10005 matches found
CVE-2019-2983
CVE-2019-2983 affects Oracle Java SE/Java SE Embedded (component: Serialization). Affected: Java SE 7u231, 8u221, 11.0.4, 13; Java SE Embedded 8u221. Unauthenticated attacker with network access can trigger a partial denial of service in Java SE/Embedded. Base CVSSv3.0 score 3.7 (Network, High/No...
CVE-2023-4429
CVE-2023-4429 affects Google Chrome (Chromium-based) Loader use-after-free vulnerabilities prior to Chrome 116.0.5845.110. The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with impact described as high. Connected advisories confirm Chromium/Chrome...
CVE-2023-45871
CVE-2023-45871 affects the Linux kernel IGB driver (drivers/net/ethernet/intel/igb/igb_main.c) before version 6.5.3. The vulnerability stems from an inadequate buffer size that can fail to accommodate frames larger than the MTU, potentially leading to a buffer overrun. Public documents in connect...
CVE-2017-16944
CVE-2017-16944 affects Exim 4.88/4.89 where the receive_msg function in receive.c can be abused via BDAT command handling to cause a denial of service (infinite loop and stack exhaustion). Public references in advisories and security trackers confirm this as a BDAT data handling vulnerability in ...
CVE-2019-11500
CVE-2019-11500 affects Dovecot (and Pigeonhole) where protocol processing mishandles NULL bytes, enabling out-of-bounds writes and remote code execution. Affected: Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2; Pigeonhole before 0.5.7.2. Root cause: improper NULL-byte handling in IMAP/ManageSi...
CVE-2019-14897
CVE-2019-14897 affects the Linux kernel (kernel-2.6.32) Marvell WiFi chip driver. A stack-based buffer overflow in this driver can allow a remote attacker to cause a denial of service (system crash) or possibly execute arbitrary code when a STA operates in IBSS mode and connects to another STA. T...
CVE-2019-18804
CVE-2019-18804 affects DjVuLibre 3.5.27. Public records show a NULL pointer dereference in DJVU::filter_fv (IW44EncodeCodec.cpp). Multiple advisories confirm this vulnerability in djvulibre and note it could crash viewers and, in some cases, enable code execution through crafted DjVu files. Debia...
CVE-2020-7238
CVE-2020-7238 affects Netty 4.1.43.Final and allows HTTP Request Smuggling due to mishandling of Transfer-Encoding whitespace and a later Content-Length header, building on an incomplete fix for CVE-2019-16869. Connected documents confirm vendor advisories and multiple distributions reference Net...
CVE-2024-33601
CVE-2024-33601 affects the glibc-based nscd daemon, specifically its netgroup cache. The cache uses xmalloc/xrealloc and may terminate the daemon on a memory-allocation failure, causing a denial of service to clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd. Evidenc...
CVE-2024-44309
CVE-2024-44309 concerns a cookie management issue in Apple environments. The root cause is improper state management that can enable cross-site scripting when processing malicious web content. Affected products/versions include Safari 18.1.1, iOS 17.7.2, iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 1...
CVE-2018-3136
CVE-2018-3136 affects Oracle Java SE/Embedded Security component (and related features) with Java SE 6u201, 7u191, 8u182, 11 and Java SE Embedded 8u181 (AIX/others show broader OpenJDK/OpenJDK updates). The vulnerability allows unauthenticated network access to compromise Java SE/Embedded Securit...
CVE-2019-13297
CVE-2019-13297 (ImageMagick) is a heap-based buffer over-read in ImageMagick 7.0.8-50 Q16 related to thresholding logic when the height value is mishandled (threshold.c). The issue can cause denial of service and potential data leakage by crafting a malicious image. The connected advisories refer...
CVE-2020-35653
CVE-2020-35653 affects Pillow up to version 8.0.x, where the PCX decoder (PcxDecode) may trigger a buffer over-read when processing a crafted PCX file because the user-supplied stride is trusted for buffer calculations. The issue is documented across multiple adapters (e.g., Debian, Arch, AlmaLin...
CVE-2021-3778
CVE-2021-3778 is a heap-based buffer overflow in Vim. Public feeds attribute the issue to heap-based corruption caused by invalid UTF-8 handling in Vim’s code paths (examples include utf_ptr2char() in mbyte.c per ALAS2-2021-1728, and references in Debian’s security tracker). The connected documen...
CVE-2022-25258
The CVE-2022-25258 issue affects the Linux kernel USB Gadget subsystem, specifically drivers/usb/gadget/composite.c, where interface OS descriptor requests with large indices or NULL function pointer handling were not properly validated, enabling memory corruption. It affects kernels before 5.16....
CVE-2018-14355
CVE-2018-14355 affects Mutt before 1.10.1 and NeoMutt before 2018-07-16. The issue lies in imap/util.c mishandling ".." directory traversal in a mailbox name, enabling potential exposure due to path traversal. Public references note multiple distributions released fixes: upstream patches for Mutt...
CVE-2019-13295
CVE-2019-13295 is a heap-based buffer over-read in ImageMagick 7.x (notably 7.0.8-50 Q16) related to thresholding logic in AdaptiveThresholdImage when a width of zero is mishandled in MagickCore/threshold.c. Public documents confirm the flaw and its memory-leaning impact (crash or leakage of data...
CVE-2019-17670
CVE-2019-17670 affects WordPress prior to 5.2.4, where a Server Side Request Forgery (SSRF) arises from mishandling Windows paths during validation of relative URLs. The vulnerability is web-facing (attack vector: NETWORK) with no authentication and can impact confidentiality, integrity, and avai...
CVE-2019-19534
Summary: CVE-2019-19534 affects the Linux kernel before 5.3.11, enabling a local info-leak via the Peak USB CAN driver (drivers/net/can/usb/peak_usb/pcan_usb_core.c) when a malicious USB device is connected. The root cause is missing initialization of certain structures in the peak_usb CAN driver...
CVE-2019-2981
CVE-2019-2981 affects Oracle Java SE/Java SE Embedded (component: JAXP) with affected releases including Java SE 7u231, 8u221, 11.0.4 and 13; Java SE Embedded 8u221. The issue allows an unauthenticated network attacker to cause a partial denial of service in Java SE/Embedded, via the JAXP path (p...
CVE-2020-17525
CVE-2020-17525 affects Subversion’s mod_authz_svn. A crash occurs when using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client requests a non-existent repository URL, potentially disrupting service. Fixed in various builds: mod_dav_svn + mod_authz_svn servers ...
CVE-2020-26259
CVE-2020-26259 affects XStream in IBM Storage Copy Data Management (2.2.0.0–2.2.25.0). Unmarshalling user-supplied data could allow arbitrary file deletion on the host if the process runs with sufficient privileges. IBM’s remediation for the affected products is to upgrade to 2.2.26.0 (Linux) and...
CVE-2021-3483
CVE-2021-3483 refers to a vulnerability in the Linux kernel Nosy driver where a device can be inserted twice into a doubly-linked list, causing a use-after-free when one is removed. This affects versions before 5.12-rc6 and impacts confidentiality, integrity, and availability. The incident is loc...
CVE-2021-39149
CVE-2021-39149 affects the XStream Java serialization library. The vulnerability permits a remote attacker to load and execute arbitrary code by manipulating the processed input stream. The issue is tied to XStream’s input handling and the move away from blacklist-based security (1.4.18), relying...
CVE-2022-29458
CVE-2022-29458 affects ncurses 6.3 prior to patch 20220416, with an out-of-bounds read in tinfo/read_entry.c (convert_strings) leading to a segmentation fault. Connected sources confirm the issue is tied to the terminfo processor and mention Linux distributions (e.g., Astra Linux, Cloud Foundry) ...
CVE-2018-17407
Summary (CVE-2018-17407) : TeX Live before 2018-09-21 contains a buffer overflow in the Type 1 font handling code, specifically in the t1_check_unusual_charstring function within writet1.c. This vulnerability can allow arbitrary code execution if a malicious font is loaded by vulnerable tools (pd...
CVE-2020-29130
CVE-2020-29130 is a buffer over-read in libslirp’s SLiRP networking code (through 4.3.1). Several advisories document that slirp.c reads header data beyond the packet length, enabling potential leakage of host information bytes to a privileged guest. Public sources consistently classify the impac...
CVE-2020-5311
Pillow’s vulnerability CVE-2020-5311 affects the libImaging/SgiRleDecode.c path and is triggered by an SGI buffer overflow in Pillow versions before 6.2.2. The issue is in the SGI image parsing code, not in a user-provided input path description; impact is partial to high depending on exposure of...
CVE-2020-6519
CVE-2020-6519 is a policy bypass in the Content Security Policy (CSP) for Google Chrome, allowing a remote attacker to bypass CSP via a crafted HTML page in Chrome versions prior to 84.0.4147.89. Connected sources confirm public advisories and fixes across distributions: Debian notes a security u...
CVE-2021-3796
CVE-2021-3796 is a use-after-free vulnerability in Vim. Multiple connected advisories confirm the issue in Vim and attribute the root cause to improper memory handling (notably use-after-free in relevant Vim code paths such as nv_replace()). The vulnerability affects Vim versions prior to the fix...
CVE-2021-4115
CVE-2021-4115 — polkit denial of service via file descriptor exhaustion . The flaw allows an unprivileged user to crash polkit, affecting availability. Public advisories confirm a fix is available upstream and in vendor advisories, with multiple OS-specific patches. For example, Arch Linux ASA-20...
CVE-2021-42008
The CVE-2021-42008 entry concerns the Linux kernel 6pack driver (drivers/net/hamradio/6pack.c). It describes a slab out-of-bounds write in decode_data up to kernel versions before 5.13.13, enabling a local attacker with CAP_NET_ADMIN to achieve root access. Connected documents corroborate the aff...
CVE-2022-0617
CVE-2022-0617 is a NULL pointer dereference in the Linux kernel UDF filesystem. A local user could trigger udf_file_write_iter with a crafted UDF image to crash the system. Affected: Linux kernel 4.2-rc1 through 5.17-rc2 per initial description; multiple connected advisories corroborate UDF NULL ...
CVE-2022-21365
CVE-2022-21365 is discussed across multiple connected advisories as affecting Oracle Java SE and GraalVM EE components (ImageIO, JAXP, Libraries, Hotspot) with affected Java versions including 7u321, 8u311, 11.0.13, 17.0.1 (and later 17.01 in some entries); GraalVM EE: 20.3.4 and 21.3.0. The desc...
CVE-2022-32207
CVE-2022-32207 affects curl: when saving cookies, alt-svc and HSTS data, the final rename can widen target file permissions, exposing updates to more users. Affected versions are curl before 7.84.0; remediation is to upgrade to 7.84.0 or newer (as indicated by multiple advisories).
CVE-2023-5481
CVE-2023-5481 : Affected component is Google Chrome/Chromium Downloads. The root cause is an inappropriate implementation that permits a remote attacker to spoof the security UI via a crafted HTML page, leading to a spoofing risk. The vulnerability is associated with Chrome/Chromium versions prio...
CVE-2015-1283
The material confirms CVE-2015-1283 is an Expat XML_GetBuffer integer/heap overflow issue, with impact on multiple products using expat up to 2.1.0 (e.g., Chrome before 44.0.2403.89). Related CVEs include CVE-2015-2716 and CVE-2016-4472 (note: the latter indicates the overflow protection was remo...
CVE-2019-13306
CVE-2019-13306 is a stack-based buffer overflow in ImageMagick 7.0.8-50 Q16 WritePNMImage causing potential denial of service or code execution via crafted PNM files. The connected advisories confirm ImageMagick is affected across multiple ALAS/ALAS2 entries and list CVE-2019-13306 among included...
CVE-2019-15098
CVE-2019-15098 affects the Linux kernel driver ath6kl/usb.c (USB wifi driver) up to version 5.2.9. The issue is a NULL pointer dereference caused by an incomplete address in an endpoint descriptor, potentially leading to a crash or denial of service. The connected Nessus/Unity Linux advisories co...
CVE-2021-32862
CVE-2021-32862 is a cross-site scripting (XSS) vulnerability in nbconvert when generating HTML from user-controlled notebooks. The GitHub Security Lab disclosed sixteen routes to inject arbitrary HTML into HTML exports (e.g., nbviewer). Connected advisories confirm nbconvert is affected and provi...
CVE-2023-4073
CVE-2023-4073: Out of bounds memory access in ANGLE used by Google Chrome on macOS before 115.0.5790.170 permits remote exploitation leading to potential heap corruption via a crafted HTML page. Affected product: Google Chrome (Chromium-based) on macOS; vulnerable component: ANGLE within the brow...
CVE-2017-16943
CVE-2017-16943 and CVE-2017-16944 are use-after-free (CVE-16943) and BDAT handling DoS (CVE-16944) flaws in Exim’s receive_msg function (receive.c) for the SMTP daemon on Exim 4.88/4.89. CVE-16943 enables remote code execution or crash; CVE-16944 causes denial of service via infinite loop/stack e...
CVE-2019-19052
CVE-2019-19052 is a memory-leak vulnerability in the Linux kernel, specifically in drivers/net/can/usb/gs_usb.c within the gs_can_open() function. The issue allows a denial of service through memory consumption when usb_submit_urb() fails, affecting the kernel up to version before 5.3.11. The rea...
CVE-2019-2962
CVE-2019-2962 is confirmed in connected documents as an OpenJDK 7 issue affecting the 2D component, specifically a NULL pointer dereference in DrawGlyphList (2D) that can contribute to denial of service. The CentOS/Red Hat advisories list OpenJDK 7 packages as affected and recommend updating to a...
CVE-2019-2987
CVE-2019-2987 affects the Java SE OpenJDK 2D component; the root cause is a missing glyph bitmap dimension check in FreetypeFontScaler, enabling unauthenticated network-access exploitation with potential partial DoS via crafted font data. Public advisories (e.g., Red Hat/CentOS) associate this CV...
CVE-2020-12108
Summary: CVE-2020-12108 affects GNU Mailman prior to 2.1.31, allowing Arbitrary Content Injection via the /options/mailman page (and related login/archival areas per advisories). Affected software: Mailman 2.1.x series before 2.1.31. Root cause / vector: improper handling on the options/login pat...
CVE-2020-21913
The CVE-2020-21913 entry concerns ICU-20850 (ICU 66.1) containing a use-after-free in pkg_createWithAssemblyCode (tools/pkgdata/pkgdata.cpp). IBM’s security bulletin links this ICU issue to IBM Db2, stating multiple ICU-related vulnerabilities affect Db2 and providing affected versions (DB2 10.5....
CVE-2020-9951
CVE-2020-9951 is a WebKit use-after-free vulnerability in Safari (WebKit GTK also mirrors related WebKit issues). Exploitation requires a victim to visit a specially crafted web site, potentially enabling arbitrary code execution on affected Apple platforms. The issue is addressed in Safari/WebKi...
CVE-2022-23221
H2Database/H2 Console, affected version before 2.1.210, is vulnerable to remote code execution via a crafted JDBC URL in the H2 Console. The vulnerability is triggered by a substring in the URL jdbc:h2:mem with IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT, enabling arbitrary ...