 8u182, 11 and Java SE Embedded 8u181. It is exploitable via network access and does not require authentication, with attack potential described as dif...

CVE-2019-3874

CVE-2019-3874 concerns the SCTP socket buffer not being accounted by the cgroups subsystem, enabling a denial-of-service against affected systems. The vulnerability is described in Unity Linux advisories referencing kernel SCTP handling and states that “Kernel 3.10.x and 4.18.x branches are belie...

CVE-2020-11078

CVE-2020-11078 affects httplib2 prior to 0.18.0. An attacker controlling an unescaped portion of the URI in httplib2.Http.request() could alter request headers and body and send hidden requests to the same server. The issue occurs when URIs are built by string concatenation rather than proper esc...

CVE-2020-2655

CVE-2020-2655 affects Oracle Java SE JSSE in Java 11.0.5 and 13.0.1. The vulnerability allows an unauthenticated attacker with network access over HTTPS to potentially update/insert/delete or read data in Java SE, with the attack surface tied to sandboxed Java Web Start/Applet deployments and API...

CVE-2021-28971

The CVE-2021-28971 vulnerability affects the Linux kernel: specifically, intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c can mishandle PEBS status on Haswell-era CPUs, potentially causing a system crash when userspace tools (e.g., perf-fuzzer) access performance events. The issue exists in...

CVE-2021-39140

CVE-2021-39140 affects the XStream Java library. Connected sources describe a vulnerability in XStream up to version 1.4.18 that may allow a remote attacker to cause 100% CPU denial-of-service by manipulating the input stream; no user interaction required. Affected platforms reference upstream be...

CVE-2021-39146

CVE-2021-39146 is an XStream deserialization vulnerability that has been addressed in multiple IBM advisories. The issue allows remote code execution via unsafe object deserialization in XStream across products that bundle the library (e.g., Atlas eDiscovery Process Management, ITNCM, IBM Spectru...

CVE-2021-41079

CVE-2021-41079 affects Apache Tomcat when TLS is configured with NIO/NIO2 and OpenSSL. Multiple sources confirm: Tomcat versions 8.5.0–8.5.63, 9.0.0-M1–9.0.43, and 10.0.0-M1–10.0.2 fail to properly validate incoming TLS packets, allowing a specially crafted TLS packet to trigger an infinite loop ...

CVE-2022-0529

CVE-2022-0529 affects unzip. The flaw is a vulnerability in the handling of Unicode/wide strings during conversion to local strings, causing a heap out-of-bounds write when processing a crafted ZIP, leading to crash or potential code execution. Multiple connected advisories confirm this, with ven...

CVE-2019-13304

Summary : CVE-2019-13304 affects ImageMagick’s PNM image handling. The Initial document notes a stack-based buffer overflow in WritePNMImage (coders/pnm.c) caused by a misplaced assignment, with ImageMagick 7.0.8-50 Q16 cited in the description. The entry states that this could crash the applicat...

CVE-2020-2593

CVE-2020-2593 affects multiple OpenJDK/JRE components across the Java SE/Embedded stack (Networking, Security, Serialization, 2D, JAXP, Libraries, etc.). Connected advisories enumerate affected versions including Java SE 7u231/7u241, 8u221/8u231, 11.0.4/11.0.5, and 13.0.1, with OpenJDK builds for...

CVE-2020-2934

CVE-2020-2934 affects MySQL Connector/J (Oracle MySQL) with vulnerable Connector/J components in affected releases: 8.0.19 and earlier, and 5.1.48 and earlier. A remote attacker can exploit over multiple network protocols with unauthenticated access; however, successful exploitation requires user...

CVE-2021-20270

CVE-2021-20270 describes an infinite loop in Pygments’ SMLLexer, affecting Pygments 1.5–2.7.3, which can cause DoS during syntax highlighting of StandardML sources (e.g., input containing only the keyword “exception”). Connected advisories confirm affected distributions (e.g., Debian, AlmaLinux, ...

CVE-2022-36946

The CVE-2022-36946 issue affects nfqnl_mangle in net/netfilter/nfnetlink_queue.c of the Linux kernel (through 5.18.14). When nf_queue verdicts include a one-byte nfta_payload attribute, skb_pull can encounter a negative skb->len, enabling a remote attacker to trigger a denial of service (panic...

CVE-2023-4045

CVE-2023-4045 involves Offscreen Canvas cross-origin taint tracking in Firefox and ESR branches. Affects Firefox < 116 and ESR

CVE-2019-12524

CVE-2019-12524 concerns Squid up to version 4.7 where the Cache Manager block relies on a url_regex rule that decodes incoming requests. An attacker can craft an encoded URL to bypass the url_regex check and access the blocked Cache Manager resource. Affects Squid’s request handling path and deco...

CVE-2019-14895

CVE-2019-14895 is a heap-based buffer overflow in the Marvell WiFi chip driver (mwifiex) of the Linux kernel. Affected: Linux kernel 3.x and 4.x prior to 4.18.0; vulnerability can occur when a station negotiates a connection while handling remote country settings. Impact stated in public sources ...

CVE-2020-25592

CVE-2020-25592 affects SaltStack Salt via salt-netapi, where eauth credentials/tokens are not properly validated, allowing an unauthenticated user to bypass authentication and invoke Salt SSH. Evidence in connected advisories confirms the issue and that multiple distributions issued fixes (e.g., ...