CVE-2019-17024

CVE-2019-17024 corresponds to memory-safety bugs in Firefox (and Thunderbird) prior to fixed versions. Affected: Firefox ESR < 68.4 and Firefox

CVE-2019-8323

RubyGems 2.6 and later through 3.0.2 contain an escape sequence injection vulnerability in API response handling. Specifically, Gem::GemcutterUtilities#with_response may output the API response to stdout as it is, and if the response is crafted, this can be exploited. The issue is documented as C...

CVE-2020-27823

OpenJPEG2 contains CVE-2020-27823 affecting the OpenJPEG encoder. Connected advisories confirm multiple related issues (e.g., heap-buffer-overflow and out-of-bounds reads/writes) across OpenJPEG versions up to 2.4.0, with Affected packages including openjpeg2 and OpenJPEG 2.x components. The root...

CVE-2020-6398

CVE-2020-6398 affects Google Chrome/Chromium components where the PDFium library contains an uninitialized data usage, enabling potential heap corruption via a crafted PDF file. Public sources in the connected docs consistently reference a fix in version 80.0.3987.87 (and newer) for Chrome/Chromi...

CVE-2020-6436

CVE-2020-6436 refers to a use-after-free in the window management component of the Chromium/Chrome browser prior to version 81.0.4044.92. Public sources in the connected documents consistently identify this as a use-after-free vulnerability in Chromium that could enable a remote attacker to trigg...

CVE-2021-33656

CVE-2021-33656 affects the Linux kernel: setting a font with malicious data via the PIO_FONT ioctl can cause a memory out-of-bounds write. Affected: kernel font handling path; root cause: out-of-bounds write in ioctl processing. Impact: local code execution is not explicitly stated; exploitation ...

CVE-2022-0494

CVE-2022-0494 is a Linux kernel information-leak flaw in scsi_ioctl.c that could let a local attacker with CAP_SYS_ADMIN or CAP_SYS_RAWIO extract kernel information, affecting confidentiality. The associated documents confirm the vulnerability and provide CVSS context (local access, high confiden...

CVE-2022-39261

Twig is affected: versions 1.x before 1.44.7, 2.x before 2.15.3, and 3.x before 3.4.3 have a vulnerability where the filesystem loader can read arbitrary files when a template name is user-controlled (e.g., @namespace/../file) due to validation bypass. The fixed releases are 1.44.7, 2.15.3, and 3...

CVE-2023-1077

CVE-2023-1077A: Linux kernel scheduling: In pick_next_rt_entity(), a type confusion can occur where a non-NULL, non-entry object (a list_head) is misinterpreted as a sched_rt_entity, bypassing BUG_ON checks and causing memory corruption. Public docs (Astra Linux page) mirror this description for ...

CVE-2016-2338

CVE-2016-2338 describes an exploitable heap overflow in Ruby’s Psych::Emitter.start_document where head is allocated based on the tags array length; specially crafted objects in tags can cause the allocation to exceed bounds. Connected advisories confirm this vulnerability and show the fix in Rub...

CVE-2017-17087

The CVE-2017-17087 issue affects Vim, where fileio.c before 8.0.1263 creates a .swp file and assigns its group to the editor’s primary group, which may differ from the original file’s group. This can allow local users to access sensitive information, as demonstrated by mismatched ownership exampl...

CVE-2018-14882

CVE-2018-14882 affects tcpdump before 4.9.3, with a buffer over-read in the ICMPv6 parser (print-icmp6.c). This can cause a crash or, in some contexts, enable arbitrary code execution as part of the suite of tcpdump issues. The linked advisory (tcpdump updates 4.9.3) and Cloud Foundry USN note th...

CVE-2018-18021

CVE-2018-18021 affects arch/arm64/kvm/guest.c in the Linux kernel before 4.18.12. The KVM_SET_ON_REG ioctl is mishandled, allowing a local attacker who can create VMs to arbitrarily redirect the hypervisor flow of control (full register control) and potentially cause a hypervisor panic via an ill...

CVE-2018-5848

CVE-2018-5848 concerns the Linux kernel function wmi_set_ie(), where unsigned integer overflow in length validation can lead to a buffer overflow when processing the ie_len argument. The description across connected Nessus entries ties this to memory corruption and potential system crash, affecti...

CVE-2018-6913

CVE-2018-6913 is a heap-based buffer overflow in the pack function of Perl prior to 5.26.2. The overflow is context-dependent and can allow an attacker to execute arbitrary code. Affected software is Perl, with the vulnerability arising from how pack handles a large item count. The issue is confi...

CVE-2018-6914

CVE-2018-6914 is a directory traversal vulnerability in Ruby’s tmpdir library (Dir.mktmpdir). The flaw allows an attacker to create arbitrary directories or files via a “..” in the prefix argument. Affected Ruby versions: before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, ...

CVE-2019-12781

CVE-2019-12781 affects Django where HTTP requests are not consistently redirected to HTTPS when SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT are used and the reverse proxy connects via HTTPS. Affected: Django 1.11 before 1.11.22, Django 2.1 before 2.1.10, and Django 2.2 before 2.2.3. Root caus...

CVE-2019-14463

CVE-2019-14463 affects libmodbus before 3.0.7 and 3.1.x before 3.1.5, with an out-of-bounds read in the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case (VD-1301). Impacts include potential denial of service and partial confidentiality/availability concerns as reflected by CVSS metrics. The fixes are in l...

CVE-2020-13659

CVE-2020-13659 affects QEMU 4.2.0: address_space_map in exec.c can trigger a NULL pointer dereference related to BounceBuffer. Impact is low (partial availability, local access). Remediation across connected sources includes upgrading QEMU to newer releases where fixes are shipped (e.g., Debian s...

CVE-2020-36181

Consolidated evidence shows CVE-2020-36181 affects FasterXML jackson-databind 2.x before 2.9.10.8. The vulnerability arises from mishandling the interaction between serialization gadgets and typing, specifically related to DriverAdapterCPDS classes (notably org.apache.tomcat.dbcp.dbcp.cpdsadapter...

CVE-2020-6406

CVE-2020-6406 is a use-after-free in the audio component of Google Chrome prior to 80.0.3987.87, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Chrome/Chromium audio handling. Root cause: use-after-free in the audio path. Impact: remot...

CVE-2020-6431

Chromium/Google Chrome (CVE-2020-6431) has an insufficient policy-enforcement check in full-screen mode that could allow a crafted HTML page to spoof security UI. Affected products include Chromium and Google Chrome prior to version 81.0.4044.92. Debian/Arch/Fedora advisories in the connected doc...

CVE-2020-6461

CVE-2020-6461: A use-after-free in Chrome storage prior to 81.0.4044.129 could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. Affected: Google Chrome (storage subsystem); root cause: use-after-free. Impact: sandbox escape; exploit status not detailed i...

CVE-2020-6513

CVE-2020-6513 is documented in multiple sources as a heap buffer overflow in PDFium affecting Chromium/Google Chrome. Connected documents confirm it was among a set of Chromium vulnerabilities addressed in updates, with Debian's DSA-4824-1 noting fixes in Chromium 87.0.4280.88 for the buster rele...

CVE-2021-31808

CVE-2021-31808 affects Squid before 4.15 and 5.x before 5.0.6. It stems from an input-validation bug in HTTP Range handling that can be exploited to cause a Denial of Service against all clients using the proxy. Affected component: Squid’s HTTP Range request processing. Impact: availability degra...

CVE-2021-3598

OpenEXR vulnerability CVE-2021-3598 affects the ImfDeepScanLineInputFile component in OpenEXR before 3.0.5. An attacker who submits a crafted EXR file to an application linked with OpenEXR can trigger an out-of-bounds read, with the greatest risk stated as impact to application availability; some...

CVE-2021-4043

CVE-2021-4043 affects GPAC (gpac/gpac) prior to 1.1.0, caused by a NULL pointer dereference in the code. Findings across connected sources indicate potential for Denial of Service and, per some assessments, the possibility of arbitrary code execution. Remediation guidance varies by source; Debian...

CVE-2021-43539

CVE-2021-43539 is a Mozilla Firefox/Thunderbird memory safety issue: GC rooting failure when calling wasm instance methods can cause a use-after-free and potentially exploitable crash. Connected sources confirm the flaw affects Firefox up to 95 and Thunderbird up to 91.4.0, linked advisories show...

CVE-2010-1321

CVE-2010-1321 affects MIT Kerberos 5’s GSS-API library (krb5) in kg_accept_krb5/accept_sec_context.c. The flaw permits remote authenticated users to cause a denial of service via an AP-REQ with a missing authenticator checksum, triggering a NULL pointer dereference and daemon crash. Affected are ...

CVE-2018-16230

tcpdump's CVE-2018-16230 affects the BGP parser in tcpdump prior to version 4.9.3, caused by a buffer over-read in print-bgp.c:bgp_attr_print() for MP_REACH_NLRI. Impact is described as a potential crash/denial of service with high-severity CVSS vectors in multiple advisories. The publicly known ...

CVE-2018-5333

This CVE affects Linux kernel up to 4.14.13, specifically the rds_cmsg_atomic() path in net/rds/rdma.c. The root cause is that rm->atomic.op_active is not cleared, causing rds_atomic_free_op() to dereference a null page link via set_page_dirty(), leading to a NULL pointer dereference. The vuln...

CVE-2018-8786

CVE-2018-8786 affects FreeRDP prior to 2.0.0-rc4, caused by an Integer Truncation in update_read_bitmap_update() that leads to a heap-based buffer overflow and memory corruption with potential remote code execution. Connected advisories (CentOS/CESA-2019:0697, Fedora package updates, Amazon Linux...

CVE-2019-19951

CVE-2019-19951 affects GraphicsMagick; the issue is a heap-based buffer overflow in ImportRLEPixels() within coders/miff.c (GraphicsMagick 1.4 snapshot-20190423 Q8). Reports in connected documents confirm a heap-based overflow in ImportRLEPixels and document fixes: Mageia MGASA-2020-0102 notes th...

CVE-2019-20933

InfluxDB before 1.7.6 contains an authentication bypass in the authenticate function (services/httpd/handler.go) where a JWT token may carry an empty SharedSecret. This can allow an attacker to bypass authentication and gain unauthorized access, potentially enabling data modification or administr...

CVE-2019-5763

CVE-2019-5763 is a vulnerability in Google's V8 engine used by Chrome/Chromium, arising from a failure to check error conditions. This could allow a remote attacker to trigger heap corruption via a crafted HTML page, with impact described as partial confidentiality/integrity/availability in the C...

CVE-2019-9232

CVE-2019-9232 affects libvpx with an out-of-bounds read due to a missing bounds check, enabling remote information disclosure without privileges and without user interaction. The Connected documents corroborate libvpx as the affected component and cite multiple vendor advisories (ALAS2-2020-1558,...

CVE-2020-11523

CVE-2020-11523 affects FreeRDP: an Integer Overflow in libfreerdp/gdi/region.c present in FreeRDP versions > 1.0 through 2.0.0-rc4. Connected advisories confirm the vulnerability and provide remediation paths: Debian DLA-2356-1 lists CVE-2020-11523 among fixed versions (e.g., Debian 9 stretch ...

CVE-2020-16135

CVE-2020-16135 affects libssh 0.9.4. The vulnerability is a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL, which can lead to a crash/denial of service. Connected documents confirm the issue and indicate that fixes were released (e.g., libssh 0.9.5 and security advisories...

CVE-2020-6382

CVE-2020-6382 affects Chromium/Chrome before version 80.0.3987.87, caused by a type confusion in the v8 JavaScript engine. This vulnerability can enable a remote attacker to potentially execute arbitrary code through a crafted HTML page, with heap corruption as a possible consequence. Publicly re...

CVE-2020-6416

CVE-2020-6416 affects Chromium-based Chromium/Google Chrome prior to 80.0.3987.87 in the streams component. The root cause is insufficient data validation in streams, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, Arch Linux A...

CVE-2020-6448

CVE-2020-6448 is a use-after-free in the V8 JavaScript engine used by Google Chrome (Chromium). The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page. Public details identify the vulnerability as part of the Chrome/Chromium 81.x timeframe, with fixes shipped i...

CVE-2020-6511

CVE-2020-6511 is a side-channel information leakage in Chrome/Chromium’s content security policy that could disclose cross-origin data via a crafted HTML page. Affected products: Google Chrome/Chromium before 84.0.4147.89. Impact: cross-origin data disclosure. Root cause: CSP implementation leaka...

CVE-2021-3148

CVE-2021-3148 affects SaltStack Salt prior to 3002.5. Sending crafted web requests to the Salt API can trigger a command injection via salt.utils.thin.gen_thin() due to divergent handling of single vs. double quotes in salt/utils/thin.py. The vulnerability is documented across multiple advisories...

CVE-2022-28463

CVE-2022-28463 affects ImageMagick 7.1.0-27 and is described as a Buffer Overflow vulnerability. Public advisories (including Debian, Amazon Linux/ALAS, Gentoo GLSA, and Cloud Foundry USNs) confirm ImageMagick as the affected product and reference a buffer overflow issue, with related CVE entries...

CVE-2026-46333

CVE-2026-46333 concerns a logic bug in the Linux kernel’s ptrace access check (__ptrace_may_access). When a thread lacks an MM pointer, ptrace_may_access uses a cached “last dumpable” flag, which can be bypassed by CAP_SYS_PTRACE to override. This can enable local privilege escalation or informat...

CVE-2017-17741

CVE-2017-17741 affects the Linux kernel KVM implementation through 4.14.7, enabling a write_mmio stack-based out-of-bounds read that can reveal potentially sensitive information from kernel memory. Affected code paths are in arch/x86/kvm/x86.c and include/trace/events/kvm.h. The supplied document...

CVE-2018-1000888

CVE-2018-1000888 affects the PEAR Archive_Tar library (versions 1.4.3 and earlier). The vulnerability arises from unsafe file operations using $v_header['filename'] during extract, which can trigger phar:// based unserialization. This enables PHP object injection and can lead to destructor/wakeup...

CVE-2018-14464

Concretely affected: tcpdump prior to 4.9.3 (on multiple platforms as reflected in advisories). The CVE-2018-14464 issue is a buffer over-read in the LMP parser, specifically in print-lmp.c:lmp_print_data_link_subobjs(). The vulnerability arises from improper bounds checking in the LMP data handl...

CVE-2019-13114

CVE-2019-13114 affects Exiv2: http.c in versions up to 0.27.1 can crash via a crafted HTTP response missing a space, causing a denial of service. Public references in Debian/AlmaLinux/Fedora advisories confirm the issue and indicate a fix in 0.27.2. Exploitation details are not provided beyond th...

CVE-2019-19448

CVE-2019-19448 is a use-after-free in Linux kernel’s Btrfs code (try_merge_free_space in fs/btrfs/free-space-cache.c). It can be triggered by mounting a crafted Btrfs image and performing operations followed by a syncfs, due to a pointer alias between left and right data structures. Affected: Lin...