CVE-2016-5018

CVE-2016-5018 affects multiple Tomcat branches (9.0.0.M1–M9, 8.5.0–8.5.4, 8.0.0.RC1–8.0.36, 7.0.0–7.0.70, 6.0.0–6.0.45). The vulnerability allows a malicious web application to bypass a configured SecurityManager via a Tomcat utility method that is accessible to web applications, enabling bypass ...

CVE-2019-15211

CVE-2019-15211 : Linux kernel before 5.2.6 contains a use-after-free in drivers/media/v4l2-core/v4l2-dev.c triggered by a malicious USB device; the issue is tied to memory allocation in drivers/media/radio/radio-raremono.c. Evidence from multiple Nessus/SUSE/OpenOpen advisories confirms the descr...

CVE-2019-19530

CVE-2019-19530 affects the Linux kernel prior to 5.2.10, with a use-after-free in the USB CDC-ACM driver (drivers/usb/class/cdc-acm.c) triggered by a malicious USB device. The issue could lead to a denial of service through memory corruption if exploited locally via USB hardware interfaces; CVSS ...

CVE-2019-5419

CVE-2019-5419 describes a denial-of-service in Ruby on Rails Action View triggered by specially crafted Accept headers, affecting Rails <5.2.2.1, <5.1.6.2, <5.0.7.2,

CVE-2019-5776

CVE-2019-5776 affects Google Chrome’s Omnibox (URL bar): a correctness flaw in handling confusable characters in domain names allows a remote attacker to spoof the displayed URL. Affected software: Chrome before 72.0.3626.81. Impact: spoofed Omnibox content (phishing risk). Remediation: upgrade t...

CVE-2019-5817

CVE-2019-5817 is a heap buffer overflow in ANGLE used by Google Chrome on Windows, prior to Chrome 74.0.3729.108. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected component: ANGLE in Chrome (Windows). Root cause per the linked records is a heap bu...

CVE-2020-26247

Nokogiri (Ruby) contains an XXE/SSRF risk in XML schemas parsed by Nokogiri::XML::Schema due to the default trust-on-parse behavior. This is fixed in version 1.11.0.rc4; upgrading to 1.11.0.rc4+ mitigates the issue. The CVE-2020-26247 entry notes the vulnerability and its fix; multiple advisories...

CVE-2020-27773

CVE-2020-27773: ImageMagick (MagickCore/gem-private.h) contains undefined behavior when processing crafted files—values outside unsigned char range or division by zero—likely affecting early 7.x releases. Affected: ImageMagick versions prior to 7.0.9-0. Impact per source: availability risk. Remed...

CVE-2020-2875

CVE-2020-2875 affects MySQL Connector/J (Oracle MySQL Connectors). Affected are Connector/J and MySQL Connectors versions: 8.0.14 and earlier, and 5.1.48 and earlier. The vulnerability is network-facing across multiple protocols and can allow an unauthenticated attacker to perform unauthorized re...

CVE-2020-36186

CVE-2020-36186 affects FasterXML jackson-databind 2.x up to before 2.9.10.8, where serialization gadgets and typing handling interact incorrectly in the presence of PerUserPoolDataSource (org.apache.tomcat.dbcp.dbcp.datasources). This deserialization-related flaw can impact confidentiality, integ...

CVE-2020-6488

CVE-2020-6488 affects Google Chrome prior to 83.0.4103.61, with an insufficient policy enforcement in downloads that allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Impact: navigation restriction bypass in downloads; attacker could potentially influence downloa...

CVE-2021-43536

CVE-2021-43536: The connected advisories confirm an information-disclosure/URL leakage flaw triggered when navigating asynchronously in Firefox/Thunderbird prior to fixed releases. Affected: Thunderbird < 91.4.0, Firefox ESR < 91.4.0, Firefox

CVE-2022-36280

CVE-2022-36280: An out-of-bounds memory access in the vmwgfx GPU driver (vmwgfx_kms.c) of the Linux kernel’s vmwgfx component, affecting devices using /dev/dri/renderD128. Reported as a local privilege escalation leading to DoS. Public details in connected docs confirm the vulnerability and its p...

CVE-2022-42722

CVE-2022-42722 affects Linux kernels 5.8–5.19.x (pre-5.19.16). Local attackers can inject WLAN frames into the mac80211 stack, triggering a NULL pointer dereference and a denial-of-service against beacon protection for P2P devices. Affected products reference Linux kernel/mac80211 internals and e...

CVE-2023-42755

CVE-2023-42755 affects the IPv4 RSVP classifier in the Linux kernel. The xprt pointer can reference beyond the skb’s linear area, causing an out-of-bounds read in rsvp_classify, which may allow a local user to crash the system and trigger denial of service. Connected advisories (Debian, Red Hat-b...

CVE-2023-5176

CVE-2023-5176 concerns memory safety bugs in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2, with affected range Firefox <118, ESR <115.3, and Thunderbird

CVE-2018-16435

CVE-2018-16435 affects Little CMS 2.9, where an integer overflow in cmscgats.c:AllocateDataSet enables a heap-based buffer overflow in SetData when processing a crafted file in cmsIT8LoadFromFile. No exploitation details are provided in the documents beyond the overflow risk. Remediation: upgrade...

CVE-2018-8786

CVE-2018-8786 affects FreeRDP prior to 2.0.0-rc4, caused by an Integer Truncation in update_read_bitmap_update() that leads to a heap-based buffer overflow and memory corruption with potential remote code execution. Connected advisories (CentOS/CESA-2019:0697, Fedora package updates, Amazon Linux...

CVE-2020-11523

CVE-2020-11523 affects FreeRDP: an Integer Overflow in libfreerdp/gdi/region.c present in FreeRDP versions > 1.0 through 2.0.0-rc4. Connected advisories confirm the vulnerability and provide remediation paths: Debian DLA-2356-1 lists CVE-2020-11523 among fixed versions (e.g., Debian 9 stretch ...

CVE-2020-1712

CVE-2020-1712 affects systemd; a heap use-after-free occurs when asynchronous Polkit queries are performed while handling dbus messages. Local unprivileged attackers can crash systemd services or potentially execute code to elevate privileges by sending crafted dbus messages. Public details acros...

CVE-2020-27771

CVE-2020-27771 affects ImageMagick before 7.0.9-0. In RestoreMSCWarning() of coders/pdf.c, multiple GetPixelIndex() calls could yield values outside the range of unsigned char. The fix casts GetPixelIndex() to ssize_t to prevent undefined behavior when processing crafted PDFs. Red Hat rates this ...

CVE-2020-36188

The CVE-2020-36188 issue affects FasterXML jackson-databind 2.x prior to 2.9.10.8, caused by mis-handling serialization gadgets in combination with typing (notably involving com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource). The vulnerability is described across multiple source...

CVE-2020-6436

CVE-2020-6436 refers to a use-after-free in the window management component of the Chromium/Chrome browser prior to version 81.0.4044.92. Public sources in the connected documents consistently identify this as a use-after-free vulnerability in Chromium that could enable a remote attacker to trigg...

CVE-2020-6454

CVE-2020-6454 affects Chromium/Google Chrome extensions: a use-after-free in the extensions component could allow heap corruption and arbitrary code execution. Public docs indicate this affects Chrome before 81.0.4044.92 (and Chromium up to 81.0.4044.92). Debian and Arch advisories list the issue...

CVE-2020-6469

CVE-2020-6469 concerns Google Chrome/Chromium's developer tools. The connected sources explicitly describe an "insufficient policy enforcement" issue in the developer tools before Chrome 83.0.4103.61, which could allow an attacker to persuade a user to install a malicious extension and potentiall...

CVE-2021-43546

CVE-2021-43546 concerns cursor spoofing that could overlay the UI when a native cursor is zoomed. Affected products mentioned across connected documents include Thunderbird < 91.4.0 and Firefox < 95 (including Firefox ESR

CVE-2022-25313

CVE-2022-25313 concerns the Expat/libexpat XML parser. The vulnerability arises from a stack-exhaustion condition triggered by a large nesting depth in the DTD element during build_model processing, allowing an attacker to cause a denial of service. Public advisories in connected docs confirm Exp...

CVE-2015-3415

The CVE-2015-3415 entry concerns SQLite: the sqlite3VdbeExec function in vdbe.c does not correctly implement comparison operators, enabling context-dependent attackers to trigger a DoS (invalid free) or other unspecified impacts via a crafted CHECK clause (e.g., CHECK(0&O>O) in a CREATE TABLE)...

CVE-2019-5754

CVE-2019-5754 affects Google Chrome’s QUIC networking implementation. Root cause: an implementation error in QUIC networking prior to version 72.0.3626.81. Consequence: an attacker who can cause the use of a proxy server can obtain cleartext of the transport encryption via a malicious network pro...

CVE-2020-26870

CVE-2020-26870 affects DOMPurify up to 2.0.16/2.0.17, where a serialize-parse roundtrip can alter the DOM (namespace changes HTML→MathML, e.g., nesting FORM elements), enabling a mutation XSS. The issue is documented by Cure53 and linked analyses; a fix was released with DOMPurify 2.0.17. Related...

CVE-2020-6397

CVE-2020-6397 is described as an insecure sharing implementation in Google Chrome/Chromium that allows a remote attacker to spoof the security UI via a crafted HTML page. Public records among connected sources confirm this as a content spoofing issue in the sharing component of Chromium/Chrome up...

CVE-2020-6416

CVE-2020-6416 affects Chromium-based Chromium/Google Chrome prior to 80.0.3987.87 in the streams component. The root cause is insufficient data validation in streams, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, Arch Linux A...

CVE-2021-3524

This CVE-2021-3524 affects Red Hat Ceph Storage RadosGW (Ceph Object Gateway) prior to 14.2.21. The root cause is a CORS ExposeHeader tag handling that allows HTTP header injection via newline characters in the ExposeHeader (and earlier fixes did not address \r as a header separator). Impact is p...

CVE-2021-3598

OpenEXR vulnerability CVE-2021-3598 affects the ImfDeepScanLineInputFile component in OpenEXR before 3.0.5. An attacker who submits a crafted EXR file to an application linked with OpenEXR can trigger an out-of-bounds read, with the greatest risk stated as impact to application availability; some...

CVE-2021-3682

CVE-2021-3682 affects QEMU USB redirector device emulation before 6.1.0-rc2. A SPICE client can drop packets into a full packet queue, leading to free() being called with fake heap chunk metadata, causing QEMU to crash or potentially execute code with host QEMU privileges. Affected products inclu...

CVE-2023-6536

CVE-2023-6536 is a Linux kernel NVMe over TCP issue. The connected documents confirm a NULL pointer dereference in the NVMe target (nvmet_tcp_build_iovec and related paths) that could cause a kernel panic and denial of service. Affected software is the Linux kernel’s NVMe over TCP stack (nvmet_tc...

CVE-2017-17087

The CVE-2017-17087 issue affects Vim, where fileio.c before 8.0.1263 creates a .swp file and assigns its group to the editor’s primary group, which may differ from the original file’s group. This can allow local users to access sensitive information, as demonstrated by mismatched ownership exampl...

CVE-2018-14461

CVE-2018-14461 affects tcpdump up to version 4.9.3, where the LDP parser has a buffer over-read in print-ldp.c:ldp_tlv_print(). The issue is triggered while parsing LDP TLVs and can read memory beyond bounds. The vulnerability is addressed by upgrading to tcpdump 4.9.3 and libpcap 1.9.1 (per mult...

CVE-2018-6914

CVE-2018-6914 is a directory traversal vulnerability in Ruby’s tmpdir library (Dir.mktmpdir). The flaw allows an attacker to create arbitrary directories or files via a “..” in the prefix argument. Affected Ruby versions: before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, ...

CVE-2019-14234

CVE-2019-14234 affects Django’s JSONField and HStoreField handling. The issue arises from an error in shallow key transformation that makes key/index lookups vulnerable to SQL injection when crafted via dictionaries passed to QuerySet.filter(), e.g., using special keys like a crafted name with OR...

CVE-2019-17024

CVE-2019-17024 corresponds to memory-safety bugs in Firefox (and Thunderbird) prior to fixed versions. Affected: Firefox ESR < 68.4 and Firefox

CVE-2019-8323

RubyGems 2.6 and later through 3.0.2 contain an escape sequence injection vulnerability in API response handling. Specifically, Gem::GemcutterUtilities#with_response may output the API response to stdout as it is, and if the response is crafted, this can be exploited. The issue is documented as C...

CVE-2019-9232

CVE-2019-9232 affects libvpx with an out-of-bounds read due to a missing bounds check, enabling remote information disclosure without privileges and without user interaction. The Connected documents corroborate libvpx as the affected component and cite multiple vendor advisories (ALAS2-2020-1558,...

CVE-2020-27823

OpenJPEG2 contains CVE-2020-27823 affecting the OpenJPEG encoder. Connected advisories confirm multiple related issues (e.g., heap-buffer-overflow and out-of-bounds reads/writes) across OpenJPEG versions up to 2.4.0, with Affected packages including openjpeg2 and OpenJPEG 2.x components. The root...

CVE-2020-6398

CVE-2020-6398 affects Google Chrome/Chromium components where the PDFium library contains an uninitialized data usage, enabling potential heap corruption via a crafted PDF file. Public sources in the connected docs consistently reference a fix in version 80.0.3987.87 (and newer) for Chrome/Chromi...

CVE-2020-6431

Chromium/Google Chrome (CVE-2020-6431) has an insufficient policy-enforcement check in full-screen mode that could allow a crafted HTML page to spoof security UI. Affected products include Chromium and Google Chrome prior to version 81.0.4044.92. Debian/Arch/Fedora advisories in the connected doc...

CVE-2020-7106

CVE-2020-7106 affects Cacti 1.2.8, with stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php; root cause is improper escaping/display of a raw string from the database (via $header). Public advisori...

CVE-2021-31808

CVE-2021-31808 affects Squid before 4.15 and 5.x before 5.0.6. It stems from an input-validation bug in HTTP Range handling that can be exploited to cause a Denial of Service against all clients using the proxy. Affected component: Squid’s HTTP Range request processing. Impact: availability degra...

CVE-2022-0494

CVE-2022-0494 is a Linux kernel information-leak flaw in scsi_ioctl.c that could let a local attacker with CAP_SYS_ADMIN or CAP_SYS_RAWIO extract kernel information, affecting confidentiality. The associated documents confirm the vulnerability and provide CVSS context (local access, high confiden...

CVE-2022-24806

Net-snmp vulnerability CVE-2022-24806: improper input validation when SETing malformed OIDs in master agent and subagent can be triggered prior to version 5.9.2. Affected: net-snmp tools/agent; fix: upgrade to 5.9.2 or later. Mitigation note: use strong SNMPv3 credentials and avoid sharing them; ...