CVE-2021-37533

CVE-2021-37533 affects the Apache Commons Net FTP client prior to 3.9.0, where the FTP PASV response can cause the client to trust a host from the server. This could lead to leakage of information about services on the client’s private network if a malicious server is involved. The advisory notes...

CVE-2022-23634

Puma (Ruby/Rack HTTP server) is affected by CVE-2022-23634 due to not always closing the response body before 5.6.2, which combined with Rails’ Executor implementation could cause information leakage. The issue is fixed in Puma 5.6.2 and 4.3.11; Rails fixes exist in 7.0.2.2, 6.1.4.6, 6.0.4.6, and...

CVE-2024-36905

Mode C: The connected Broadcom advisory lists CVE-2024-36905 as not affected for Brocade Fabric OS before 10.0.0, with inline mitigations already in place. No other connected document provides concrete product/version details for this CVE beyond that note. Therefore, no active vulnerability detai...

CVE-2024-47685

In the Linux kernel, CVE-2024-47685 patches nf_reject_ipv6: nf_reject_ip6_tcphdr_put() could push garbage into the four reserved TCP bits (th->res1) per KMSAN. The fix clears the entire TCP header using skb_put_zero(), aligning with nf_reject_ip_tcphdr_put(). Connected Astra Linux bulletin rep...

CVE-2018-18281

CVE-2018-18281 is a Linux kernel local vulnerability due to a race in mremap() where TLB flushes can occur too late, potentially allowing a process to access memory after it has been freed. The issue stems from moving page tables during mremap(), where stale TLB entries may remain until after the...

CVE-2019-11717

CVE-2019-11717 affects Firefox ESR <60.8, Firefox <68, and Thunderbird

CVE-2019-16786

Waitress (Python WSGI server) before version 1.4.0 exposed an HTTP request-smuggling vulnerability related to Transfer-Encoding. If a request’s Transfer-Encoding header was not finalised as chunked, Waitress could ignore the header and fall back to Content-Length, potentially allowing HTTP pipeli...

CVE-2019-5822

CVE-2019-5822 affects Google Chrome/Chromium Blink component; describes bypass of Cross‑Origin Resource Sharing (CORS) via a crafted HTML page, effectively bypassing same-origin policy. Affected scope includes Blink/CORS handling in Chrome prior to 74.0.3729.108. Public advisories (Debian DSA-450...

CVE-2020-35728

CVE-2020-35728 affects FasterXML jackson-databind 2.x prior to 2.9.10.8, where improper interaction between serialization gadgets and typing (related to embedded Xalan/JNDIConnectionPool) is described. The IBM bulletin (CVE list) confirms this vulnerability and its description, but does not provi...

CVE-2021-31566

CVE-2021-31566 affects the libarchive library and is documented across multiple advisories. The flaw is an improper link resolution during archive extraction that can change file modes, times, ACLs and flags of files outside the archive, potentially enabling a local privilege escalation. Connecte...

CVE-2014-0237

CVE-2014-0237 affects PHP’s Fileinfo extension (CDF handling). The issue is in cdf_unpack_summary_info within cdf.c, which can be exploited remotely to cause a denial of service (performance degradation) by triggering many file_printf calls. Affected versions are PHP before 5.4.29 and 5.5.x befor...

CVE-2018-12895

CVE-2018-12895 affects WordPress up to version 4.9.6. An Author (needs files and posts capabilities) can trigger directory traversal via the thumb parameter in wp-admin/post.php, causing the PHP unlink call to delete wp-config.php through a missing filename validation in wp-includes/post.php wp_d...

CVE-2018-14665

The CVE-2018-14665 issue affects the X.Org X server (xorg-server) prior to 1.20.3. A flaw in command-line parameter validation allows unprivileged users who can access the system’s physical console to escalate to root by exploiting -modulepath or -logfile handling when the X server runs with setu...

CVE-2019-13454

CVE-2019-13454 is rejected/not used; this entry does not represent a valid vulnerability.

CVE-2019-15807

CVE-2019-15807 : In the Linux kernel prior to 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails, which can cause a BUG and result in a denial of service. The issue is addressed in kernel 5.1.13 as indicated by ChangeLog-5.1.13. Affected product...

CVE-2020-17380

CVE-2020-17380 (QEMU SDHCI) affects QEMU up to 5.0.0 in the SDHCI device emulation (hw/sd/sdhci.c). The flaw is a heap-based buffer overflow that can occur during a multi-block SDMA transfer in sdhci_sdma_transfer_multi_blocks(). A guest user or process could crash the QEMU host process or, poten...

CVE-2021-33515

CVE-2021-33515 affects Dovecot prior to 2.3.15, where the submission service (lib-smtp) allows STARTTLS command injection. This can cause sensitive information to be redirected to an attacker-controlled address. Affected context appears across multiple vendors/distros; several advisories note tha...

CVE-2021-3594

CVE-2021-3594 affects the SLiRP networking in QEMU, specifically the udp_input() path. The issue is an invalid pointer initialization that can occur when processing a UDP packet smaller than the udphdr size, leading to out-of-bounds reads or indirect host memory disclosure to the guest. The highe...

CVE-2017-7548

CVE-2017-7548 affects PostgreSQL before 9.4.13, 9.5.8 and 9.6.4, where an authorization flaw in large objects allows remote authenticated users with no privileges to overwrite an object’s entire contents, causing a denial of service. The connected advisories confirm the same issue across multiple...

CVE-2019-13602

CVE-2019-13602 affects VideoLAN VLC media player up to version 3.0.7.1. The vulnerability is an integer underflow in the function MP4_EIA608_Convert() (modules/demux/mp4/mp4.c) that can allow a remote attacker to cause a DoS via heap-based buffer overflow and crash or other unspecified impact thr...

CVE-2019-16319

CVE-2019-16319 affects Wireshark (versions 3.0.0–3.0.3 and 2.6.0–2.6.10) via the Gryphon dissector, which could enter an infinite loop. The root cause is a lack of handling for a zero-length message, addressed by a fix in plugins/epan/gryphon/packet-gryphon.c that adds a check for zero message le...

CVE-2019-5811

CVE-2019-5811 : In Chromium-based browsers, a Cross‑Origin Resource Sharing (CORS) bypass was discovered in Blink, allowing a crafted HTML page to bypass the same-origin policy via Service Worker semantics. The issue is associated with Chrome/Chromium builds prior to 74.0.3729.108. Impact is tied...

CVE-2019-5829

CVE-2019-5829 is a vulnerability in Google's Chromium/Chrome download manager. The issue is an integer overflow that can trigger an out-of-bounds memory access via a crafted HTML page, potentially enabling remote exploitation. Affected software is Chrome/Chromium released before 75.0.3770.80. Mit...

CVE-2020-13396

Summary: CVE-2020-13396 affects FreeRDP prior to version 2.1.2 and involves an out-of-bounds read in ntlm_read_ChallengeMessage (winpr/libwinpr/sspi/NTLM/ntlm_message.c). This is a memory-read vulnerability with potential impact to confidentiality as described in the connected advisories. Consequ...

CVE-2020-28896

CVE-2020-28896 affects Mutt and NeoMutt where, during IMAP initial responses, the client did not properly consult $ssl_force_tls and/or close the connection, allowing potential exposure of authentication credentials to an unencrypted channel or a Man‑in‑the‑Middle. The issue occurs in Mutt up to ...

CVE-2020-6444

CVE-2020-6444 affects Google Chrome/Chromium WebRTC: uninitialized variable in WebRTC implementation could enable heap corruption via a crafted HTML page. Connected advisories confirm the issue in Chrome prior to 81.0.4044.92 and list it alongside related CVEs in Chromium (CVE-2020-6423, CVE-2020...

CVE-2020-6525

CVE-2020-6525 : Heap buffer overflow in Skia used by Google Chrome prior to 84.0.4147.89. The vulnerability could allow remote code execution via a crafted HTML page due to heap corruption in Skia. Affected product/version: Google Chrome (Skia component) before 84.0.4147.89. Mitigation: upgrade C...

CVE-2021-22930

CVE-2021-22930 affects Node.js before 16.6.0, 14.17.4, and 12.22.4, enabling a use-after-free in HTTP/2 close handling that could alter process behavior. Connected advisories confirm the issue and provide fixed versions: nodejs >=16.6.0, >=14.17.5, and >=12.22.5 (Arch Linux ASA-202110-5/...

CVE-2009-1185

CVE-2009-1185 affects udev before 1.4.1, which does not verify NETLINK message origin from kernel space, enabling a local user to gain privileges by sending a crafted NETLINK message. Public references show PoC/exploit activity (e.g., Metasploit module, Exploit-DB entries) and multiple advisories...

CVE-2016-8610

CVE-2016-8610 is a denial-of-service flaw in OpenSSL affecting TLS/SSL alert packet processing during handshakes. The issue exists in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0, enabling a remote attacker to cause high CPU usage and denial of service by sending many alert messages. Con...

CVE-2018-18500

CVE-2018-18500 is a use-after-free in the HTML5 stream parser when handling custom HTML elements, causing the parser object to be freed while still in use. Affected products include Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox

CVE-2020-27216

CVE-2020-27216 affects Eclipse Jetty in Unix-like environments across versions 1.0–9.4.32.v20200930, 10.0.0.alpha1–10.0.0.beta2, and 11.0.0.alpha1–11.0.0.beta2O. It describes a race condition where the system temporary directory is shared among users, allowing a collocated user to observe the cre...

CVE-2022-2153

CVE-2022-2153 is a vulnerability in the Linux kernel’s KVM related to setting a SynIC IRQ. The issue allows a misbehaving VMM to write to SYNIC/STIMER MSRs, which can cause a NULL pointer dereference and a kernel oops, enabling an unprivileged local attacker on the host to trigger a denial of ser...

CVE-2022-3640

CVE-2022-3640 is a Linux Kernel issue affecting the Bluetooth layer. The vulnerability stems from a use-after-free in the l2cap_conn_del function in net/bluetooth/l2cap_core.c. The Astra Linux bulletin confirms the same flaw and notes affected kernel lines (linux-5.10, linux-5.15), indicating the...

CVE-2022-46648

CVE-2022-46648 affects ruby-git before v1.13.0, where a remote authenticated attacker can cause arbitrary Ruby code execution by having a user load a repository containing a specially crafted filename. The linked Debian/Mageia/Fedora advisories confirm updates to fix this in various distributions...

CVE-2023-29469

libxml2 before 2.10.4 is affected by CVE-2023-29469 and CVE-2023-28484. The issue stems from hashing empty dict strings in crafted XML, leading to non-deterministic dict keys and memory errors such as double frees. Affected products include libxml2 implementations used in various stacks; upgrade ...

CVE-2015-6831

CVE-2015-6831 involves use-after-free triggered during unserialize() in SPL objects in PHP. Public details from the initial document indicate multiple SPL-related vectors (ArrayObject, SplObjectStorage, SplDoublyLinkedList) mishandled during unserialization, allowing remote code execution. Report...

CVE-2018-1000301

CVE-2018-1000301 is a curl RTSP buffer over-read vulnerability tracked across multiple advisories. The issue occurs in curl versions 7.20.0 through 7.59.0, where RTSP response parsing can leave a pointer into a buffer, causing reads beyond the end of a heap-based buffer storing downloaded content...

CVE-2018-1066

CVE-2018-1066 affects the Linux kernel prior to 4.11, where a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() can cause a kernel panic on clients mounting a CIFS server, due to mishandling of an empty TargetInfo field in NTLMSSP during session recovery. Connected documents co...

CVE-2018-2755

CVE-2018-2755 affects Oracle MySQL Server (Server: Replication) and is present in supported MySQL/MariaDB branches up to specific prior versions: 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. The issue allows takeover of MySQL Server and requires logon with user interaction; imp...

CVE-2020-10001

CVE-2020-10001 describes an input validation/memory handling issue in macOS that could allow a malicious application to read restricted memory. In the provided Connected/Initial data, Cloud Pak for Security (CP4S) is affected in versions 1.7.2.0, 1.8.0.0 and 1.8.1.0. Remediation is to upgrade to ...

CVE-2020-6489

CVE-2020-6489 corresponds to an inappropriately implemented behavior in Google Chrome’s developer tools prior to 83.0.4103.61. The issue is described as an implementation error in the developer tools component, enabling a remote attacker who tricks a user into performing certain actions on a craf...

CVE-2020-6493

CVE-2020-6493: A use-after-free in Chrome’s WebAuthentication component (older than 83.0.4103.97) could allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. Affected product is Google Chrome. The issue is fixed in 83.0.4103.97 (upstream); Debian/Arch...

CVE-2021-25283

CVE-2021-25283 concerns SaltStack Salt prior to 3002.5, where the jinja renderer fails to protect against server-side template injection attacks. The issue is documented across multiple sources: the initial description notes SSR risk; GitHub advisories and Gentoo/Fedora/Debian records reference t...

CVE-2021-38496

CVE-2021-38496 describes a memory-safety issue: during MessageTask operations, a scheduled task could be removed, causing memory corruption and a potentially exploitable crash. Affected products include Thunderbird versions older than 78.15 and 91.2, Firefox ESR older than 91.2 and 78.15, and Fir...

CVE-2021-4192

CVE-2021-4192 affects Vim and is described in connected sources as a use-after-free vulnerability in Vim’s win_linetabsize() function. The consequence is that opening crafted input could crash Vim and, in some reports, may enable memory corruption or arbitrary code execution. Public references (A...

CVE-2015-5346

CVE-2015-5346 (Tomcat) describes a session-fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2. When different session settings are used for deployments of multiple versions of the same web application, an attacker could hijack a user session by e...

CVE-2019-14864

The connected documents confirm CVE-2019-14864 affects Ansible, specifically versions 2.9.x before 2.9.1, 2.8.x before 2.8.7, and 2.7.x before 2.7.15. The root cause is that the no_log flag is not respected when Sumologic and Splunk callback plugins are used to send task results to collectors, le...

CVE-2020-26976

The CVE-2020-26976 entry describes a vulnerability in Firefox where, if a HTTPS page is embedded in HTTP and a service worker exists for the secure page, the service worker could intercept the secure page request despite the iframe not being in a secure context. Affected product: Firefox (version...

CVE-2022-2929

CVE-2022-2929 affects ISC DHCP server components in multiple releases (ISC DHCP 1.0–4.4.3 and 4.1-ESV-R1–4.1-ESV-R16-P1). The issue arises when a DHCP server processes packets with fqdn labels longer than 63 bytes, leading to memory exhaustion on the server. Connected documents corroborate the ro...