CVE-2024-1552

CVE-2024-1552 involves incorrect code generation on 32-bit ARM devices, potentially causing undefined behavior. Public references show affected Mozilla products including Firefox (pre-123 and ESR 115.8, and Firefox ESR 115.8) and Thunderbird 115.8.x line, with multiple advisories (CentOS, Debian ...

CVE-2018-1283

In Apache httpd (mod_session) versions 2.4.0–2.4.29, when SessionEnv forwarding is enabled to CGI applications, a remote attacker can influence their content by sending a crafted Session header. This arises from mod_session forwarding data using the HTTP_SESSION variable name, which overlaps with...

CVE-2024-28085

The wall utility in util-linux (versions up to 2.40) is vulnerable to a flaw where it fails to filter escape sequences received via argv command-line arguments. Because wall is often installed with setgid tty permissions, unprivileged local users can send these sequences to other users' terminals...

CVE-2017-9798

The Apache HTTP Server is vulnerable to a use-after-free issue, commonly referred to as Optionsbleed , affecting versions through 2.2.34 and 2.4.27 . A remote, unauthenticated attacker can send a specially crafted OPTIONS HTTP request to read secret data from the process memory. This vulnerabilit...

CVE-2019-10092

The CVE-2019-10092 entry concerns Apache HTTP Server 2.4.0–2.4.39 with a limited cross-site scripting in the mod_proxy error page. The vulnerability lets an attacker craft a link on the error page that could mislead users by pointing to a page of the attacker’s choosing, but exploitation requires...

CVE-2024-27354

A vulnerability exists in phpseclib versions 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. The root cause is insufficient validation of user data within the isPrime() and randomPrime() functions, specifically when processing large numbers. An attacker can exploit this by constructi...

CVE-2018-17199

In Apache HTTP Server 2.4.x up to 2.4.37, the vulnerability CVE-2018-17199 is caused by mod_session_cookie: the session expiry time is checked before decoding the session, so expiry is ignored for mod_session_cookie sessions. This means session expiry may not be enforced for affected sessions. Th...

CVE-2019-0217

This CVE affects Apache HTTP Server 2.4.x up to 2.4.38, where a race condition in mod_auth_digest could allow an authenticated user to act as another user and bypass access control. The issue is tied to running in threaded MPMs; the underlying cause is a race condition in authentication handling....

CVE-2024-27025

CVE-2024-27025 concerns the Linux kernel: a NULL return from nla_nest_start() could lead to NULL pointer dereference if not checked. The patch inserts a NULL check and sets errno consistent with other call sites, preventing a potential crash. Public references show the issue resolved in the kerne...

CVE-2023-40577

CVE-2023-40577 affects Prometheus Prometheus Alertmanager. The issue allows an attacker with POST permission on the /api/v1/alerts endpoint to cause arbitrary JavaScript execution in users of Alertmanager (stored XSS). The vulnerability is tied to the Alertmanager component handling incoming aler...

CVE-2019-11358

CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...

CVE-2017-9788

Apache httpd versions prior to 2.2.34 and 2.4.x before 2.4.27 are vulnerable to a memory management flaw in the mod_auth_digest module. The value placeholder in [Proxy-]Authorization headers of type 'Digest ' is not properly initialized or reset between successive key=value assignments. An attack...

CVE-2017-8890

CVE-2017-8890 is a Linux kernel vulnerability affecting the IPv4 networking stack. The issue is a double free in inet_csk_clone_lock() in net/ipv4/inet_connection_sock.c, which can be triggered via the accept() system call and leads to a denial of service (kernel memory corruption/crash). The Cen...

CVE-2018-25032

CVE-2018-25032 affects zlib prior to 1.2.12 and causes memory corruption during deflate when the input contains many distant matches. The linked Astra Linux advisory reiterates the zlib memory corruption in zlib before 1.2.12, and multiple Mariner/CBL advisories show affected packages (e.g., teck...

CVE-2020-9490

CVE-2020-9490 affects Apache HTTP Server versions 2.4.20–2.4.43. A specially crafted value for the Cache-Digest header in an HTTP/2 request could cause a crash when the server subsequently attempts to HTTP/2 PUSH a resource. Mitigation for unpatched servers is to disable HTTP/2 PUSH via H2Push of...

CVE-2020-11993

CVE-2020-11993 affects Apache HTTP Server 2.4.20–2.4.43: when trace/debug is enabled for the HTTP/2 module and certain traffic patterns, logging can be performed on the wrong connection, leading to concurrent use of memory pools. Mitigation in public advisories: set LogLevel for mod_http2 above i...

CVE-2019-9516

CVE-2019-9516 is an HTTP/2 header leak vulnerability affecting nginx and several Linux distributions. The issue occurs when an attacker sends streams with 0-length header names and values (optionally Huffman encoded), causing nginx to allocate memory for headers that may be kept until the session...

CVE-2017-15710

The CVE-2017-15710 issue affects Apache httpd when mod_authnz_ldap is used with AuthLDAPCharsetConfig. A crafted Accept-Language header is looked up in a charset table; if not present, it is truncated to two characters, and values shorter than two characters trigger an out-of-bounds write of a NU...

CVE-2014-6271

CVE-2014-6271 (Shellshock) affects GNU Bash up to 4.3, enabling remote code execution by processing trailing strings after function definitions in environment variables. Exploitation vectors include OpenSSH ForceCommand, mod_cgi/mod_cgid in Apache, DHCP client scripts, and other environment-passi...

CVE-2023-22045

CVE-2023-22045 affects Oracle Java SE (Hotspot) and Oracle GraalVM variants (Enterprise Edition and JDK). Affected versions include Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; GraalVM Enterprise: 20.3.10, 21.3.6, 22.3.2; GraalVM for JDK: 17.0.7, 20.0.1. The vulnerability is diffic...

CVE-2024-26994

CVE-2024-26994 – Linux kernel speakup crash on very long words : The issue occurs when a console is configured with a word longer than 256 characters, risking a crash due to buffer length overflow. The fixed version stops processing before the word buffer length is exceeded. Affected component: s...

CVE-2023-22044

CVE-2023-22044 affects OpenJDK/OpenJDK-based runtimes (e.g., Debian openjdk-17, AlmaLinux java-17-openjdk) as part of the July 2023 Java updates. Connected advisories confirm it is among multiple OpenJDK vulnerabilities and are addressed by updates to OpenJDK 17 (e.g., 17.0.8) across distribution...

CVE-2024-50349

CVE-2024-50349 affects Git. When prompting for credentials in terminal (no credential helper), Git decodes URL-encoded parts and prints the host; attackers can craft URLs with ANSI escape sequences to mislead users. The issue was patched via commits 7725b81 and c903985 and is addressed in multipl...

CVE-2018-7600

CVE-2018-7600 (Drupalgeddon2) is a remote code execution vulnerability in Drupal core. Public details confirm it affects: Drupal 7.x up to 7.57/7.58; Drupal 8.x up to 8.3.8/8.3.9; 8.4.x up to 8.4.5/8.4.6; 8.5.x up to 8.5.0/8.5.1, with default or common module configurations. The root cause involv...

CVE-2024-27073

CVE-2024-27073 (Linux kernel) relates to memory leaks in the media: ttpci budget_av_attach path. The fixes ensure budget_av_attach frees resources if saa7146_register_device or saa7146_vv_init fail, aligning with the error-handling pattern in ttpci_budget_init. Two fixme comments noted deallocati...

CVE-2024-52006

Git vulnerability CVE-2024-52006 involves newline confusion in credential helpers that use a line-based protocol. Some environments (notably .NET and Node.js) may treat a single Carriage Return as a newline, bypassing protections for credential helpers that rely on CR handling. The issue has been...

CVE-2024-2609

A clickjacking vulnerability exists in Firefox , Firefox ESR , and Thunderbird because the permission prompt input delay can expire while the window is out of focus. This condition allows malicious websites to trick users into performing unintended actions. The issue affects Firefox < 124 , Fi...

CVE-2024-26880

CVE-2024-26880 relates to the Linux kernel vulnerability where dm: call the resume method on internal suspend was improperly paired, risking a crash via a list corruption in the DM (device-mapper) subsystem during suspend/resume handling. The fix standardizes calls by having __dm_internal_resume ...

CVE-2024-34397

A vulnerability exists in GNOME GLib (specifically the GDBus signal subscription mechanism) before versions 2.78.5, 2.79.x before 2.80.1, and other affected distributions. A local attacker can spoof D-Bus signals that a GDBus-based client (such as those interacting with NetworkManager ) will wron...

CVE-2024-26950

CVE-2024-26950 (WireGuard, Linux kernel) : The issue was in the netlink path for WireGuard where the code accessed the device via peer and could dereference a NULL peer->device. The fix standardizes device retrieval from the context by using ctx->wg, since ctx->wg->peer_allowedips.seq...

CVE-2024-26889

A buffer overflow vulnerability exists in the Linux kernel within the Bluetooth: hci_core component. The issue stems from the struct hci_dev_info structure, which contains a fixed-size name[8] field. If hdev->name exceeds this size, the strcpy function attempts to write past the buffer boundar...

CVE-2021-44224

CVE-2021-44224 concerns Apache HTTP Server (httpd) with the mod_proxy forward proxy configuration. A crafted URI to a forward proxy (ProxyRequests on) can trigger a NULL pointer dereference, causing a crash. In configurations that mix forward and reverse proxy declarations, it can enable requests...

CVE-2024-26894

The Linux kernel contains a memory leak vulnerability in the ACPI: processor_idle component, specifically within the acpi_processor_power_exit() function. The issue occurs because memory associated with the CPU idle device is not freed after unregistering it. This can lead to a memory leak over t...

CVE-2024-26956

CVE-2024-26956 covers a kernel vulnerability in nilfs2 within the Linux kernel. The issue has two flaws: (1) nilfs_get_block() may misinterpret a DAT-corrupted data block as existing, due to DAT translation returning -ENOENT; and (2) after this inconsistency, the caller may request a read on an u...

CVE-2021-25216

CVE-2021-25216 affects BIND: in 64-bit builds it can trigger a buffer over-read, and in 32-bit builds a buffer overflow with potential remote code execution, when GSS-TSIG is enabled. The ISC SPNEGO implementation is being removed from the April releases of BIND 9.11 and 9.16 (and 9.17 already dr...

CVE-2025-32728

CVE-2025-32728 affects OpenSSH sshd prior to 10.0: the DisableForwarding directive does not fully disable X11 and agent forwarding as documented, potentially enabling unintended access under certain configurations. Multiple advisories indicate OpenSSH vulnerabilities across platforms (AIX, Amazon...

CVE-2020-35452

The CVE-2020-35452 entry concerns Apache HTTP Server 2.4.0–2.4.46, where a specially crafted Digest nonce can trigger a stack overflow in mod_auth_digest. The description notes there was no reported exploit against Apache at the time, though certain compiler/compile options might enable it with l...

CVE-2018-19935

The connected documents corroborate CVE-2018-19935 affecting PHP 5.x and 7.x versions prior to 7.3.0, where imap_mail() with an empty message string can trigger a NULL pointer dereference and crash the application. Affected component: ext/imap/php_imap.c. Impact per sources is denial of service v...

CVE-2022-22721

CVE-2022-22721 concerns the Apache HTTP Server. On 32-bit systems, if LimitXMLRequestBody is set to allow request bodies larger than 350 MB (default 1 MB), an integer overflow can occur, leading to out-of-bounds writes. Affected product: Apache HTTP Server 2.4.52 and earlier. Impact per sources: ...

CVE-2018-19518

The University of Washington IMAP Toolkit 2007f on UNIX, utilized by the PHP imap_open() function, is vulnerable to argument injection . The issue stems from the imap_rimap and tcp_aopen functions failing to neutralize special elements in the IMAP server name. A remote attacker can exploit this b...

CVE-2019-20907

CVE-2019-20907 affects Python’s tarfile handling (Lib/tarfile.py) up to Python 3.8.3. A crafted TAR archive can trigger an infinite loop when opened via tarfile.open because _proc_pax lacks header validation. Connected advisories confirm the issue is treated as a tarfile DoS, with patches release...

CVE-2019-9641

CVE-2019-9641 affects PHP's EXIF extension (older PHP 7.1.x/7.2.x/7.3.x branches). Affected versions are PHP 7.1.0–7.1.26/7.2.0–7.2.15/7.3.0–7.3.2 (per sources: 7.1.27, 7.2.16, 7.3.3 as fixed). The root cause is an uninitialized read in exif_process_IFD_in_TIFF (with related notes on exif_process...

CVE-2024-2961

The iconv() function in the GNU C Library (glibc) versions 2.39 and older is vulnerable to a buffer overflow of up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set. This flaw can be exploited to crash applications or overwrite neighboring variables. In environments running ...

CVE-2024-56644

CVE-2024-56644 concerns a leak in the Linux kernel IPv6 path: when an ICMPv6 MTU-change creates an expired exception dst in the IPv6 exception table, and a TCP connection uses that dst, the dst may leak as its refcount becomes unbalanced after ip6_negative_advice() runs. The description specifies...

CVE-2018-19052

The CVE-2018-19052 issue affects lighttpd’s mod_alias_physical_handler (mod_alias.c): when a configured alias lacks a trailing '/' but the target path has one, there is potential directory traversal to the parent of the alias target. Public advisories confirm this vulnerability across multiple di...

CVE-2024-56705

CVE-2024-56705 concerns the Linux kernel where ia_css_3a_statistics_allocate() fails to check the allocation result of the rgby_data memory, potentially triggering the assertion at ia_css_s3a_hmem_decode() if rgby_data allocation fails. The public technical details in connected sources indicate t...

CVE-2019-15846

Exim CVE-2019-15846 affects Exim 4.92.x prior to 4.92.2, where a trailing backslash in SMTP processing enables remote code execution as root. Published advisories (e.g., ALAS-2019-1277/1310) confirm the issue and urge upgrading to Exim 4.92.2 or newer. Remediation: upgrade Exim to 4.92.2+ or appl...

CVE-2022-37454

CVE-2022-37454 affects the Keccak XKCP SHA-3 reference implementation prior to fdc6fef, where an integer overflow leads to a buffer overflow in the sponge function interface. This can enable attackers to execute arbitrary code or compromise cryptographic properties. Public advisories note this vu...

CVE-2016-1908

OpenSSH CVE-2016-1908 affects the OpenSSH client before 7.2, where cookie generation for untrusted X11 forwarding can be mishandled when the local X server lacks the SECURITY extension. This could allow remote X11 clients to trigger a fallback to trusted forwarding, bypassing intended access cont...

CVE-2020-25681

CVE-2020-25681 affects dnsmasq up to version 2.83. The vulnerability is a set of DNSSEC-related heap/buffer overflows: CVE-2020-25681 (sort_rrset overflow), CVE-2020-25682 (extract_name length issue), CVE-2020-25683 (get_rdata memcpy overflow), CVE-2020-25684/25685/25686 (reply_query handling tha...