CVE-2017-2885

CVE-2017-2885 affects GNOME libsoup 2.58, with a stack-based buffer overflow in HTTP processing that can be triggered by a crafted request, potentially allowing remote code execution. Connected advisories confirm upstream Libsoup vulnerability and provide patches across distributions (e.g., Red H...

CVE-2018-10878

CVE-2018-10878 is confirmed in the Linux kernel ext4 filesystem. The connected Nessus advisories reference a local attacker mounting a crafted ext4 image to trigger an out-of-bounds write, leading to denial of service and potential other impacts. Unity Linux UTSA advisories (e.g., UTSA-2026-00113...

CVE-2019-19630

CVE-2019-19630 affects HTMLDOC 1.9.7, enabling a stack-based buffer overflow in hd_strlcpy() (string.c) when triggered from render_contents in ps-pdf.cxx via a crafted HTML document. Connected advisories confirm the vulnerability and indicate fixes in later releases/updates across distributions (...

CVE-2019-5818

CVE-2019-5818 affects Chromium/Google Chrome’s media reader component before version 74.0.3729.108. The root cause is an uninitialized value in media processing, which can allow a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. Public advi...

CVE-2020-10650

CVE-2020-10650 is a deserialization vulnerability in FasterXML jackson-databind up to 2.9.10.4 that allowed unauthenticated code execution via Ignite-JTA or Quartz-core gadgets (e.g., CacheJndiTmLookup/CacheJndiTmFactory; JNDIConnectionProvider). Technical details across connected sources confirm...

CVE-2020-11761

CVE-2020-11761 involves an out-of-bounds read during Huffman uncompression in OpenEXR before 2.4.1 (CVE-2020-11761). Amazon Linux 2 advisory ALAS2-2020-1499 documents OpenEXR issues including CVE-2020-11761 and notes the fix in OpenEXR 1.7.1 packages for AL2 and provides upgrade guidance. Red Hat...

CVE-2020-28036

WordPress vulnerability CVE-2020-28036: wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows privilege escalation via XML-RPC comment actions. Root cause: XML-RPC handling enables elevated privileges when commenting on a post. Affected: WordPress core prior to 5.5.2. Impact: po...

CVE-2021-43543

CVE-2021-43543 is a CSP sandbox bypass where documents loaded with the CSP sandbox directive could escape restrictions by embedding additional content. Affected products include Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox

CVE-2022-22825

CVE-2022-22825 refers to an integer overflow in Expat (libexpat) within xmlparse.c (lookup function) present in versions before 2.4.3. The vulnerability is a code execution/impact class due to heap memory mismanagement from the overflow, with CVSS v3.1 base score 8.8 (high) and network/remote exp...

CVE-2022-3435

CVE-2022-3435 affects the Linux kernel: an out-of-bounds read in fib_nh_match (net/ipv4/fib_semantics.c) could be exploited remotely by a remote, unauthenticated/partially privileged actor per the CVSS vector. The issue is rated CVSS v3.1 base 4.3 (Medium) with low impact to confidentiality and n...

CVE-2023-1989

CVE-2023-1989 affects the Linux kernel, in particular the bluetooth driver path drivers/bluetooth/btsdio.c, function btsdio_remove. A call to btsdio_remove with an unfinished job can create a race condition that leads to a use-after-free (UAF) on hdev devices. Connected Astra Linux bulletin mirro...

CVE-2014-0238

CVE-2014-0238 (PHP Fileinfo cdf_read_property_info) is a DoS in the Fileinfo extension triggered by crafted CDF vectors. The bug occurs in PHP builds before 5.4.29 and in 5.5.x before 5.5.13, where a zero-length or too-long input can cause an infinite loop or out-of-bounds memory access. The issu...

CVE-2016-0766

CVE-2016-0766 affects PostgreSQL releases prior to: 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1. Root cause: improper restriction of unspecified custom configuration settings (GUCS) for PL/Java, enabling privilege escalation by manipulating PL/Java...

CVE-2017-18509

CVE-2017-18509 targets the Linux kernel (net/ipv6/ip6mr.c). By sending a specific socket option, an attacker can manipulate a kernel pointer in ip6_mroute_* and trigger an inet_csk_listen_stop general protection fault, potentially enabling arbitrary code execution with root privileges. Impact can...

CVE-2019-16680

CVE-2019-16680 concerns GNOME file-roller prior to 3.29.91. Affected component: file extraction from TAR archives. Root cause: a single ./../ path traversal via a filename inside the archive can lead to overwriting an existing file during extraction. Impact stated in sources: potential file overw...

CVE-2019-17022

CVE-2019-17022 affects Thunderbird (and Firefox ESR/Firefox) where pasting a tag bypasses CSS sanitization by not escaping characters, potentially enabling XSS when innerHTML is later copied back. Connected advisories indicate vulnerable versions include Thunderbird up to 68.4.x and Firefox ESR...

CVE-2019-9928

CVE-2019-9928 affects GStreamer before 1.16.0. A heap-based buffer overflow in the RTSP connection parser can be triggered by a crafted response from a server, potentially allowing remote code execution. The vulnerability is network-based and does not require user interaction, with impact on conf...

CVE-2020-11522

CVE-2020-11522 is an out-of-bounds read in libfreerdp/gdi/gdi.c affecting FreeRDP versions >1.0 through 2.0.0-rc4. Advisories indicate fixes in later releases (up to 2.1.1); remediation: upgrade to FreeRDP 2.1.1 or newer. The connected documents confirm the vulnerability and its remediation pa...

CVE-2020-11987

CVE-2020-11987 – SSRF in Apache Batik 1.13 . The initial description confirms a server-side request forgery via improper input validation in NodePickerPanel, enabling an attacker to make arbitrary GET requests from the server. Connected documents corroborate concrete remediation actions across ve...

CVE-2020-2778

CVE-2020-2778 affects Oracle Java SE JSSE (Java 11.0.6 and 14). It can be triggered over HTTPS by unauthenticated remote attackers, potentially enabling read access to a subset of Java SE data. The related connected advisories (e.g., CentOS/RH/OpenJDK tracking) describe the issue as an incomplete...

CVE-2020-6479

CVE-2020-6479 affects Chromium/Google Chrome before 83.0.4103.61. Root cause: an inappropriate implementation in the sharing component could allow a remote attacker to spoof the security UI via a crafted HTML page. Impact: spoofed security UI and potential circumvention of security checks, as des...

CVE-2020-6510

CVE-2020-6510 describes a heap buffer overflow in Chrome/Chromium’s background fetch path (prior to 84.0.4147.89). A remote attacker could exploit this via a crafted HTML page to achieve heap corruption. The issue is publicly acknowledged across multiple advisories; remediation is to upgrade to C...

CVE-2021-38500

CVE-2021-38500 corresponds to memory-safety bugs in Firefox 92/ESR 91.1–93 and affects Thunderbird and Firefox ESR up to certain versions (Thunderbird <78.15, <91.2; Firefox ESR <91.2, <78.15; Firefox

CVE-2021-4160

CVE-2021-4160 describes a carry propagation bug in the MIPS32/MIPS64 squaring procedure that can affect OpenSSL on MIPS platforms. The issue could impact RSA/DSA/DH and TLS operations under certain conditions, with practical exploitation described as very difficult or limited. Remediation is prov...

CVE-2023-5480

CVE-2023-5480 affects Chromium-based browsers (Google Chrome/Chromium) with versions prior to 119.0.6045.105. It describes an inappropriate implementation in Payments that could allow a remote attacker to bypass XSS protections via a malicious file. Public advisories in this set confirm remediati...

CVE-2016-6328

CVE-2016-6328 affects the libexif library, where an integer overflow during parsing of the MNOTE entry data in input files can lead to Denial-of-Service and Information Disclosure (including sensitive heap data). Public remediation exists: Debian LTS fixed in libexif 0.6.21-2+deb8u2; Cloud Foundr...

CVE-2018-14466

tcpdump (affected up to version 4.9.2) contains a buffer over-read in the Rx parser due to rx_cache_find() and rx_cache_insert() in print-rx.c, which is triggered by parsing RX data. The CVE is CVE-2018-14466. The vulnerability is fixed in tcpdump 4.9.3 (and related updates in downstream packages...

CVE-2018-16837

CVE-2018-16837 affects Ansible; the User module leaks data passed to ssh-keygen, enabling potential exposure of credentials (e.g., passphrases) visible in a process list for users with access. The connected documents confirm this information disclosure issue and note multiple vendor advisories/pa...

CVE-2018-18501

CVE-2018-18501 corresponds to multiple memory-safety issues in Mozilla products, affecting Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox

CVE-2018-2668

CVE-2018-2668 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected: 5.5.58 and earlier; 5.6.38 and earlier; 5.7.20 and earlier. Description across sources: a low-privilege, network-accessible attacker can exploit via multiple protocols to cause a hang or ...

CVE-2019-5770

CVE-2019-5770 affects Google Chrome WebGL: insufficient input validation leads to an out-of-bounds memory read via a crafted HTML page. Vulnerable in Chrome up to version 72.0.3626.81; fixes shipped in later Chrome updates (e.g., 72.0.3626.81+). Debian/Fedora advisories and vendor advisories refe...

CVE-2020-11521

CVE-2020-11521: In FreeRDP, an Out-of-bounds Write was reported in libfreerdp/codec/planar.c affecting FreeRDP versions >1.0 through 2.0.0-rc4. The impact is memory corruption (as described as an OOB write). Remediation in provided documents is via security advisories/updates from Debian, Cent...

CVE-2020-26570

OpenSC CVE-2020-26570 involves a heap-based buffer overflow in the Oberthur smart card driver (sc_oberthur_read_file). Affected OpenSC versions are before 0.21.0-rc1; multiple advisories recommend upgrading to 0.21.0-1 or newer. Impact is a potential compromise via crafted card data; remediation ...

CVE-2020-2767

CVE-2020-2767 affects Oracle Java SE JSSE: vulnerable in Java SE 11.0.6 and 14 (client/server deployment). The vulnerability allows unauthenticated network access over HTTPS to modify or read Java SE data due to TLS/JSSE handling flaws, with potential for unauthorized updates, insertions, deletio...

CVE-2020-4048

CVE-2020-4048 affects WordPress and is caused by inadequate URL sanitization in wp_validate_redirect(), allowing an open redirect via a crafted external link. The issue has been fixed in WordPress 5.4.2 and also in earlier affected versions via minor releases (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15,...

CVE-2020-6392

CVE-2020-6392 describes an insufficient policy enforcement in the Extensions component of Chromium/Google Chrome, allowing an attacker who lures a user to install a crafted malicious extension to bypass navigation restrictions. Public advisories in connected documents indicate the issue affects C...

CVE-2021-22885

CVE-2021-22885 describes an information disclosure / unintended method execution vulnerability in Rails Action Pack >= 2.0.0 caused by using untrusted input with redirect_to or polymorphic_url. Exploitation could disclose data or trigger unintended redirects/method calls depending on input han...

CVE-2023-34058

CVE-2023-34058 affects open-vm-tools/VMware Tools. A SAML token signature bypass in VMware Tools can enable privilege elevation when a VM’s Guest Operation Privileges and a higher-privilege Guest Alias are involved. Multiple connected advisories confirm open-vm-tools as the affected component acr...

CVE-2023-4244

CVE-2023-4244 is a Linux kernel use-after-free in nf_tables/netfilter. A race between the netlink control plane transaction and nft_set element garbage collection can underflow a reference counter, enabling local privilege escalation. Affected: Linux kernel nf_tables/netfilter. Root cause: refere...

CVE-2023-4572

CVE-2023-4572 is a use-after-free vulnerability in Chrome/Chromium's MediaStream that could allow remote code execution via a crafted HTML page, caused by heap corruption. The CVE affects Chrome/Chromium browsers before the referenced fix version 116.0.5845.140. Public updates released by Debian ...

CVE-2017-1000111

CVE-2017-1000111 describes a heap/out-of-bounds race in the Linux kernel’s AF_PACKET socket handling (packet_set_ring) that can be exploited by a local user possessing CAP_NET_RAW to elevate privileges. The issue arises when a socket option changes socket state and races with safety checks; the r...

CVE-2018-10880

CVE-2018-10880 is a Linux kernel/ext4 vulnerability: a stack-out-of-bounds write in ext4_update_inline_data() when mounting or writing to a crafted ext4 image, leading to a potential system crash and DoS. The issue originates from insufficient bounds checking in ext4’s handling of inline data dur...

CVE-2018-19841

CVE-2018-19841 affects WavPack up to version 5.1.0: the WavpackVerifySingleBlock function in open_utils.c can trigger an out-of-bounds read and cause a denial-of-service (application crash). Multiple connected advisories confirm this vulnerability and reference affected WAVPACK builds; other CVEs...

CVE-2018-2790

CVE-2018-2790 affects Oracle Java SE/Java SE Embedded (OpenJDK in Linux distributions) with a JAR manifest handling flaw. Public sources in Debian and CentOS advisories cite it among OpenJDK issues for multiple Java versions (6u181, 7u171, 8u162, 10; Embedded 8u161). The connected docs identify t...

CVE-2019-3823

CVE-2019-3823 affects curl/libcurl from version 7.34.0 through before 7.64.0. The issue is a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to smtp_endofresp() isn’t NUL terminated and contains no character ending the parsed number, and len is 5, a...

CVE-2020-10803

CVE-2020-10803 affects phpMyAdmin 4.x prior to 4.9.5 and 5.x prior to 5.0.2. The vulnerability is a SQL injection in which crafted data inserted into certain database tables can be retrieved (e.g., via Browse) to trigger an XSS attack in the output (tbl_get_field.php and libraries/classes/Display...

CVE-2020-36183

CVE-2020-36183 affects FasterXML jackson-databind 2.x prior to 2.9.10.8, due to mishandling of interaction between serialization gadgets and typing (JNDIConnectionPool gadget chain). Reported in IBM/X-Force and mirrored in Astra Linux bulletin; impact can be high (deserialization-based). Affected...

CVE-2020-6456

CVE-2020-6456 affects the chromium/chrome browser family. The vulnerability is caused by insufficient validation of untrusted input in the clipboard, enabling a local attacker to bypass site isolation via crafted clipboard contents in affected builds prior to 81.0.4044.92. Public records in multi...

CVE-2021-27645

CVE-2021-27645 affects the GNU C Library (glibc) nscd: a double-free in netgroupcache.c may crash the nameserver caching daemon and cause local Denial of Service. Public reports reference glibc versions 2.29–2.33 as affected, with remediation via security updates. Debian’s DLA-3152-1 (glibc 2.28-...

CVE-2021-33620

Summary: CVE-2021-33620 affects Squid before 4.15 and 5.x before 5.0.6. It can cause a denial of service across all clients via an HTTP response, triggered by a header that can appear in legitimate traffic. What’s affected: Squid proxy/cache (core components handling HTTP traffic). Root cause (pe...