CVE-2019-5052

CVE-2019-5052 affects SDL2_image 2.0.4, where loading a PCX file can trigger an exploitable integer overflow, causing too little memory to be allocated and leading to a buffer overflow with potential code execution. The vulnerability is referenced in multiple advisories (e.g., Mageia MGASA-2019-0...

CVE-2021-3544

CVE-2021-3544 concerns memory leaks in QEMU’s virtio vhost-user-gpu (vhost-user-gpu.c and virgl.c) due to improper memory release after the effective lifetime, affecting versions up to and including 6.0. The issue, identified across multiple advisories, is a memory leak in the vhost-user-gpu comp...

CVE-2020-24511

CVE-2020-24511 is an information-disclosure vulnerability due to improper isolation of shared resources in some Intel processors, exploitable by a local, authenticated attacker. Connected advisories confirm affected microcode updates and remediation paths. Arch Linux advisory ASA-202106-34 recomm...

CVE-2021-32628

CVE-2021-32628 affects Redis. An integer overflow in the ziplist data structure can be triggered by setting very large ziplist-related configuration parameters (hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries, zset-max-ziplist-value), leading to heap corruption and pote...

CVE-2021-33829

CKEditor 4.x contains a cross-site scripting vulnerability in the HTML Data Processor (affected versions: 4.14.0–4.16.x prior to 4.16.1) where a crafted comment can cause execution of injected JavaScript due to mishandling of --!>. The issue enables remote XSS and is fixed in CKEditor 4.16.1 (...

CVE-2021-39147

CVE-2021-39147 relates to XStream, a Java library for XML serialization. Publicly available documents confirm a remote code execution risk when processing input streams, with XStream 1.4.18 and related releases susceptible unless mitigations are applied. Connected sources describe the root cause ...

CVE-2016-5131

CVE-2016-5131 is a use-after-free in libxml2 up to version 2.9.4 (as used in Chrome before 52.0.2743.82) triggered by XPointer range-to, leading to possible denial of service and potentially other impact. Connected advisories reaffirms libxml2 as the vulnerable component and references several ve...

CVE-2019-16942

CVE-2019-16942 affects FasterXML jackson-databind 2.0.0–2.9.10. When Default Typing is enabled for an externally exposed JSON endpoint and the service includes the commons-dbcp 1.4 jar on the classpath, with an accessible RMI endpoint, the vulnerability can allow execution of a malicious payload ...

CVE-2019-9851

CVE-2019-9851 affects Document Foundation LibreOffice prior to 6.2.6, where documents can specify pre-installed scripts that run on global script events (e.g., document-open). The fixed versions validate global script event handlers equivalently to document script handlers, mitigating the issue. ...

CVE-2021-28038

CVE-2021-28038 is a Linux kernel issue (through 5.11.3 with Xen PV) where the netback driver mishandles grant mapping errors, leaving memory allocation/error conditions untreated. In a Xen PV setup, a misbehaving networking frontend driver can trigger a host OS denial of service (Dom0 crash) from...

CVE-2021-39154

XStream (Java) vulnerability CVE-2021-39154: in affected XStream releases (e.g., 1.4.18) a remote attacker can load and execute arbitrary code by manipulating the input stream. Multiple advisories (Debian, Fedora, Amazon Linux 2 ALAS, etc.) reference the same CVE family and urge upgrading libxstr...

CVE-2016-9905

CVE-2016-9905 is tied to a crash in EnumerateSubDocuments when adding or removing sub-documents, affecting Thunderbird and Firefox ESR prior to 45.6. The connected sources consistently identify a crash/memory safety context (e.g., use-after-free and memory corruption patterns across related CVEs)...

CVE-2018-10940

CVE-2018-10940 affects the Linux kernel, where cdrom_ioctl_media_changed in drivers/cdrom/cdrom.c allows a local attacker to read kernel memory due to an incorrect bounds check in the CDROM_MEDIA_CHANGED ioctl. The vulnerability exists in versions before the 4.16.6 patch, which was released in th...

CVE-2020-25670

CVE-2020-25670 is a Linux kernel vulnerability affecting the NFC LLCP protocol implementation. The issue is a refcount leak in llcp_sock_bind() that can cause a use-after-free, with the potential for privilege escalation. The connected documents confirm the vulnerability and its association with ...

CVE-2020-36230

CVE-2020-36230 is an OpenLDAP flaw (pre-2.4.57) causing an assertion failure in slapd during X.509 DN parsing in decode.c ber_next_element, leading to denial of service. Affected: OpenLDAP before 2.4.57. Mitigation: upgrade to OpenLDAP 2.4.57 or later (as indicated by OpenLDAP advisories and link...

CVE-2021-3744

CVE-2021-3744 is a memory-leak DoS in the Linux kernel: the flaw occurs in the ccp_run_aes_gcm_cmd() function (drivers/crypto/ccp/ccp-ops.c), allowing memory consumption-based denial of service. Connected advisories (Astra Linux and Amazon Linux 2 kernel updates) confirm the same root cause and n...

CVE-2022-41804

CVE-2022-41804 describes unauthorized error injection in Intel SGX or Intel TDX on some Intel Xeon CPUs that could enable local privilege escalation. Public sources (Intel advisory INTEL-SA-00837 and Debian/Cloud Foundry advisories) confirm the vulnerability and provide mitigations. Affected prod...

CVE-2023-4049

CVE-2023-4049: Race conditions in Firefox reference counting can lead to use-after-free. Affected: Firefox <116, ESR <102.14, ESR

CVE-2023-5996

CVE-2023-5996 affects Chromium/Google Chrome WebAudio, with a use-after-free in WebAudio prior to version 119.0.6045.123. An attacker could craft an HTML page to trigger heap corruption, potentially enabling remote code execution. The vulnerability is rated High severity (CVSS v3.1: 8.8, NETWORK/...

CVE-2024-47606

CVE-2024-47606 (GStreamer) affects the qtdemux_parse_theora_extension path in GStreamer’s qtdemux.c, where an integer underflow causes an oversized allocation followed by a memory overwrite that can hijack execution. Public reports indicate the vulnerability exists in GStreamer core plus plugins-...

CVE-2016-5770

CVE-2016-5770 involves an integer overflow in the SplFileObject::fread function (spl_directory.c) of the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23. The overflow can be triggered by a large integer argument, enabling remote denial of service or other unspecified impact. Root cause...

CVE-2019-5094

CVE-2019-5094 is a vulnerability in the quota file handling of e2fsprogs (ext4 utilities) that can trigger an out-of-bounds write on the heap, enabling potential arbitrary code execution when a malformed ext4 partition is processed. The description across sources identifies the affected component...

CVE-2020-11612

Netty CVE-2020-11612 affects Netty 4.1.x before 4.1.46, where ZlibDecoders may allocate memory without bounds while decoding a ZlibEncoded stream, potentially exhausting server memory. Affected product: Netty 4.1.x (ZlibDecoders). Remediation: upgrade to Netty 4.1.46.Final or later. The documents...

CVE-2020-36328

CVE-2020-36328 concerns a heap-based buffer overflow in libwebp where WebPDecodeRGBInto may overflow due to an invalid buffer-size check, impacting data confidentiality, integrity, and availability. It affects versions before 1.0.1; multiple connected advisories confirm the same root cause and ve...

CVE-2020-6443

Chromium/Google Chrome before 81.0.4044.92 is affected by CVE-2020-6443 due to an insufficient data validation flaw in the DevTools component, enabling a remote attacker to execute arbitrary code via a crafted HTML page after convincing a user to use DevTools. Affected product: Chromium/Chrome; r...

CVE-2021-22940

CVE-2021-22940 affects Node.js before 16.6.1, 14.17.5, and 12.22.5 and is a use-after-free memory corruption issue in HTTP/2 close handling that could change process behavior. Exploitation details are present in connected sources (e.g., Arch Linux advisories) indicating remediation via upgrading ...

CVE-2021-32687

CVE-2021-32687 describes an integer overflow in Redis affecting all versions, exploitable via set-max-intset-entries to corrupt the heap and potentially leak heap contents or enable remote code execution. Affected component is Redis’ intset handling when set-max-intset-entries is configured very ...

CVE-2021-38503

The CVE-2021-38503 issue: the iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. Affected products include Firefox (versions before 94), Thunderbird (before 91.3), and Firefox ...

CVE-2021-41073

The CVE-2021-41073 issue affects the Linux kernel (affected versions 5.10 to 5.14.6) where loop_rw_iter in fs/io_uring.c can be abused via IORING_OP_PROVIDE_BUFFERS to trigger a use-after-free of a kernel buffer, enabling local privilege escalation. Exploitation relies on reading /proc//maps and ...

CVE-2023-5477

CVE-2023-5477 describes an inappropriate implementation in the Chrome/Chromium Installer prior to 118.0.5993.70 that could allow a local attacker to bypass discretionary access control via a crafted command. Connected advisories confirm affected products include Google Chrome/Chromium and note a ...

CVE-2017-13078

CVE-2017-13078 is part of the KRACK family impacting WPA2. A attacker in Wi‑Fi range could reinstall the GTK during the 4‑way handshake, replaying frames to clients. Apple addresses this via security updates (e.g., HT208221/HT208222) for macOS High Sierra/Sierra and related AirPort firmware; exac...

CVE-2019-16163

CVE-2019-16163 affects Oniguruma before 6.9.3, causing stack exhaustion (regcomp.c) due to recursion in regparse.c and possible crash. Concrete details appear in IBM/QRadar and related bulletins; base scores listed as 3.3 (NVD) and 7.5/ HIGH in some vectors depending on source. Remediation: upgra...

CVE-2019-16780

CVE-2019-16780 affects WordPress. Lower-privileged users (e.g., contributors) can inject JavaScript into the block editor via a specific payload, which is executed within the WordPress dashboard and can cause XSS if an admin opens the post in the editor. The attack requires an authenticated user....

CVE-2021-39153

CVE-2021-39153 affects XStream Java library. In affected releases, a remote attacker could load and execute arbitrary code by manipulating the processed input stream, when using XStream out of the box with certain Java runtimes (Java 14 to 8) or with JavaFX installed. The issue is tied to input-p...

CVE-2023-39418

CVE-2023-39418 affects PostgreSQL: the MERGE command can bypass row security policies for UPDATE and SELECT, allowing insertion of rows that should be disallowed when policies conflict. Public advisories (Debian, Red Hat, AlmaLinux, Canonical/Ubuntu, Cloud Foundry) confirm a fix is available in p...

CVE-2023-41983

CVE-2023-41983 is a WebKitGTK/WebKitGTK4 memory-handling related DoS vulnerability. Connected advisories show the issue affects WebKitGTK/WebKitGTK4 components and is fixed by newer builds (e.g., webkitgtk4 2.42.3-3.amzn2.0.1.x86_64 in AL2, and corresponding WebKitGTK updates in other distributio...

CVE-2024-5696

The CVE-2024-5696 entry concerns memory corruption caused by manipulating text in an tag, affecting Firefox < 127, Firefox ESR < 115.12, and Thunderbird

CVE-2017-1000369

CVE-2017-1000369 affects Exim 4.89 and earlier. A memory leak caused by multiple -p arguments malloc()’ed without free() can enable a stack-clash path, potentially allowing privilege escalation. Upstream patched in 4.89.1 (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21); Arch Linux notes upgrade...

CVE-2018-1087

CVE-2018-1087 describes a vulnerability in the Linux kernel KVM where exceptions delivered after a stack switch (via Mov SS or Pop SS) were not properly handled. The flaw could allow an unprivileged KVM guest user to crash the guest or potentially escalate privileges within the guest. The descrip...

CVE-2018-8780

CVE-2018-8780 affects Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1. The flaw is in Dir.open, Dir.new, Dir.entries and Dir.empty? which do not check NULL characters, enabling unintentional directory traversal when these methods are used. Affect...

CVE-2019-14379

CVE-2019-14379 affects FasterXML jackson-databind prior to 2.9.9.2, where default typing mishandling when ehcache is present (via net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup) leads to remote code execution. Affected component is jackson-databind’s data-binding implementatio...

CVE-2019-15166

CVE-2019-15166 affects tcpdump: lmp_print_data_link_subobjs() in print-lmp.c before 4.9.3 lacks bounds checks, enabling memory corruption that could crash the application when processing crafted data. Connected sources confirm this specific subroutine and bug class, and multiple advisories refere...

CVE-2019-16335

CVE-2019-16335 is a vulnerability in FasterXML jackson-databind (pre-2.9.10) related to polymorphic typing in the HikariDataSource path. Connected sources confirm the affected component is jackson-databind and specifically the serialization gadgets involving com.zaxxer.hikari.HikariDataSource. Im...

CVE-2019-3460

CVE-2019-3460 affects the Linux kernel and is a heap data information leak in multiple locations, including L2CAP_PARSE_CONF_RSP, reported as present in builds before 5.1-rc1. The issue arises from a heap information leak in L2CAP handling; the advisory notes updates to address it in kernel relea...

CVE-2019-5833

CVE-2019-5833 describes an incorrect dialog box scoping in Google Chrome for Android prior to 75.0.3770.80, enabling a crafted HTML page to display misleading security UI. The vulnerability affects the Chromium/Chrome UI layer and is categorized as a security UI spoofing issue; multiple advisorie...

CVE-2020-26935

CVE-2020-26935 affects phpMyAdmin, where a SQL injection vulnerability exists in how the SearchController processes SQL statements in the search feature. Vulnerable when running phpMyAdmin versions prior to 4.9.6 and 5.x prior to 5.0.3. Successful exploitation could allow an attacker to inject ma...

CVE-2021-32627

Redis has a heap-corruption vulnerability (CVE-2021-32627) caused by an integer overflow when modifying proto-max-bulk-len/client-query-buffer-limit to very large values, potentially enabling remote code execution. Affected Redis versions are fixed in 6.2.6, 6.0.16, and 5.0.14. The recommended re...

CVE-2021-34556

CVE-2021-34556 affects the Linux kernel up to 5.13.7. An unprivileged eBPF (BPF) program can leak sensitive kernel memory via a Speculative Store Bypass side-channel, because the protection mechanism did not account for uninitialized memory on the BPF stack. The root cause is information disclosu...

CVE-2023-4050

CVE-2023-4050 affects Mozilla Firefox and Firefox ESR (and related Linux distro advisories). The root cause is untrusted input streams being copied to a stack buffer without proper size checks, leading to a potentially exploitable crash that could enable sandbox escape. Public-facing details acro...

CVE-2013-0156

CVE-2013-0156 is a vulnerability in Ruby on Rails where active_support/core_ext/hash/conversions.rb fails to restrict casts of string values, enabling object-injection that can lead to remote code execution or a DoS via nested XML entities. Affected are Rails before 2.3.15, 3.0.x before 3.0.19, 3...