CVE-2018-18500

CVE-2018-18500 is a use-after-free in the HTML5 stream parser when handling custom HTML elements, causing the parser object to be freed while still in use. Affected products include Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox

CVE-2019-1010317

CVE-2019-1010317 affects WavPack 5.1.0 and earlier. Root cause: use of an uninitialized variable in ParseCaffHeaderConfig (caff.c:486). Attack: malformed WAV files could trigger unexpected control flow, crashes or segfaults (DoS). Fixed version released after commit f68a9555b548306c5b1ee45199ccdc...

CVE-2019-15218

CVE-2019-15218: Linux kernel before 5.1.8 contains a NULL pointer dereference in drivers/media/usb/siano/smsusb.c triggered by a malicious USB device. Affected is the Linux kernel version range up to 5.1.7; exploitation could lead to a crash or denial of service on affected systems. Remediation i...

CVE-2019-19066

CVE-2019-19066 is a memory-leak issue in the Linux kernel: bfad_im_get_stats() in drivers/scsi/bfa/bfad_attr.c (up to 5.3.11) can leak memory and enable denial-of-service via repeated bfa_port_get_stats() failures. Affected component: Linux kernel bfad_attr/bfad_attr. Root cause is a memory leak ...

CVE-2019-5832

CVE-2019-5832 affects Chromium/Chrome: an error in the Cross-Origin Resource Sharing (CORS) handling exposes cross-origin data when a crafted HTML page is loaded. Root cause: CORS-related flaw in Chromium’s policy enforcement. Impact stated as information disclosure via cross-origin leaks. Remedi...

CVE-2020-12137

CVE-2020-12137 affects GNU Mailman 2.x up to version 2.1.30. The root cause is using the .obj extension for scrubbed application/octet-stream MIME parts, which can trigger MIME sniffing and lead to XSS in list-archive visitors when HTTP replies lack a MIME type. The connected advisories indicate ...

CVE-2020-5247

CVE-2020-5247 is a HTTP Response Splitting vulnerability affecting Puma (RubyGem) in versions prior to 4.3.2 and 3.12.3 when untrusted input reaches response headers. An attacker could inject CR/LF sequences to terminate a header and inject new headers or a response body. The issue is mitigated b...

CVE-2021-29472

Composer suffers from a vulnerability where Mercurial URLs in root composer.json and package source URLs are not sanitized, allowing remote code execution via HgDriver if hg/Mercurial is installed. The impact is described as higher for services passing user input (e.g., Packagist.org, Private Pac...

CVE-2021-38166

CVE-2021-38166 affects the Linux kernel (bpf/hashtab.c) up to 5.13.8. An integer overflow can cause an out-of-bounds write when many elements occupy a single bucket, potentially enabling local denial-of-service or arbitrary-code execution. Exploitation is mitigated by CAP_SYS_ADMIN requirements; ...

CVE-2022-2663

CVE-2022-2663 is a Linux kernel issue in nf_conntrack_irc where message handling can be confused, causing incorrect matching and potentially allowing a firewall bypass when users operate with unencrypted IRC with nf_conntrack_irc enabled. The primary affected component is nf_conntrack_irc within ...

CVE-2022-40284

CVE-2022-40284 affects NTFS-3G (prior to 2022.10.3). A buffer overflow in crafted NTFS metadata can enable code execution. Conditions: local user if ntfs-3g is setuid root; or physical proximity if NTFS-3G runs on attachment of external storage. Impact: high confidentiality, integrity, and availa...

CVE-2014-0207

CVE-2014-0207 affects the PHP fileinfo extension’s handling of Composite Document Format (CDF) files. The vulnerability is in the cdf_read_short_sector() function (cdf.c) when used with PHP builds prior to 5.4.30 and 5.5.x prior to 5.5.14, where insufficient boundary checks allow a remote attacke...

CVE-2017-3309

CVE-2017-3309 affects the MySQL Server component (Server: Optimizer) of Oracle MySQL. Affected are MySQL server branches 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability is exploitable remotely over multiple protocols by a low-privileged attacker, potentially caus...

CVE-2018-14464

Concretely affected: tcpdump prior to 4.9.3 (on multiple platforms as reflected in advisories). The CVE-2018-14464 issue is a buffer over-read in the LMP parser, specifically in print-lmp.c:lmp_print_data_link_subobjs(). The vulnerability arises from improper bounds checking in the LMP data handl...

CVE-2019-19965

CVE-2019-19965 is a vulnerability in the Linux kernel (affecting the SAS SAS discover path) where a NULL pointer dereference occurs in drivers/scsi/libsas/sas_discover.c due to mishandling of port disconnection during discovery, related to a PHY down race condition (CID-f70267f379b5). The Unity L...

CVE-2019-2958

CVE-2019-2958 affects Oracle Java SE and Java SE Embedded (Libraries component). Affected versions include Java SE: 7u231, 8u221, 11.0.4, 13 and Java SE Embedded: 8u221. Described vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE/Jav...

CVE-2019-7665

CVE-2019-7665 affects elfutils 0.175, where a heap-based buffer over-read in elf32_xlatetom.c (libelf) can trigger a crash/DoS when processing crafted ELF input, due to malformed core file notes not being rejected. Upstream remediation is in elfutils 0.176; several advisories (Arch Linux ASA-2019...

CVE-2020-14393

CVE-2020-14393 affects the Perl-DBI package: a buffer overflow in DBI.xs (DBI

CVE-2020-6476

The CVE-2020-6476 entry concerns Google Chrome prior to 83.0.4103.61, where an insufficient policy enforcement in the tab strip could allow an attacker—who convinces a user to install a malicious extension—to bypass navigation restrictions via that extension. Affected component: tab strip policy ...

CVE-2021-35477

The CVE-2021-35477 vulnerability affects the Linux kernel (through 5.13.7): an unprivileged BPF program can read sensitive kernel memory via a Speculative Store Bypass side-channel due to a preempting store not reliably ordering before an attacker-controlled store. The issue is rooted in the eBPF...

CVE-2022-0711

HAProxy is affected by CVE-2022-0711 due to a flaw in processing HTTP responses with the Set-Cookie2 header, which can cause an infinite loop and a denial-of-service condition (availability impact). The vulnerability is observable across multiple advisories and vendor pages, including Debian secu...

CVE-2022-42720

CVE-2022-42720 concerns the Linux kernel mac80211 WLAN stack. It describes refcounting bugs in multi-BSS handling that can trigger use-after-free when WLAN frames are injected, potentially enabling local code execution. Affected are kernel versions 5.1–5.19.x prior to 5.19.16; several distributio...

CVE-2022-44792

CVE-2022-44792 affects Net-SNMP 5.8 through 5.9.3 and causes a NULL pointer dereference in handle_ipDefaultTTL when processing crafted UDP packets, enabling a remote attacker with write access to crash the instance (DoS). Connected advisories/records confirm a patched release is available and ven...

CVE-2023-5218

CVE-2023-5218: Use-after-free in Chrome/Chromium Site Isolation before 118.0.5993.70 can allow a remote attacker to cause heap corruption via a crafted HTML page. Affected: Google Chrome/Chromium (Chromium-derived). Impact as stated: high/critical. Root cause: use-after-free in Site Isolation log...

CVE-2016-0705

CVE-2016-0705 is a vulnerability in OpenSSL where the dsa_priv_decode function can double-free memory when processing malformed DSA private keys, potentially enabling a denial of service or memory corruption. Affected OpenSSL versions are 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g. Remediation i...

CVE-2018-19824

CVE-2018-19824 is a local-use-after-free in the Linux kernel’s ALSA USB audio driver. A local attacker could trigger the flaw by attaching a malicious USB sound device (configured with zero interfaces), which is mishandled during usb_audio_probe in sound/usb/card.c. Affected software is the Linux...

CVE-2019-13135

CVE-2019-13135 is an ImageMagick vulnerability: ImageMagick before 7.0.8-50 has a use of an uninitialized value in ReadCUTImage (coders/cut.c). The flaw is triggered when processing CUT images, enabling conditions described as a potential denial of service or other issues due to uninitialized dat...

CVE-2019-19074

The CVE-2019-19074 entry describes a memory leak in the ath9k_wmi_cmd() function (drivers/net/wireless/ath/ath9k/wmi.c) of the Linux kernel up to version 5.3.11, which can be exploited to cause a denial of service via memory consumption. Root cause is a leak within ath9k_wmi_cmd() that enables me...

CVE-2019-7548

SQLAlchemy 1.2.17 is affected by CVE-2019-7548 and allows SQL Injection when the group_by parameter can be controlled. Connected documents confirm the vulnerable component is SQLAlchemy 1.2.17 and describe the injection via group_by as the root cause. The sources do not provide specific exploit d...

CVE-2019-9854

CVE-2019-9854 affects LibreOffice before 6.2.7 and before 6.3.1. Root cause: an insufficient URL assembly in the final script location from path components allowed bypassing the sanitized path verification, enabling a directory-traversal-style bypass for pre-installed macros script locations. Imp...

CVE-2020-15503

CVE-2020-15503 affects LibRaw up to version 0.20-RC1. The vulnerability arises from missing thumbnail size range checks in decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp, enabling potential memory overflow (malloc(sizeof(libraw_processed_image_t)+T.tlength) wit...

CVE-2020-25708

CVE-2020-25708 affects libvncserver (notably libvncserver-0.9.12). A divide-by-zero condition triggered by a malicious crafted message processed by a VNC server can cause a denial of service. Various Nessus-derived advisories reference this CVE among a set of LibVNCServer issues; the materials do...

CVE-2020-36329

CVE-2020-36329 is a libwebp use-after-free vulnerability present in versions before 1.0.1, caused by a thread being killed too early. The impact can affect data confidentiality, integrity, and system availability. Remediation is via updates/patches provided by distributions; notable fixes include...

CVE-2021-38205

CVE-2021-38205 affects the xilinx_emaclite driver in the Linux kernel. The vulnerability arises because the driver prints a real IOMEM/kernel pointer, which can aid attackers in bypassing ASLR and facilitate information disclosure. Affected state is Linux kernels before 5.13.3; remediation is to ...

CVE-2022-40023

CVE-2022-40023 affects the Python package mako (and related plugins) with a Regular expression Denial of Service in the Lexer parser when using mako before version 1.2.2. Connected advisories consistently state the issue is fixed in newer mako/python-mako packages across distributions (e.g., Debi...

CVE-2016-0714

The CVE-2016-0714 entry concerns the Tomcat session-persistence mechanism. In Apache Tomcat versions affected (6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2), the session-persistence implementation mishandles session attributes, allowing remote authenticated use...

CVE-2018-11386

CVE-2018-11386 affects Symfony’s HttpFoundation PDOSessionHandler. Under certain configurations with a crafted payload, it can cause a denial of service in Symfony apps. It applies to releases older than 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.1...

CVE-2018-14468

tcpdump before 4.9.3 contains a buffer over-read in the FRF.16 parser (print-fr.c:mfr_print()). Upgrading to tcpdump 4.9.3 (or later) is the remediation mentioned in the accompanying advisories for affected platforms.

CVE-2018-6797

CVE-2018-6797 affects Perl 5.18–5.26. A crafted regular expression can trigger a heap-based buffer overflow, with control over written bytes. Public references in the provided documents confirm this vulnerability in Perl and note fixes/updates across distributions (e.g., Fedora perl-5.26.x/CF pat...

CVE-2019-11711

CVE-2019-11711 involves reuse of an inner window that neglects document.domain cross-origin protections, enabling script injection across subdomains. Affected software per connected docs: Firefox ESR < 60.8, Firefox < 68, and Thunderbird

CVE-2019-15132

CVE-2019-15132 affects Zabbix up to 4.4.0alpha1, enabling user enumeration via login responses on api_jsonrpc.php and index.php. The issue arises from differences in server replies (e.g., “Login name or password is incorrect” vs. “No permissions for system access” or delays), potentially revealin...

CVE-2019-16785

Summary: The vulnerability CVE-2019-16785 affects Waitress (Python WSGI server) up to v1.3.1. It relates to RFC7230’s line-termination rule: Waitress may treat messages inconsistently when a proxy uses LF vs CRLF, enabling HTTP request smuggling/splitting. Impact is the front-end and back-end par...

CVE-2019-2933

CVE-2019-2933 affects Oracle Java SE and Java SE Embedded (Libraries). Affected versions are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. The vulnerability can be exploited remotely via multiple protocols, with network access, by an unauthenticated attacker. Exploitation require...

CVE-2019-5813

CVE-2019-5813 is an out-of-bounds read vulnerability in the V8 JavaScript engine of Chromium/Google Chrome, present in versions prior to 74.0.3729.108. The issue is rooted in the V8 component and could enable information disclosure or heap-related effects as described in vendor advisories. Remedi...

CVE-2020-10802

CVE-2020-10802 affects phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2. A SQL injection exists due to improper escaping of certain parameters when generating search queries in libraries/classes/Controllers/Table/TableSearchController.php, enabling an attacker to craft database/table names during...

CVE-2020-11027

CVE-2020-11027 affects WordPress: password reset tokens fail to invalidate after password changes, enabling an attacker with email access to impersonate a user. Affected versions include 3.x through 5.3.x; patch released in WordPress 5.4.1 (and 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.x, 3.x as listed). Con...

CVE-2020-11100

HAProxy CVE-2020-11100 involves an out-of-bounds write in the HPACK decoder ({Hpack_dht_insert} in {hpack-tbl.c}) that could allow a remote attacker to execute code via a crafted HTTP/2 request. Amazon Linux 2 advisory ALAS2HAPROXY2-2023-006 confirms the fix in haproxy2 2.1.4-1 (haproxy2 package)...

CVE-2021-23978

CVE-2021-23978 affects Mozilla products (Firefox and Thunderbird/Firefox ESR). The connected documents confirm memory safety bugs in Firefox 85 and ESR 78.7, with potential memory corruption that could lead to arbitrary code execution. Impact is described for Firefox < 86, Thunderbird < 78....

CVE-2022-26490

CVE-2022-26490 affects the Linux kernel ST21NFCA NFC driver (st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c) up to and including kernel versions prior to the patched releases. The issue is a buffer overflow caused by untrusted length parameters (EVT_TRANSACTION), which can lead...

CVE-2022-39261

Twig is affected: versions 1.x before 1.44.7, 2.x before 2.15.3, and 3.x before 3.4.3 have a vulnerability where the filesystem loader can read arbitrary files when a template name is user-controlled (e.g., @namespace/../file) due to validation bypass. The fixed releases are 1.44.7, 2.15.3, and 3...