CVE-2022-23221

H2Database/H2 Console, affected version before 2.1.210, is vulnerable to remote code execution via a crafted JDBC URL in the H2 Console. The vulnerability is triggered by a substring in the URL jdbc:h2:mem with IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT, enabling arbitrary ...

CVE-2023-4056

Memory safety bugs in Firefox 115/Thunderbird 115 and older (Firefox <116, ESR <102.14/115.1; Thunderbird

CVE-2017-7895

CVE-2017-7895 affects the Linux kernel NFSv2/v3 server (fs/nfsd/nfs3xdr.c, fs/nfsd/nfsxdr.c). A remote attacker can craft requests that bypass end-of-buffer checks, triggering pointer-arithmetic errors or other unspecified impacts. Affected kernels include up to 4.10.13; remediation is to upgrade...

CVE-2020-14347

CVE-2020-14347 affects the X.Org X server (xorg-server): a flaw that leaks uninitialized heap memory from the server to clients, potentially enabling information disclosure and, in elevated-privilege setups, ASLR bypass. Affected releases include Xorg-server prior to a patched version; multiple a...

CVE-2022-25314

CVE-2022-25314 affects Expat (libexpat) and is caused by an integer overflow in copyString() in xmlparse.c. The issue can enable arbitrary code execution or crash the process when processing crafted input. Public advisories and bulletins from AlmaLinux, AlmaLinux 9/8, Astra Linux, Cloud Foundry, ...

CVE-2022-32212

CVE-2022-32212 is a Node.js OS Command Injection due to an insufficient IsAllowedHost validation, enabling rebinding attacks. Affected versions are Node.js <14.20.0, <16.20.0, and

CVE-2023-23908

CVE-2023-23908 remains an information-disclosure risk tied to improper access control in some 3rd Gen Intel Xeon Scalable processors. Connected advisories indicate mitigations via microcode updates. Notable remediation references across sources include: Debian security advisories (intel-microcode...

CVE-2017-9078

CVE-2017-9078 affects Dropbear server prior to 2017.75, where a post-authentication double-free during TCP listener cleanup (when -a is enabled) could allow root remote code execution. The connected sources document the vulnerability and its Fix: Dropbear updates to 2017.75+ (and related advisori...

CVE-2018-1000024

The CVE-2018-1000024 vulnerability affects Squid HTTP Caching Proxy (versions 3.0–3.5.27 and 4.0–4.0.22). It is caused by Incorrect Pointer Handling in ESI Response Processing, enabling a Denial of Service when a remote server delivers an HTTP response payload with valid but unusual ESI syntax. I...

CVE-2018-16881

CVE-2018-16881 affects rsyslog’s imptcp module. An attacker can send a specially crafted TCP message to imptcp, causing the daemon to crash (DoS). Vulnerable in rsyslog versions before 8.27.0; upgrade to 8.27.0+ to remediate. Some advisories (e.g., MiracleLinux AXSA) reference an integer overflow...

CVE-2019-15604

CVE-2019-15604 concerns Node.js TLS handling with improper certificate validation, leading to a potential DoS through a crafted X.509 certificate. The issue affects Node.js 10, 12, and 13 and is mitigated by upgrading to versions where the fix is applied (e.g., Node.js 10.19.0+, 12.15.0+ as cited...

CVE-2019-17671

WordPress up to version 5.2.4 contains an information disclosure vulnerability caused by mishandling the static query property, allowing unauthenticated users to view certain private/draft content. The issue is triggered without authentication and affects WordPress prior to 5.2.4. A remediation i...

CVE-2020-25671

CVE-2020-25671 is a Linux kernel vulnerability in the NFC LLCP implementation where a refcount leak in llcp_sock_connect() can cause a use-after-free, potentially enabling privilege escalation or system crash via local access. Affected: Linux kernel NFC LLCP path; impact parameter: local attacker...

CVE-2020-29599

ImageMagick-identified CVE-2020-29599 is a command-injection flaw in the -authenticate handling for password-protected PDFs, exploitable via coders/pdf.c. Affected releases include ImageMagick 6.9.11-40 and 7.x prior to 7.0.10-40; user-supplied passwords could inject shell commands. Public adviso...

CVE-2021-38199

CVE-2021-38199 concerns the Linux kernel’s NFSv4 client. The vulnerability arises from incorrect connection-setup ordering in fs/nfs/nfs4client.c, which can be triggered by remote NFSv4 servers during trunking detection, potentially causing a denial of service by hanging mounts. Connected advisor...

CVE-2021-45444

CVE-2021-45444 affects zsh up to version 5.8.0, where an attacker-controlled command output inside the prompt can trigger code execution due to recursive PROMPT_SUBST expansion (notably via a %F argument). Connected advisories confirm the issue in zsh and state the fix as upgrading to zsh 5.8.1. ...

CVE-2022-40149

CVE-2022-40149 affects the Jettison library (libjettison-java) used to parse untrusted XML/JSON. A stack overflow-based DoS can crash the parser, enabling denial-of-service conditions and potential asset exposure in affected environments. Public sources confirm vulnerable versions and indicate fi...

CVE-2017-1000366

CVE-2017-1000366 affects glibc (vulnerable in 2.25 and earlier). A flaw in heap/stack memory handling allows crafted LD_LIBRARY_PATH values to influence allocation and memory layout, potentially enabling local arbitrary code execution via stack/heap aliasing. Several advisories and distributions ...

CVE-2019-18408

CVE-2019-18408 affects the libarchive library: a use-after-free in archive_read_format_rar_read_data (archive_read_support_format_rar.c) in a certain ARCHIVE_FAILED scenario, related to Ppmd7_DecodeSymbol, occurring in versions before 3.4.0. The issue is triggered while decompressing a crafted ar...

CVE-2020-6437

CVE-2020-6437 affects the WebView component in Chromium/Google Chrome prior to 81.0.4044.92. An inappropriate implementation/implementation error in WebView allowed a remote attacker to spoof the security UI via a crafted application. The issue is fixed upstream in 81.0.4044.92 (Debian notes also...

CVE-2021-1405

CVE-2021-1405 affects ClamAV (email parsing module) and was caused by improper variable initialization leading to a NULL pointer read. An unauthenticated, remote attacker could send a crafted email to trigger a crash of the ClamAV scanning process, yielding a denial of service. Affected product/v...

CVE-2021-21779

CVE-2021-21779 is a use-after-free vulnerability in the way WebKitGTK’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted page can cause an information leak and memory corruption; exploitation requires the victim to visit a malicious page. Public advisories from Arch...

CVE-2021-22939

CVE-2021-22939 affects Node.js HTTPS usage where passing undefined for rejectUnauthorized may bypass certificate validation, allowing connections to servers with expired certificates. Root cause: incomplete validation of the tls rejectUnauthorized parameter. Affected ranges vary by release stream...

CVE-2022-45693

CVE-2022-45693 affects the Jettison library (libjettison-java) prior to version 1.5.2. The issue is a stack overflow triggered by the map parameter in Jettison, enabling a Denial of Service via a crafted string. Connected sources indicate affected projects and packages (Debian libjettison-java fi...

CVE-2023-42852

CVE-2023-42852 is a WebKitGTK/WebKitGTK4 vulnerability described as a logic issue where processing web content may lead to arbitrary code execution. Affected products include the WebKitGTK/WebKitGTK4 stack; the issue is fixed in WebKitGTK/WebKitGTK4 updates (examples: AL2 ALAS advisory references...

CVE-2024-42472

CVE-2024-42472 affects Flatpak before 1.14.0/1.15.10 and allows a malicious or compromised Flatpak app using persistent directories to access or write files outside the sandbox. The root cause is a symlink-following issue when mounting persistent (persist) directories, causing the bind mount to f...

CVE-2018-1122

Procps-ng: Local privilege escalation in top (CVE-2018-1122) due to config_file() in top when HOME is unset in attacker-controlled directory. Affected: procps-ng prior to 3.3.15. Impact: local privilege escalation; Mitigation: upgrade to procps-ng 3.3.15 or newer (per multiple advisories). No exp...

CVE-2021-26930

CVE-2021-26930 affects the Xen PV backend: Linux kernel 3.11–5.10.16 Ker-branch Xen blkback.c grants mapping references from the frontend and may discard errors or fail to update internal state, causing the caller to access unmapped space. The result is potential denial of service, information le...

CVE-2022-1650

CVE-2022-1650: GitHub eventsource/eventsource prior to v2.0.2 suffers improper removal of sensitive information before storage/transfer. Affects eventsource/eventsource; root cause is incomplete sanitization of sensitive data in events. The connected document notes the fix to v2.0.2. No exploitat...

CVE-2022-21349

CVE-2022-21349 is an Oracle Java SE/GraalVM Enterprise Edition vulnerability affecting multiple Java components (e.g., 2D, ImageIO, JAXP, Hotspot, Libraries) across affected releases. Public advisories show affected Java SE versions (e.g., 7u321, 8u311) and GraalVM EE releases (20.3.4, 21.3.0). E...

CVE-2022-24958

CVE-2022-24958 relates to the Linux kernel USB gadget subsystem, specifically drivers/usb/gadget/legacy/inode.c up to version 5.16.8, where dev->buf release is mishandled. The consequence is a use‑after‑free condition in the USB gadget legacy path, which can lead to a local denial of service a...

CVE-2022-3623

CVE-2022-3623 refers to a Linux Kernel issue in the BPF path where a race condition in follow_page_pte (mm/gup.c) can be exploited remotely. Connected sources corroborate the root cause as a race in follow_page_pte and list the affected component as Linux Kernel with the BPF involvement. The Astr...

CVE-2023-3863

CVE-2023-3863 is a use-after-free vulnerability in the Linux kernel’s NFC stack (nfc_llcp_find_local in net/nfc/llcp_core.c). A local privileged user could trigger memory misuse leading to kernel information leak (impact on confidentiality; I=H, A=H in some advisories) and potential escalation. P...

CVE-2023-6186

CVE-2023-6186 affects LibreOffice. The vulnerability arises from insufficient macro permission validation, enabling certain built-in macros or internal commands to be executed when a user activates hyperlinks that target macros, without explicit user permission. Connected documents corroborate th...

CVE-2018-14469

CVE-2018-14469 affects tcpdump prior to 4.9.3. Root cause: buffer over-read in the IKEv1 parser (print-isakmp.c:ikev1_n_print()). Affected: tcpdump versions before 4.9.3. Impact stated in related advisories for tcpdump family includes potential crashes or instability; exploitation details are not...

CVE-2018-16851

CVE-2018-16851 affects Samba AD DC LDAP server. A NULL pointer dereference during LDAP entry processing (caching LDAP entries up to 256MB) can crash the Samba process, causing a denial of service. Affected products/versions include Samba 4.0.0 and older 4.7.12, 4.8.7, 4.9.3. The issue is specific...

CVE-2019-5420

CVE-2019-5420 affects Ruby on Rails in development mode where the secret token used to secure sessions is guessable, enabling potential RCE via Rails internals. Connected exploits demonstrate deserialization/RCE vectors dependent on a guessed development secret base. Vulnerable condition: running...

CVE-2019-7164

CVE-2019-7164 affects SQLAlchemy up to 1.2.17 and 1.3.x up to 1.3.0b2, allowing SQL Injection when the order_by parameter is controlled. The connected exploit repository (mlflow-cve-2019-7164) demonstrates a practical exploit pipeline using Docker/Hud and a Python test, indicating real-world appl...

CVE-2020-24386

CVE-2020-24386 affects Dovecot prior to 2.3.13. An authenticated user can abuse IMAP IDLE to trigger unhibernation via attacker-controlled parameters, enabling access to other users’ emails and path disclosure. Multiple connected advisories confirm fixes in downstream distributions (e.g., Dovecot...

CVE-2020-27617

CVE-2020-27617 affects QEMU 4.2.1, where a vulnerability in the network guest handling (eth_get_gso_type in net/eth.c) allows a guest OS user to trigger an assertion failure, crashing the QEMU process via crafted packet data that lacks a valid Layer 3 protocol. This is documented across multiple ...

CVE-2020-27821

CVE-2020-27821 is a QEMU memory-management vulerability where the msix_table_mmio_write() path can cause an out-of-bounds write to the MSI-X table during MMIO during memory-region cache initialization. A guest user could crash the QEMU host process, yielding a denial of service. The issue affects...

CVE-2020-8112

CVE-2020-8112 pertains to OpenJPEG’s OpenJPEG2/OpenJP2 codebase. A heap-based buffer overflow occurs in opj_t1_clbl_decode_processor (file openjp2/t1.c) when qmfbid==1, affecting OpenJPEG 2.3.1 and earlier builds up to 2020-01-28 (a separate issue from CVE-2020-6851). Public advisories and Debian...

CVE-2021-27291

CVE-2021-27291 affects pygments: the regex-based lexers used to parse languages can exhibit exponential/cubic worst-case behavior, enabling ReDoS with crafted input and potentially causing DoS. The issue is documented as fixed in pygments 2.7.4. Connected advisories reference python-pygments upgr...

CVE-2021-3872

Vim CVE-2021-3872 is a heap-based buffer overflow in drawscreen.c, specifically the win_redr_status() path. Reports note Vim packages were shipped with vulnerable builds and a fix is available via updated Vim releases; remediation is to upgrade Vim to a patched version. (Connected advisories refe...

CVE-2021-40346

CVE-2021-40346 affects HAProxy 2.0–2.5, due to an integer overflow in htx_add_header() , enabling an HTTP request smuggling attack that can bypass configured ACLs. The connected documents confirm the root cause and potential impact (HTTP request smuggling, ACL bypass). A public exploit/PoC is not...

CVE-2021-40490

CVE-2021-40490 describes a race condition in ext4_write_inline_data_end of the Linux kernel’s ext4 subsystem, present through kernel versions up to 5.13.13. Connected sources corroborate a race in ext4 and note this can enable denial of service and potential privilege impact. The Debian advisory ...

CVE-2018-14574

The CVE-2018-14574 entry describes an Open Redirect in Django's CommonMiddleware. Affected versions are Django 1.11.x prior to 1.11.15 and 2.0.x prior to 2.0.8. Exploitation can redirect users to arbitrary URLs when CommonMiddleware is used (with APPEND_SLASH considerations noted by some advisori...

CVE-2018-14629

CVE-2018-14629 : Samba’s LDAP server is affected by a DoS due to an infinite query recursion caused by CNAME loops. Affected versions are Samba before 4.7.12, 4.8.7, and 4.9.3. An unprivileged local attacker can create a CNAME entry that triggers recursion, leading to service denial. Connected ad...

CVE-2019-12814

CVE-2019-12814 is detailed in an IBM security bulletin related to Cloudera Observability on Premises (IBM) 3.5.3. The flaw stems from a polymorphic-typing deserialization issue in FasterXML jackson-databind 2.x up to 2.9.9. When Default Typing is enabled for an externally exposed JSON endpoint an...

CVE-2019-2992

CVE-2019-2992 affects Oracle Java SE/OpenJDK Java SE/Embedded, with vulnerable components including the 2D renderer. The connected documents show a concrete root cause: in the 2D component (font rendering), excess memory allocation during operations such as font glyph mapping can lead to a denial...