CVE-2019-8325

The CVE-2019-8325 issue is a vulnerability in RubyGems where Gem::CommandManager#run calls alert_error without escaping, enabling escape sequence injection (described as multiple ways to trigger an error). The connected Debian advisory confirms the impact is present in JRuby packages and lists CV...

CVE-2021-44533

CVE-2021-44533 affects Node.js by improper handling of multi-value Relative Distinguished Names, potentially allowing bypass of certificate subject verification. Affected are Node.js versions < 12.22.9, < 14.18.3, < 16.13.2, and

CVE-2017-9776

Poppler (pdftocairo) contains an integer overflow in JBIG2Stream.cc that can cause a heap-based buffer overflow, enabling DoS or potentially other impact via crafted PDFs. Public advisories (Debian DSA-4079-1/2, CentOS/RHEL RHSA-2550/2551, Mageia MGASA-2017-0276, AWS ALAS-2017-902) show this CVE ...

CVE-2018-10875

CVE-2018-10875 affects Ansible where ansible.cfg is read from the current working directory, allowing an attacker to influence the plugin/module path and potentially execute arbitrary code. The issue arises because the CWD can be manipulated to point to controlled code. Red Hat/Ubuntu/openSUSE ad...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2019-13117

This CVE affects libxslt 1.1.33 (numbers.c): an xsl:number with certain format strings can trigger an uninitialized read in xsltNumberFormatInsertNumbers, potentially allowing an attacker to discern whether a stack byte is one of several characters (e.g., A, a, I, i, 0, etc.). Connected documents...

CVE-2019-13743

CVE-2019-13743 affects Google Chrome/Chromium prior to version 79.0.3945.79, where an incorrect security UI in external protocol handling could allow a remote attacker to spoof the security UI via a crafted HTML page. Impact is spoofing of security prompts; practical exploitation details are not ...

CVE-2019-5779

CVE-2019-5779: In Google Chrome, the ServiceWorker implementation suffered from insufficient policy validation, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected software is Chrome prior to 72.0.3626.81 and the issue is fixed in later builds. The descr...

CVE-2020-27774

CVE-2020-27774 entry is rejected and not a valid security vulnerability entry.

CVE-2020-27825

CVE-2020-27825: A use-after-free in Linux kernel kernel/trace/ring_buffer.c (before 5.10-rc1) enables a race between trace_open and cpu-buffer resize, allowing local DOS and potential information leaks. Affected: Linux kernel’s tracing ring buffer; root cause is a race on parallel CPU access. Mit...

CVE-2020-6415

CVE-2020-6415 is an implementation error in the JavaScript component of Chromium/Google Chrome prior to 80.0.3987.87 that could enable a remote attacker to trigger heap corruption via a crafted HTML page. The issue is documented across multiple connected advisories (Debian, Fedora, Gentoo, Arch L...

CVE-2020-6471

CVE-2020-6471 concerns Google Chrome prior to 83.0.4103.61, where insufficient policy enforcement in the Developer Tools could allow a user-initiated extension to escape the sandbox. The vulnerability is attributed to a policy enforcement error in the Chromium developer tools component, potential...

CVE-2020-6523

CVE-2020-6523: Out-of-bounds write in Skia used by Google Chrome prior to 84.0.4147.89. This could allow remote execution via heap corruption triggered by a crafted HTML page. Affected software: Google Chrome (Skia component); underlying issue described as an out-of-bounds write in Skia. Impact p...

CVE-2023-5486

The CVE-2023-5486 entry concerns Google Chrome/Chromium prior to 118.0.5993.70 where an inappropriate input handling implementation could let a remote attacker spoof the security UI via a crafted HTML page. The issue is classified with Low severity; the initial record notes a Chromium-based vulne...

CVE-2015-5289

CVE-2015-5289 covers multiple stack-based buffer overflows in PostgreSQL’s json/jsonb input parsing, allowing denial of service (server crash) via crafted input. Public advisories across distributions confirm the issue in PostgreSQL before 9.3.10 and 9.4.5. The affected components are the json an...

CVE-2017-9233

CVE-2017-9233: XML External Entity DoS in libexpat 2.2.0 and earlier via malformed external entity in an external DTD. Affected: libexpat (Expat XML Parser Library). Impact: parser denial-of-service (infinite loop). Remediation: update to libexpat 2.2.1 (fixes addressed in advisories). If impleme...

CVE-2018-18494

CVE-2018-18494 is a same-origin policy violation in Thunderbird/Firefox components caused by using the location property with performance.getEntries to steal cross-origin URL entries. Affected: Thunderbird < 60.4, Firefox ESR < 60.4, Firefox

CVE-2018-19432

CVE-2018-19432 affects the libsndfile project, specifically version 1.0.28. The root cause is a NULL pointer dereference in the function sf_write_int (sndfile.c) , which can lead to a denial of service . Connected sources corroborate this issue and describe the same NULL dereference and its impac...

CVE-2019-17673

CVE-2019-17673 concerns WordPress versions before 5.2.4, where JSON GET request caches could be poisoned because some responses omit the Vary: Origin header. The vulnerability is a remote issue through the affected WordPress caching path; no exploit details are provided in the documents. The CVSS...

CVE-2020-26117

CVE-2020-26117 affects TigerVNC up to version 1.11.0, where TLS certificate exceptions are stored as authorities, enabling a certificate owner to impersonate any server after an exception is added. The issue is remedied by upgrading to TigerVNC 1.11.0 or later (per linked advisories and product r...

CVE-2020-6484

CVE-2020-6484 refers to insufficient data validation in the ChromeDriver component of Google Chrome prior to 83.0.4103.61. Multiple connected sources confirm the flaw affects Chrome/Chromium and that exploitation could bypass navigation restrictions via a crafted request. The Debian security noti...

CVE-2020-6527

Google Chrome before 84.0.4147.89 has an Insufficient policy enforcement in CSP that could allow a remote attacker to bypass content security policy via a crafted HTML page. This CVE affects Chrome’s CSP handling and was fixed in the 84.0.4147.89 update (stable channel) and related Chromium secur...

CVE-2021-21311

Adminer CVE-2021-21311 is a server-side request forgery (SSRF) flaw affecting Adminer versions before 4.7.9, especially builds bundling all drivers (e.g., adminer.php). The issue arises from error-message handling that can expose sensitive information, enabling an attacker to potentially access i...

CVE-2021-3144

CVE-2021-3144 affects SaltStack Salt prior to 3002.5. The vulnerability allows eauth tokens to be used once after expiration, potentially enabling an attacker to execute commands against the salt-master or minions. In exposed advisories, the impact is remote command execution with high severity, ...

CVE-2021-32785

CVE-2021-32785 affects mod_auth_openidc (Apache 2.x) prior to 2.4.9 when configured with an unencrypted Redis cache. The issue arises from argument interpolation before Redis requests are passed to hiredis, causing an uncontrolled format string bug. Impact described as reliable denial of service ...

CVE-2021-3630

DjVuLibre: CVE-2021-3630 is an out-of-bounds write in DJVU::DjVuTXT::decode() (DjVuText.cpp) exploitable via crafted DjVu files. Affected in versions prior to 3.5.28; Debian Bullseye fix is 3.5.28-2, and advisories (e.g., USN, other distro notes) recommend upgrading to 3.5.28+. Exploitation statu...

CVE-2021-3930

CVE-2021-3930 concerns an off-by-one error in the SCSI device emulation of QEMU during MODE SELECT handling in mode_sense_page() when page is MODE_PAGE_ALLS (0x3f). The vulnerability can allow a malicious guest to crash QEMU, causing a denial of service. Affected software is QEMU (various release...

CVE-2022-32213

CVE-2022-32213 concerns the llhttp parser in Node.js’ http module, where the parser may incorrectly parse and validate Transfer-Encoding headers, enabling HTTP Request Smuggling (HRS). The vulnerability is cited in multiple advisories (Debian, Red Hat, and Amazon Linux family) as part of a set in...

CVE-2014-3710

CVE-2014-3710 affects the Fileinfo extension used by PHP (via the file command parser) in ELF file handling. The vulnerability lies in readelf.c (up to PHP 5.4.34 and fileinfo up to 5.20) where insufficient ELF note-header validation can enable a crafted ELF file to trigger an out-of-bounds read ...

CVE-2018-10119

The CVE-2018-10119 issue affects LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1. It: (1) targets the sdstor/stgstrms.cxx StgSmallStrm class, using an incorrect integer data type; (2) allows remote attackers to trigger a denial of service via a crafted document in the structured storage (OLE2 w...

CVE-2018-10855

CVE-2018-10855 affects Ansible: versions 2.5 prior to 2.5.5 and 2.4 prior to 2.4.5 do not honor the no_log flag for failed tasks, which can cause sensitive data passed to a task to be exposed in logs and on the user’s terminal when the task fails. Red Hat advisories (RHSA-2018:1948, RHSA-2019:005...

CVE-2019-15945

CVE-2019-15945 affects OpenSC prior to 0.20.0-rc1, with an out-of-bounds access in libopensc/asn1.c decode_bit_string. Several advisories (Arch Linux, AlmaLinux, Debian LTS, others) map this to a vulnerability class that can enable denial of service via malformed data on a local basis. Affected p...

CVE-2019-19012

CVE-2019-19012 affects Oniguruma 6.x (before 6.9.4_rc2). The root cause is an integer overflow in regexec.c: search_in_range uses sch_range += reg->dmax, which can overflow on 32-bit builds and lead to an out-of-bounds read. This allows remote attackers to cause denial of service or informatio...

CVE-2019-19950

CVE-2019-19950 affects GraphicsMagick. Connected sources confirm a use-after-free in magick/error.c (ThrowException/ThrowLoggedException) and related memory handling issues, leading to potential memory corruption. Multiple advisories (Debian DSA-4640-1, Mageia MGASA-2020-0102, Ubuntu USN-5190-1, ...

CVE-2019-5769

CVE-2019-5769 is an input validation error in Blink/WebKit that affected Chromium-based browsers (per Debian/Fedora advisories). The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page. The connected documents confirm the flaw and attribute it to Blink/WebKit in...

CVE-2019-8322

CVE-2019-8322 affects RubyGems 2.6 and later through 3.0.2. The root cause is that the gem owner command outputs the API response contents directly to stdout, enabling escape sequence injection if the response is crafted. The connected documents provide multiple references (including Debian, Red ...

CVE-2020-6381

CVE-2020-6381 refers to an integer overflow in the JavaScript engine of Chromium/Google Chrome prior to 80.0.3987.87, enabling potential heap corruption via a crafted HTML page. Affected products include Chrome/Chromium on ChromeOS and Android. Root cause: integer overflow in the v8 JavaScript li...

CVE-2020-6481

CVE-2020-6481 affects Google Chrome (and Chromium) prior to 83.0.4103.61, where insufficient policy enforcement in URL formatting can enable domain spoofing via crafted domain names. The issue is categorized as an access restriction bypass in the URL formatting path. Remediation per connected adv...

CVE-2020-9273

CVSS context: CVE-2020-9273 affects ProFTPD, where interrupting a data transfer can corrupt the memory pool, triggering a use-after-free in alloc_pool and potentially enabling remote code execution. What’s affected: ProFTPD (notably around 1.3.7-era releases per advisory) with a memory allocator ...

CVE-2021-41133

CVE-2021-41133 affects Flatpak prior to versions 1.10.4 and 1.12.0. The issue allows Flatpak apps with direct AF_UNIX socket access (e.g., Wayland, Pipewire) to abuse VFS-related syscalls not blocked by the denylists in seccomp, manipulating /.flatpak-info or removing it to trick host portals and...

CVE-2022-0261

CVE-2022-0261 is a Vim heap-based buffer overflow affecting vim/vim prior to 8.2. Connected advisories (Astra Linux, Cloud Foundry USN, and Apple security page) confirm Vim heap-buffer issues across multiple CVEs and list Vim updates as the remediation path. For CVE-2022-0261, the vendor-provided...

CVE-2022-0408

CVE-2022-0408 is a Vim/vim prior to 8.2 stack-based buffer overflow. Astra/Amazon/Cloud advisory entries describe a stack-based overflow in vim that could let an attacker supply a crafted file to crash Vim or, per advisories, potentially execute code. Affected product is Vim; root cause is a stac...

CVE-2022-27384

Summary: CVE-2022-27384 affects MariaDB Server v10.6 and earlier, due to a flaw in Item_subselect::init_expr_cache_tracker that can cause a Denial of Service when processing specially crafted SQL statements. The vulnerability is documented across multiple advisories (e.g., Astra Linux, ALAS2 advi...

CVE-2023-34967

Samba's Spotlight mdssvc RPC service is affected by a Type Confusion vulnerability (CVE-2023-34967). The issue stems from insufficient type checking in callers of dalloc_value_for_key(), which can cause a crash in talloc_get_size() when a pointer is not a valid talloc pointer. This can trigger a ...

CVE-2023-34968

CVE-2023-34968 refers to Samba Spotlight mdssvc RPC path disclosure, where the server-side absolute path of shares/files is exposed in search results. Connected sources confirm this is a Samba issue in the Spotlight path return handling and list it among related CVEs (e.g., CVEs 2022-2127, 2023-3...

CVE-2023-5484

The CVE-2023-5484 entry concerns Chrome/Chromium where an inappropriate implementation in the Navigation UI allows a remote attacker to spoof security UI via a crafted HTML page. Affected product: Google Chrome/Chromium browser. Root cause: navigation handling in Chromium before 118.0.5993.70 per...

CVE-2023-6931

CVE-2023-6931 describes a heap/out-of-bounds write in the Linux kernel’s Performance Events subsystem. The issue arises when a perf_event read_size overflows, causing an out-of-bounds increment or write in perf_read_group(). The vulnerability is described as enabling local privilege escalation. M...

CVE-2015-3166

CVE-2015-3166 affects PostgreSQL; the snprintf implementation fails to properly handle errors from system calls, which can lead to information disclosure or other unspecified impact via out-of-memory scenarios. Affected versions include PostgreSQL releases before 9.0.20, 9.1.x before 9.1.16, 9.2....

CVE-2017-10268

CVE-2017-10268 affects Oracle MySQL Server (Server: Replication) with affected versions 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.19 and earlier. The vulnerability allows a high-privilege attacker with logon to the infrastructure where MySQL Server executes to compromise the server, potenti...

CVE-2018-1116

CVE-2018-1116 describes a flaw in polkit prior to version 0.116 where polkitd’s polkit_backend_interactive_authority_check_authorization may cause testing authentication and triggering authentication of unrelated processes owned by other users. This can lead to a local DoS and information disclos...