CVE-2022-24959

CVE-2022-24959 affects the Linux kernel before 5.16.5, via a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c. This can lead to denial of service due to memory exhaustion. The issue is addressed in the 5.16.5 kernel release; related advisories (e.g., Debian security updates) note...

CVE-2016-9401

CVE-2016-9401 relates to the Bash shell. The vulnerability is in the popd builtin, which may segfault/use‑after‑free a process when called with crafted/negative offsets, potentially enabling local disruption or bypassing restricted shells. The issue is fixed in multiple downstream advisories; rem...

CVE-2018-16227

CVE-2018-16227 affects tcpdump up to v4.9.3. The vulnerability is a buffer over-read in the IEEE 802.11 Mesh Flags handling (print-802_11.c). Impact is memory read exposure with potential impact on affected systems; the exposed documentation notes only memory read, not code execution. Remediation...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2018-5848

CVE-2018-5848 concerns the Linux kernel function wmi_set_ie(), where unsigned integer overflow in length validation can lead to a buffer overflow when processing the ie_len argument. The description across connected Nessus entries ties this to memory corruption and potential system crash, affecti...

CVE-2019-13114

CVE-2019-13114 affects Exiv2: http.c in versions up to 0.27.1 can crash via a crafted HTTP response missing a space, causing a denial of service. Public references in Debian/AlmaLinux/Fedora advisories confirm the issue and indicate a fix in 0.27.2. Exploitation details are not provided beyond th...

CVE-2019-7574

CVE-2019-7574 affects SDL (libsdl1.2 and libsdl2) up to SDL 1.2.15 and 2.x up to 2.0.9, caused by a heap-based buffer over-read in IMA_ADPCM_decode inside audio/SDL_wave.c. Multiple vendor advisories (Arch Linux ASA-201908-5, Debian DLA entries, AlmaLinux ALAS2-2020-1500, CentOS/CESA notes) docum...

CVE-2020-16135

CVE-2020-16135 affects libssh 0.9.4. The vulnerability is a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL, which can lead to a crash/denial of service. Connected documents confirm the issue and indicate that fixes were released (e.g., libssh 0.9.5 and security advisories...

CVE-2020-6406

CVE-2020-6406 is a use-after-free in the audio component of Google Chrome prior to 80.0.3987.87, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Chrome/Chromium audio handling. Root cause: use-after-free in the audio path. Impact: remot...

CVE-2021-44532

CVE-2021-44532 affects Node.js where SAN handling converts Subject Alternative Names to a string to validate hostnames. The vulnerability allows bypass of certificate name constraints when present in a certificate chain. Affected versions include Node.js <12.22.9, <14.18.3, <16.13.2, and

CVE-2023-27536

CVE-2023-27536 affects libcurl

CVE-2023-34967

Samba's Spotlight mdssvc RPC service is affected by a Type Confusion vulnerability (CVE-2023-34967). The issue stems from insufficient type checking in callers of dalloc_value_for_key(), which can cause a crash in talloc_get_size() when a pointer is not a valid talloc pointer. This can trigger a ...

CVE-2011-4566

CVE-2011-4566 is an integer overflow in the exif extension (exif_process_IFD_TAG) of PHP, triggered on 32‑bit platforms by a crafted EXIF header in a JPEG. This allows remote attackers to read arbitrary memory or cause a denial of service. The CVE is acknowledged in multiple advisories (Debian, C...

CVE-2018-19432

CVE-2018-19432 affects the libsndfile project, specifically version 1.0.28. The root cause is a NULL pointer dereference in the function sf_write_int (sndfile.c) , which can lead to a denial of service . Connected sources corroborate this issue and describe the same NULL dereference and its impac...

CVE-2019-12781

CVE-2019-12781 affects Django where HTTP requests are not consistently redirected to HTTPS when SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT are used and the reverse proxy connects via HTTPS. Affected: Django 1.11 before 1.11.22, Django 2.1 before 2.1.10, and Django 2.2 before 2.2.3. Root caus...

CVE-2019-12854

CVE-2019-12854 affects Squid up to 4.7, where incorrect string termination in cachemgr.cgi can cause access to unallocated memory and DoS for clients. Public advisories document this as a Denial of Service vector and list Squid 4.0–4.7 as affected; remediation seen in later vendor advisories/upda...

CVE-2019-13117

This CVE affects libxslt 1.1.33 (numbers.c): an xsl:number with certain format strings can trigger an uninitialized read in xsltNumberFormatInsertNumbers, potentially allowing an attacker to discern whether a stack byte is one of several characters (e.g., A, a, I, i, 0, etc.). Connected documents...

CVE-2019-14463

CVE-2019-14463 affects libmodbus before 3.0.7 and 3.1.x before 3.1.5, with an out-of-bounds read in the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case (VD-1301). Impacts include potential denial of service and partial confidentiality/availability concerns as reflected by CVSS metrics. The fixes are in l...

CVE-2020-11736

The CVE concerns GNOME File Roller (fr-archive-libarchive.c) where directory traversal can occur during extraction due to a missing check on whether a file’s parent is a symlink outside the extraction directory. Public advisories link this to an incomplete fix for CVE-2020-11736 (and relate to CV...

CVE-2020-13965

CVE-2020-13965 concerns Roundcube Webmail prior to 1.3.12 and prior to 1.4.5, where an XSS can be triggered via a malicious XML attachment because text/xml is among allowed preview types. The vulnerability affects Roundcube Webmail versions before these fixed releases; remediation is to upgrade t...

CVE-2020-6390

CVE-2020-6390 is an out-of-bounds read in the streams component of Google Chrome/Chromium before version 80.0.3987.87, enabling a remote attacker to potentially cause heap corruption via a crafted HTML page. Mitigation in the provided docs centers on upgrading Chromium/Chrome to 80.0.3987.87 or n...

CVE-2020-6396

CVE-2020-6396 corresponds to an Inappropriate implementation in Skia used by Google Chrome before 80.0.3987.87, enabling a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Debian DSA-4638-1 and related advisories) confirm the issue resides in Skia and was...

CVE-2020-6485

CVE-2020-6485 affects Chromium/ Google Chrome and its media router component. The issue is described as insufficient validation of data in the media router, allowing a remote attacker (via a crafted HTML page) to bypass navigation restrictions after compromising the renderer. Public advisories no...

CVE-2020-6511

CVE-2020-6511 is a side-channel information leakage in Chrome/Chromium’s content security policy that could disclose cross-origin data via a crafted HTML page. Affected products: Google Chrome/Chromium before 84.0.4147.89. Impact: cross-origin data disclosure. Root cause: CSP implementation leaka...

CVE-2021-21227

CVE-2021-21227 affects Google Chrome/Chromium, caused by insufficient data validation in the V8 JavaScript engine. A crafted HTML page can potentially trigger heap corruption, with impact described as remote code execution risk depending on context, and is tied to Chrome/Chromium versions before ...

CVE-2021-40153

Summary: CVE-2021-40153 affects Squashfs-tools (4.5) through unsquash-1.c, with unvalidated filenames allowing writing outside the destination directory. A related issue, CVE-2021-41072, affects unsquash-2.c and enables Directory Traversal via crafted filesystem metadata. Both describe traversal ...

CVE-2022-20421

CVE-2022-20421 : In the Android kernel, the memory corruption arises from a use-after-free in binder_inc_ref_for_node() inside binder.c, enabling a possible local escalation of privilege with no extra execution privileges and without user interaction. The affected software is the Android kernel; ...

CVE-2022-28463

CVE-2022-28463 affects ImageMagick 7.1.0-27 and is described as a Buffer Overflow vulnerability. Public advisories (including Debian, Amazon Linux/ALAS, Gentoo GLSA, and Cloud Foundry USNs) confirm ImageMagick as the affected product and reference a buffer overflow issue, with related CVE entries...

CVE-2017-7889

CVE-2017-7889 affects the Linux kernel mm subsystem (up to 3.2); a local attacker with access to /dev/mem can read/write kernel memory due to CONFIG_STRICT_DEVMEM not being properly enforced in arch/x86/mm/init.c and drivers/char/mem.c. Public details: Debian security advisories show fixes (e.g.,...

CVE-2017-9776

Poppler (pdftocairo) contains an integer overflow in JBIG2Stream.cc that can cause a heap-based buffer overflow, enabling DoS or potentially other impact via crafted PDFs. Public advisories (Debian DSA-4079-1/2, CentOS/RHEL RHSA-2550/2551, Mageia MGASA-2017-0276, AWS ALAS-2017-902) show this CVE ...

CVE-2018-10881

CVE-2018-10881 is an ext4-related Linux kernel vulnerability: out-of-bounds access in ext4_get_group_info when mounting/operating on a crafted ext4 image, leading to denial of service or system crash. Connected sources (e.g., USN-3752-2) confirm this CVE is among kernel/ext4 issues addressed; rem...

CVE-2018-14879

tcpdump (affected: before 4.9.3) has a buffer overflow in tcpdump.c:get_next_file(), tracked as CVE-2018-14879. The issue is one of multiple parsing bugs in the 4.9.x series and is documented in security advisories (e.g., AlmaLinux ALSA-2020:4760) as an out-of-bounds read/write in get_next_file()...

CVE-2019-14981

ImageMagick fixed CVE-2019-14981 by addressing a divide-by-zero in MeanShiftImage that could allow a crafted file to cause a denial of service. Affected ranges: ImageMagick 7.x prior to 7.0.8-41 and 6.x prior to 6.9.10-41. Remediation: upgrade to a fixed release (e.g., ImageMagick 7.0.8-41 or new...

CVE-2019-15946

OpenSC prior to 0.20.0-rc1 contains an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (libopensc/asn1.c). Affected software: OpenSC (OpenSC libraries/utilities). Root cause: out-of-bounds read in ASN.1 decoding. Reported impact in sources indicates potential denial-of-service ...

CVE-2019-19448

CVE-2019-19448 is a use-after-free in Linux kernel’s Btrfs code (try_merge_free_space in fs/btrfs/free-space-cache.c). It can be triggered by mounting a crafted Btrfs image and performing operations followed by a syncfs, due to a pointer alias between left and right data structures. Affected: Lin...

CVE-2019-19950

CVE-2019-19950 affects GraphicsMagick. Connected sources confirm a use-after-free in magick/error.c (ThrowException/ThrowLoggedException) and related memory handling issues, leading to potential memory corruption. Multiple advisories (Debian DSA-4640-1, Mageia MGASA-2020-0102, Ubuntu USN-5190-1, ...

CVE-2019-5755

CVE-2019-5755 describes an issue in the V8 JavaScript engine used by Google Chrome. The vulnerability is caused by incorrect handling of negative zero in V8, and, when exploited via a crafted HTML page, could allow a remote attacker to perform arbitrary read/write. The description specifies the a...

CVE-2019-8325

The CVE-2019-8325 issue is a vulnerability in RubyGems where Gem::CommandManager#run calls alert_error without escaping, enabling escape sequence injection (described as multiple ways to trigger an error). The connected Debian advisory confirms the impact is present in JRuby packages and lists CV...

CVE-2020-12867

CVE-2020-12867 involves a NULL pointer dereference in sanei_epson_net_read within SANE backends prior to 1.0.30. A malicious device on the same local network could trigger a denial of service. The connected Debian/AlmaLinux advisories and Fedora/Alpine notes indicate the issue affects sane-backen...

CVE-2020-14147

The CVE-2020-14147 issue is a vulnerability in Redis: an integer overflow in the getnum function of lua_struct.c on Redis builds before 6.0.3 can be triggered by processing large numbers in Lua code, leading to memory corruption, a denial of service (application crash), and potentially bypassing ...

CVE-2020-36187

CVE-2020-36187 affects FasterXML jackson-databind 2.x before 2.9.10.8. The root cause is a mishandling of the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource. The connected Astra Linux bulletin mirrors this description....

CVE-2020-6415

CVE-2020-6415 is an implementation error in the JavaScript component of Chromium/Google Chrome prior to 80.0.3987.87 that could enable a remote attacker to trigger heap corruption via a crafted HTML page. The issue is documented across multiple connected advisories (Debian, Fedora, Gentoo, Arch L...

CVE-2020-8165

CVE-2020-8165 is a deserialization of untrusted data vulnerability in Ruby on Rails, affecting Rails versions prior to 5.2.4.3 and 6.0.3.1. It can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore, potentially leading to remote code execution. The issue is ...

CVE-2021-44533

CVE-2021-44533 affects Node.js by improper handling of multi-value Relative Distinguished Names, potentially allowing bypass of certificate subject verification. Affected are Node.js versions < 12.22.9, < 14.18.3, < 16.13.2, and

CVE-2022-29187

CVE-2022-29187 – Git privilege escalation (details from connected docs): Affects Git on multi-user/local systems where the repository owner can influence commands via local repo configuration ownership checks. The root cause is failure to properly enforce ownership checks in local multi-user envi...

CVE-2022-32213

CVE-2022-32213 concerns the llhttp parser in Node.js’ http module, where the parser may incorrectly parse and validate Transfer-Encoding headers, enabling HTTP Request Smuggling (HRS). The vulnerability is cited in multiple advisories (Debian, Red Hat, and Amazon Linux family) as part of a set in...

CVE-2023-0950

CVE-2023-0950 relates to an Improper Validation of Array Index vulnerability in the LibreOffice spreadsheet component (Calc formula parsing). The issue occurs when loading malformed spreadsheet formulas (for example, AGGREGATE) that pass fewer parameters than expected, triggering an array index u...

CVE-2023-34968

CVE-2023-34968 refers to Samba Spotlight mdssvc RPC path disclosure, where the server-side absolute path of shares/files is exposed in search results. Connected sources confirm this is a Samba issue in the Spotlight path return handling and list it among related CVEs (e.g., CVEs 2022-2127, 2023-3...

CVE-2023-5169

CVE-2023-5169 (Firefox/Thunderbird) involves a compromised content process that could feed malicious data into PathRecording, causing an out-of-bounds write and potentially a crash in a privileged process. Affected products include Firefox <118, Firefox ESR <115.3, and Thunderbird

CVE-2023-5486

The CVE-2023-5486 entry concerns Google Chrome/Chromium prior to 118.0.5993.70 where an inappropriate input handling implementation could let a remote attacker spoof the security UI via a crafted HTML page. The issue is classified with Low severity; the initial record notes a Chromium-based vulne...