CVE-2020-36186

CVE-2020-36186 affects FasterXML jackson-databind 2.x up to before 2.9.10.8, where serialization gadgets and typing handling interact incorrectly in the presence of PerUserPoolDataSource (org.apache.tomcat.dbcp.dbcp.datasources). This deserialization-related flaw can impact confidentiality, integ...

CVE-2020-6469

CVE-2020-6469 concerns Google Chrome/Chromium's developer tools. The connected sources explicitly describe an "insufficient policy enforcement" issue in the developer tools before Chrome 83.0.4103.61, which could allow an attacker to persuade a user to install a malicious extension and potentiall...

CVE-2021-20190

CVE-2021-20190 is a Jackson Databind deserialization vulnerability involving the interaction between serialization gadgets and typing, present in Jackson Databind up to 2.9.10.7. The IBM bulletin for Cloudera Observability confirms this CVE as part of a collection and notes a fix in Cloudera Obse...

CVE-2021-43546

CVE-2021-43546 concerns cursor spoofing that could overlay the UI when a native cursor is zoomed. Affected products mentioned across connected documents include Thunderbird < 91.4.0 and Firefox < 95 (including Firefox ESR

CVE-2022-25313

CVE-2022-25313 concerns the Expat/libexpat XML parser. The vulnerability arises from a stack-exhaustion condition triggered by a large nesting depth in the DTD element during build_model processing, allowing an attacker to cause a denial of service. Public advisories in connected docs confirm Exp...

CVE-2022-27456

MariaDB Server vulnerability CVE-2022-27456 is a use-after-free in the VDec::VDec function located at /sql/sql_type.cc, affecting MariaDB Server v10.6.3 and below. Connected advisories consistently reference this CVE among a set of MariaDB vulnerabilities and indicate affected packages (mariadb a...

CVE-2022-3594

CVE-2022-3594 is a Linux kernel vulnerability in the BPF component: the intr_callback in drivers/net/usb/r8152.c can cause logging of excessive data. It is exploitable remotely as described; a patch/update is recommended. Connected advisories (Astra Linux, Amazon Linux livepatch) mirror these det...

CVE-2023-1989

CVE-2023-1989 affects the Linux kernel, in particular the bluetooth driver path drivers/bluetooth/btsdio.c, function btsdio_remove. A call to btsdio_remove with an unfinished job can create a race condition that leads to a use-after-free (UAF) on hdev devices. Connected Astra Linux bulletin mirro...

CVE-2023-2124

CVE-2023-2124 is an out-of-bounds memory access flaw in the Linux kernel XFS image restore path after failure with a dirty log journal. It can crash a local user or potentially escalate privileges when mounting/correcting a corrupted XFS disk image. Public advisories (e.g., Debian DSA-5448-1 and ...

CVE-2023-5176

CVE-2023-5176 concerns memory safety bugs in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2, with affected range Firefox <118, ESR <115.3, and Thunderbird

CVE-2023-5480

CVE-2023-5480 affects Chromium-based browsers (Google Chrome/Chromium) with versions prior to 119.0.6045.105. It describes an inappropriate implementation in Payments that could allow a remote attacker to bypass XSS protections via a malicious file. Public advisories in this set confirm remediati...

CVE-2023-5981

CVE-2023-5981 affects GnuTLS via timing side-channel in RSA-PSK ClientKeyExchange, potentially leaking data. Connected docs show affected gnutls versions before 3.7.11-1 (CBLMARINER: CVE-2023-5981 affecting package gnutls for versions less than 3.7.11-1) and note CVE-2024-0553 as an incomplete re...

CVE-2009-2692

CVE-2009-2692 stems from uninitialized proto_ops in the Linux kernel (SOCKOPS_WRAP), allowing local users to trigger a NULL pointer dereference via mmap of page zero and gain privileges by invoking an unavailable operation (e.g., sock_sendpage on PF_PPPOX). Public details reference local privileg...

CVE-2016-2105

CVE-2016-2105 concerns OpenSSL: an overflow in EVP_EncodeUpdate can cause a heap memory corruption and denial of service when processing large amounts of data. The connected OpenSSL advisories confirm the vulnerability and cite fixes for versions 1.0.1t and 1.0.2h (backported fixes for earlier 0....

CVE-2016-5018

CVE-2016-5018 affects multiple Tomcat branches (9.0.0.M1–M9, 8.5.0–8.5.4, 8.0.0.RC1–8.0.36, 7.0.0–7.0.70, 6.0.0–6.0.45). The vulnerability allows a malicious web application to bypass a configured SecurityManager via a Tomcat utility method that is accessible to web applications, enabling bypass ...

CVE-2019-5776

CVE-2019-5776 affects Google Chrome’s Omnibox (URL bar): a correctness flaw in handling confusable characters in domain names allows a remote attacker to spoof the displayed URL. Affected software: Chrome before 72.0.3626.81. Impact: spoofed Omnibox content (phishing risk). Remediation: upgrade t...

CVE-2020-11764

OpenEXR before 2.4.1 contains an out-of-bounds write in copyIntoFrameBuffer (ImfMisc.cpp), CVE-2020-11764. Amazon Linux 2 ALAS2-2020-1499 confirms the OpenEXR fix and provides updated packages; Red Hat/CentOS advisories (RHSA-2020:4039) also address CVE-2020-11764 among related OpenEXR issues. Re...

CVE-2020-1712

CVE-2020-1712 affects systemd; a heap use-after-free occurs when asynchronous Polkit queries are performed while handling dbus messages. Local unprivileged attackers can crash systemd services or potentially execute code to elevate privileges by sending crafted dbus messages. Public details acros...

CVE-2020-6397

CVE-2020-6397 is described as an insecure sharing implementation in Google Chrome/Chromium that allows a remote attacker to spoof the security UI via a crafted HTML page. Public records among connected sources confirm this as a content spoofing issue in the sharing component of Chromium/Chrome up...

CVE-2020-6454

CVE-2020-6454 affects Chromium/Google Chrome extensions: a use-after-free in the extensions component could allow heap corruption and arbitrary code execution. Public docs indicate this affects Chrome before 81.0.4044.92 (and Chromium up to 81.0.4044.92). Debian and Arch advisories list the issue...

CVE-2021-25284

CVE-2021-25284 affects SaltStack Salt prior to 3002.5, where salt.modules.cmdmod can log credentials to info or error logs. Exploitation details are not provided in the sources, but multiple advisories confirm credential leakage via logging within cmdmod. Remediation across sources centers on upg...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2021-3524

This CVE-2021-3524 affects Red Hat Ceph Storage RadosGW (Ceph Object Gateway) prior to 14.2.21. The root cause is a CORS ExposeHeader tag handling that allows HTTP header injection via newline characters in the ExposeHeader (and earlier fixes did not address \r as a header separator). Impact is p...

CVE-2022-1679

CVE-2022-1679 is a use-after-free flaw in the Linux kernel’s Atheros ath9k_htc driver. Connected advisories specify a use-after-free in ath9k_htc_wait_for_target (and related notes) that can allow a local user to crash or escalate privileges. Affected component: Linux kernel wireless driver (ath9...

CVE-2022-21366

CVE-2022-21366 affects Oracle Java SE (ImageIO) and Oracle GraalVM Enterprise Edition. The Oracle advisory describes affected versions: Java SE 11.0.13 and 17.0.1; GraalVM EE 20.3.4 and 21.3.0. Exploitation could allow an unauthenticated network attacker to cause a partial denial of service or, d...

CVE-2019-1010317

CVE-2019-1010317 affects WavPack 5.1.0 and earlier. Root cause: use of an uninitialized variable in ParseCaffHeaderConfig (caff.c:486). Attack: malformed WAV files could trigger unexpected control flow, crashes or segfaults (DoS). Fixed version released after commit f68a9555b548306c5b1ee45199ccdc...

CVE-2020-27771

CVE-2020-27771 affects ImageMagick before 7.0.9-0. In RestoreMSCWarning() of coders/pdf.c, multiple GetPixelIndex() calls could yield values outside the range of unsigned char. The fix casts GetPixelIndex() to ssize_t to prevent undefined behavior when processing crafted PDFs. Red Hat rates this ...

CVE-2020-36188

The CVE-2020-36188 issue affects FasterXML jackson-databind 2.x prior to 2.9.10.8, caused by mis-handling serialization gadgets in combination with typing (notably involving com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource). The vulnerability is described across multiple source...

CVE-2020-36229

CVE-2020-36229 affects OpenLDAP prior to 2.4.57, where a flaw in ldap_X509dn2bv causes a slapd crash during X.509 DN parsing in ad_keystring, leading to denial of service. Public details confirm the vulnerability, its root cause in OpenLDAP’s X.509 DN parsing path, and that upgrading to OpenLDAP ...

CVE-2020-6465

CVE-2020-6465 is a use-after-free vulnerability in Chrome/Chromium’s reader mode (on Chrome/Chromium before version 83.0.4103.61). The underlying issue is a use-after-free in the reader mode path that could allow a remote attacker who has compromised the renderer process to cause arbitrary code e...

CVE-2020-6495

CVE-2020-6495 refers to an insufficient policy enforcement vulnerability in Google Chrome’s Developer Tools prior to 83.0.4103.97. The issue, identified in multiple sources (CNVD-2020-32320; Arch Linux ASA-202006-3; Debian/ Gentoo advisories), enables a threat actor to exploit a crafted Chrome ex...

CVE-2021-38496

CVE-2021-38496 describes a memory-safety issue: during MessageTask operations, a scheduled task could be removed, causing memory corruption and a potentially exploitable crash. Affected products include Thunderbird versions older than 78.15 and 91.2, Firefox ESR older than 91.2 and 78.15, and Fir...

CVE-2015-5346

CVE-2015-5346 (Tomcat) describes a session-fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2. When different session settings are used for deployments of multiple versions of the same web application, an attacker could hijack a user session by e...

CVE-2018-1049

CVE-2018-1049 describes a race condition in systemd prior to version 234 between .mount and .automount units, where automount requests from the kernel may not be serviced, causing the mountpoint to hang for affected processes and leading to denial of service. Connected advisories and Nessus plugi...

CVE-2018-14461

CVE-2018-14461 affects tcpdump up to version 4.9.3, where the LDP parser has a buffer over-read in print-ldp.c:ldp_tlv_print(). The issue is triggered while parsing LDP TLVs and can read memory beyond bounds. The vulnerability is addressed by upgrading to tcpdump 4.9.3 and libpcap 1.9.1 (per mult...

CVE-2018-16435

CVE-2018-16435 affects Little CMS 2.9, where an integer overflow in cmscgats.c:AllocateDataSet enables a heap-based buffer overflow in SetData when processing a crafted file in cmsIT8LoadFromFile. No exploitation details are provided in the documents beyond the overflow risk. Remediation: upgrade...

CVE-2019-14811

Summary: Ghostscript before version 9.50 contains sandbox-safety bypasses in multiple procedures, notably the ".pdf_hook_DSC_Creator" path, allowing crafted PostScript to bypass -dSAFER and potentially access the file system or execute commands. Other vulnerable entry points include ".forceput" e...

CVE-2020-7106

CVE-2020-7106 affects Cacti 1.2.8, with stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php; root cause is improper escaping/display of a raw string from the database (via $header). Public advisori...

CVE-2021-3682

CVE-2021-3682 affects QEMU USB redirector device emulation before 6.1.0-rc2. A SPICE client can drop packets into a full packet queue, leading to free() being called with fake heap chunk metadata, causing QEMU to crash or potentially execute code with host QEMU privileges. Affected products inclu...

CVE-2022-24806

Net-snmp vulnerability CVE-2022-24806: improper input validation when SETing malformed OIDs in master agent and subagent can be triggered prior to version 5.9.2. Affected: net-snmp tools/agent; fix: upgrade to 5.9.2 or later. Mitigation note: use strong SNMPv3 credentials and avoid sharing them; ...

CVE-2022-48281

CVE-2022-48281 affects LibTIFF (tools/tiffcrop.c) with a heap-based buffer overflow exposed by crafted TIFF images. The issue is described for LibTIFF up to version 4.5.0 (processCropSelections in tiffcrop.c). Impact is a potential crash or memory corruption due to a near-write of excessive size ...

CVE-2023-42755

CVE-2023-42755 affects the IPv4 RSVP classifier in the Linux kernel. The xprt pointer can reference beyond the skb’s linear area, causing an out-of-bounds read in rsvp_classify, which may allow a local user to crash the system and trigger denial of service. Connected advisories (Debian, Red Hat-b...

CVE-2023-6536

CVE-2023-6536 is a Linux kernel NVMe over TCP issue. The connected documents confirm a NULL pointer dereference in the NVMe target (nvmet_tcp_build_iovec and related paths) that could cause a kernel panic and denial of service. Affected software is the Linux kernel’s NVMe over TCP stack (nvmet_tc...

CVE-2014-3487

CVE-2014-3487 is a vulnerability in PHP’s Fileinfo (cdf_read_property_info in cdf.c) where the Fileinfo component fails to validate a stream offset in CDF files. A crafted CDF file can cause a DoS (application crash) on PHP builds using file before 5.19, specifically affecting PHP 5.4.30 and 5.5....

CVE-2015-3415

The CVE-2015-3415 entry concerns SQLite: the sqlite3VdbeExec function in vdbe.c does not correctly implement comparison operators, enabling context-dependent attackers to trigger a DoS (invalid free) or other unspecified impacts via a crafted CHECK clause (e.g., CHECK(0&O>O) in a CREATE TABLE)...

CVE-2017-11610

CVE-2017-11610 affects the XML-RPC server in Supervisor. An authenticated client can send a crafted XML-RPC request that exploits nested supervisord namespace lookups to execute arbitrary commands on the server, running with the same user as supervisord (potentially root). The issue is triggered ...

CVE-2018-12405

The CVE-2018-12405 entry is supported by connected advisories showing memory safety bugs in Firefox 63/ESR 60.3 with potential for arbitrary code execution. Affected products include Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox

CVE-2018-16227

CVE-2018-16227 affects tcpdump up to v4.9.3. The vulnerability is a buffer over-read in the IEEE 802.11 Mesh Flags handling (print-802_11.c). Impact is memory read exposure with potential impact on affected systems; the exposed documentation notes only memory read, not code execution. Remediation...

CVE-2018-2814

CVE-2018-2814 affects Java SE/Java SE Embedded (Hotspot). Affected: Java SE 6u181, 7u171, 8u162, 10; Java SE Embedded 8u161. The vulnerability allows network-based, unauthenticated access to compromise Java SE/Embedded with user interaction required, potentially leading to takeover. Underlying is...

CVE-2019-14234

CVE-2019-14234 affects Django’s JSONField and HStoreField handling. The issue arises from an error in shallow key transformation that makes key/index lookups vulnerable to SQL injection when crafted via dictionaries passed to QuerySet.filter(), e.g., using special keys like a crafted name with OR...