CVE-2015-3166

CVE-2015-3166 affects PostgreSQL; the snprintf implementation fails to properly handle errors from system calls, which can lead to information disclosure or other unspecified impact via out-of-memory scenarios. Affected versions include PostgreSQL releases before 9.0.20, 9.1.x before 9.1.16, 9.2....

CVE-2017-10268

CVE-2017-10268 affects Oracle MySQL Server (Server: Replication) with affected versions 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.19 and earlier. The vulnerability allows a high-privilege attacker with logon to the infrastructure where MySQL Server executes to compromise the server, potenti...

CVE-2018-1116

CVE-2018-1116 describes a flaw in polkit prior to version 0.116 where polkitd’s polkit_backend_interactive_authority_check_authorization may cause testing authentication and triggering authentication of unrelated processes owned by other users. This can lead to a local DoS and information disclos...

CVE-2019-5814

CVE-2019-5814 affects Google Chrome/Chromium Blink: an insufficient policy enforcement in Blink allowed a remote attacker to leak cross-origin data via a crafted HTML page (CORS bypass). Impact: cross-origin data disclosure. Affected versions are before 74.0.3729.108. Remediation: upgrade to 74.0...

CVE-2019-5815

CVE-2019-5815 describes a type confusion in libxslt’s xsltNumberFormatGetMultipleLevel causing heap corruption when processing crafted XML data. Connected advisories (Debian DLA, Debian security tracker, Cloud Foundry USN, etc.) confirm libxslt as the affected component and indicate that fixes ex...

CVE-2020-13362

CVE-2020-13362 affects QEMU up to and including 5.0.0, where megasas_lookup_frame in hw/scsi/megasas.c may perform an out-of-bounds read when a crafted reply_queue_head field comes from a guest OS user. The impact is described as low (partial availability impact) with local access/vector details ...

CVE-2020-14147

The CVE-2020-14147 issue is a vulnerability in Redis: an integer overflow in the getnum function of lua_struct.c on Redis builds before 6.0.3 can be triggered by processing large numbers in Lua code, leading to memory corruption, a denial of service (application crash), and potentially bypassing ...

CVE-2020-27751

ImageMagick vulnerability CVE-2020-27751 affects MagickCore/quantum-export.c. Processing a crafted file can trigger undefined behavior: values outside the range of unsigned long long and a shift exponent too large for 64-bit, with the likely impact on availability. Affected are ImageMagick versio...

CVE-2020-6393

CVE-2020-6393 affects Google Chrome/Chromium Blink up to version 80.0.3987.87, where insufficient policy enforcement in Blink allowed a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is a policy enforcement flaw in Blink, leading to cross-origin data exposure. A...

CVE-2020-6491

CVE-2020-6491 affects Chromium/Google Chrome prior to 83.0.4103.61. The issue is an insufficient data validation in the site information component, enabling a remote attacker to spoof the security UI via a crafted domain. Impact involves content spoofing; remediation is to upgrade Chromium/Chrome...

CVE-2021-30934

The CVE-2021-30934 entry is valid and has concrete details across connected documents. It concerns WebKit/WebKitGTK family processing malicious web content leading to arbitrary code execution due to a buffer overflow. Affected products include Apple platforms: Safari 15.2, macOS Monterey 12.1, iO...

CVE-2021-3472

CVE-2021-3472 affects xorg-x11-server and related packages up to version before 1.20.11. The root cause is an integer underflow in the X server component (notably XChangeFeedbackControl) that can lead to local privilege escalation, with potential impact to confidentiality, integrity, and availabi...

CVE-2021-3498

GStreamer CVE-2021-3498 is a heap corruption vulnerability in GStreamer prior to 1.18.4 triggered while parsing certain malformed Matroska files. The issue affects the isomp4/qtdemux.c path (and related parsing logic) and can lead to memory corruption if a file hits the problematic code path; no ...

CVE-2021-43543

CVE-2021-43543 is a CSP sandbox bypass where documents loaded with the CSP sandbox directive could escape restrictions by embedding additional content. Affected products include Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox

CVE-2022-0685

CVE-2022-0685 affects Vim in the Vim/Vim GitHub repo prior to 8.2.4418, due to an out-of-range pointer offset that enables a heap-based overflow when processing certain indentation-related data. Reports from Astra Linux, Cloud Foundry, Debian/Ubuntu advisories, and Apple security content confirm ...

CVE-2023-0045

The CVE-2023-0045 entry concerns the Linux kernel Spectre v2 mitigation for prctl-based task toggling. The underlying issue is that IBPB is not issued immediately during the prctl syscall; ib_prctl_set updates TIFs and SPEC_CTRL MSR, but IBPB is only emitted on the next schedule after TIF checks....

CVE-2023-40283

CVE-2023-40283 affects the Linux kernel before 6.4.10. It stems from a use-after-free in l2cap_sock_release (net/bluetooth/l2cap_sock.c) where the children of an sk are mishandled. The vulnerability allows a local attacker to run arbitrary code or cause a denial of service by crafting a targeted ...

CVE-2024-26976

CVE-2024-26976 is a Linux kernel KVM vulnerability described in Astra Linux advisory as resolved. It concerns ensuring that the per-vCPU async #PF workqueue is not racing with module unload during VM/vCPU destruction. Root cause: gifting a reference to the VM (kvm_put_kvm) could deadlock because ...

CVE-2017-1000501

AWStats is affected by a path-traversal vulnerability in cgi-bin/awstats.pl?config= (and related migrate/config handling) that can disclose or modify files due to improper handling of absolute/partial paths. The issue is described as affecting AWStats 7.7 and earlier, with an incomplete fix in CV...

CVE-2018-10929

CVE-2018-10929 affects GlusterFS (server side), where an authenticated attacker could exploit improper validation in the RPC path (gfs2_create_req) to create arbitrary files and potentially execute arbitrary code on storage server nodes. Connected advisories reference multiple vendors (Debian, Re...

CVE-2018-16862

CVE-2018-16862 : Linux kernel cleancache clears an inode after the final truncation, allowing a new file with the same inode to read leftover pages from the old file. The connected doc confirms a local attacker could use this to expose sensitive information. No patch/fix details are provided in t...

CVE-2019-5773

CVE-2019-5773 : Insufficient origin validation in IndexedDB in Google Chrome before 72.0.3626.81 allows a remote attacker who compromised the renderer process to bypass the same-origin policy via a crafted HTML page. Affected product/version: Google Chrome (IndexedDB). Root cause: origin validati...

CVE-2019-7575

CVE-2019-7575 affects SDL (SDL 1.2.15 and 2.x up to 2.0.9). It is a heap-based buffer overflow in MS_ADPCM_decode within audio/SDL_wave.c. Exploitation could allow arbitrary code execution or crash when processing crafted audio data, as reflected in multiple advisories (Arch Linux, AlmaLinux, Deb...

CVE-2020-36226

CVE-2020-36226 affects OpenLDAP prior to 2.4.57, where a memch->bv_len miscalculation in the saslAuthzTo processing can crash slapd, causing denial of service. Connected advisories (Astra Linux, ALAS summaries) corroborate OpenLDAP crashes/denial of service under OpenLDAP 2.x before 2.4.57 dur...

CVE-2020-6468

CVE-2020-6468 is a type confusion vulnerability in the V8 JavaScript engine used by Google Chrome/Chromium, affecting versions prior to 83.0.4103.61. The issue, identified in the V8 component, can lead to heap corruption and potential remote code execution when a user visits a specially crafted H...

CVE-2021-21191

CVE-2021-21191 is a use-after-free vulnerability in the WebRTC component of Chromium-based browsers (Google Chrome) prior to 89.0.4389.90. The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page, as described in the CVE entry. Connected documents confirm ...

CVE-2021-43541

CVE-2021-43541 is a vulnerability in how external protocol handler URLs are processed. In affected products (Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox

CVE-2021-43545

CVE-2021-43545: Denial of Service via the Location API loop in Firefox/Thunderbird. Affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox

CVE-2022-0714

CVE-2022-0714 affects vim/vim prior to 8.2.4436. Technical details across connected docs indicate a heap-based buffer overflow in Vim’s code path (notably in vim/vim’s charset handling in win_lbr_chartabsize() and associated regexp/line processing). Impact stated includes crashes, possible memory...

CVE-2022-20001

CVE-2022-20001 affects fish shell 3.1.0–3.3.1 where changing directories can trigger arbitrary commands via git in per-repository configurations, affecting prompts and git integration when using default config. Root cause is per-repo configuration execution invoked during directory changes (promp...

CVE-2023-3141

CVE-2023-3141 : A use-after-free in the Linux kernel memstick driver (drivers/memstick/host/r592.c, function r592_remove) can crash the system on device disconnect and may lead to kernel information leaks. Affected tracked advisories confirm this issue across multiple vendor/distro kernels (e.g.,...

CVE-2017-7558

CVE-2017-7558 describes a kernel data leak (out-of-bounds read) in the Linux kernel inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() that could leak up to 100 bytes of slab data to userspace. Affected: Linux kernel (4.7-rc1 through 4.13). Root cause: filling sockaddr data structures wit...

CVE-2018-19841

CVE-2018-19841 affects WavPack up to version 5.1.0: the WavpackVerifySingleBlock function in open_utils.c can trigger an out-of-bounds read and cause a denial-of-service (application crash). Multiple connected advisories confirm this vulnerability and reference affected WAVPACK builds; other CVEs...

CVE-2018-6871

LibreOffice prior to 5.4.5 and 6.x prior to 6.0.1 is vulnerable to a remote arbitrary file disclosure via the WEBSERVICE function (COM.MICROSOFT.WEBSERVICE) in documents, allowing an attacker to read sensitive files. Root cause: insufficient validation/restrictions on WEBSERVICE arguments. Affect...

CVE-2020-13428

CVE-2020-13428 concerns a heap-based buffer overflow in VLC media player before 3.0.11 for macOS/iOS, specifically in the function hxxx_AnnexB_to_xVC in modules/packetizer/hxxx_nal.c. The vulnerability allows remote attackers to cause a denial of service (application crash) or execute arbitrary c...

CVE-2020-25085

CVE-2020-25085 affects QEMU 5.0.0 where a heap-based overflow occurs in flatview_read_continue (exec.c) due to mishandling of a write in the SDHC_BLKSIZE path within the SDHCI emulation. The issue is linked to out-of-bounds read/write behavior in the SDHCI code, with potential for a privileged gu...

CVE-2020-35491

CVE-2020-35491 affects FasterXML jackson-databind 2.x prior to 2.9.10.8, tied to deserialization gadget typing interactions via org.apache.commons.dbcp2.datasources.SharedPoolDataSource. Connected docs corroborate an extensive Jackson deserialization issue set with high impact, but the provided m...

CVE-2020-3810

CVE-2020-3810 : Missing input validation in the ar/tar implementations of apt could cause a denial of service when processing specially crafted deb files. Affected: apt before 2.1.2. Remediation: upgrade to apt 2.1.2 or newer (per Debian/ Fedora advisories referencing the fix).

CVE-2020-6486

CVE-2020-6486 is an access restriction bypass in the navigations component of the Chromium/Google Chrome browser, prior to version 83.0.4103.61. The vulnerability stems from insufficient policy enforcement in navigations, enabling a remote attacker to bypass navigation restrictions via a crafted ...

CVE-2020-6512

CVE-2020-6512: A type confusion in Google Chrome’s V8 engine prior to 84.0.4147.89 could allow a remote attacker to exploit heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Affected product: Chrome (V8). Root cause: type confusion in V8. Impact: remote code ...

CVE-2020-8166

CVE-2020-8166 is a CSRF forgery vulnerability in Ruby on Rails (affecting Rails < 5.2.5 and Rails

CVE-2021-21330

CVE-2021-21330 affects aiohttp up to version 3.7.4, with an open redirect caused by a bug in aiohttp.web_middlewares.normalize_path_middleware. The vulnerability allows a malicious link to redirect a user’s browser to an attacker-controlled site. The issue is fixed in aiohttp 3.7.4. Remediation: ...

CVE-2025-21605

CVE-2025-21605 affects Redis where, in versions starting at 2.6 and before 7.4.3, an unauthenticated client can cause unlimited growth of the output buffer, exhausting memory and potentially crashing the server. The issue occurs because Redis’ default client-output-buffer-limit does not cap norma...

CVE-2016-7056

CVE-2016-7056 describes a timing attack in OpenSSL 1.0.1u and earlier that could allow a local attacker to recover an ECDSA P-256 private key. The root cause is a timing side-channel during ECDSA signing; no remote/external access requirement is stated in the sources, only local access. Publicly ...

CVE-2018-10928

GlusterFS vulnerability CVE-2018-10928: an authenticated remote attacker could exploit improper validation of RPC requests via gfs3_symlink_req to create arbitrary symlinks outside the volume and potentially execute code on the server. Public advisories document multiple remediation streams acros...

CVE-2018-18820

Icecast contains a buffer overflow in the URL-auth backend prior to 2.4.4. When URL authentication is enabled, a crafted HTTP header can trigger a denial of service and potentially remote code execution. Public advisories from multiple distros (openSUSE, Fedora, Debian) indicate that updates addr...

CVE-2019-1010315

CVE-2019-1010315 affects WavPack 5.1 and earlier. The vulnerability is a CWE-369 divide-by-zero in ParseDsdiffHeaderConfig (dsdiff.c:282) when parsing a malicious .wav file, which can cause the application to crash. The attack vector is a crafted WAV file. The fixed version is the code commit htt...

CVE-2019-5716

Wireshark 2.6.0–2.6.5 contained a crash in the 6LoWPAN dissector. The root cause was use of TVB before creation in epan/dissectors/packet-6lowpan.c; this was addressed by avoiding the premature TVB use. Technical details across connected sources confirm the affected component, vulnerability class...

CVE-2020-28032

CVE-2020-28032 affects WordPress prior to 5.5.2, caused by unsafe deserialization in wp-includes/Requests/Utility/FilteredIterator.php (Requests_Utility_FilteredIterator). The provided data notes high-severity impact (CVE‑SS scores show critical/high across CONF, INTE, AVAIL) with network attack ...

CVE-2020-6534

CVE-2020-6534: Heap buffer overflow in WebRTC of Google Chrome (Chromium) prior to 84.0.4147.89. A crafted HTML page could trigger heap corruption, potentially enabling arbitrary code execution. The connected FreeBSD/Vuxml entry confirms CVE-2020-6534 as part of Chrome/Chromium security fixes and...