CVE-2023-5169

CVE-2023-5169 (Firefox/Thunderbird) involves a compromised content process that could feed malicious data into PathRecording, causing an out-of-bounds write and potentially a crash in a privileged process. Affected products include Firefox <118, Firefox ESR <115.3, and Thunderbird

CVE-2023-5486

The CVE-2023-5486 entry concerns Google Chrome/Chromium prior to 118.0.5993.70 where an inappropriate input handling implementation could let a remote attacker spoof the security UI via a crafted HTML page. The issue is classified with Low severity; the initial record notes a Chromium-based vulne...

CVE-2024-26976

CVE-2024-26976 is a Linux kernel KVM vulnerability described in Astra Linux advisory as resolved. It concerns ensuring that the per-vCPU async #PF workqueue is not racing with module unload during VM/vCPU destruction. Root cause: gifting a reference to the VM (kvm_put_kvm) could deadlock because ...

CVE-2018-10119

The CVE-2018-10119 issue affects LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1. It: (1) targets the sdstor/stgstrms.cxx StgSmallStrm class, using an incorrect integer data type; (2) allows remote attackers to trigger a denial of service via a crafted document in the structured storage (OLE2 w...

CVE-2018-18494

CVE-2018-18494 is a same-origin policy violation in Thunderbird/Firefox components caused by using the location property with performance.getEntries to steal cross-origin URL entries. Affected: Thunderbird < 60.4, Firefox ESR < 60.4, Firefox

CVE-2018-18498

CVE-2018-18498 is an integer overflow vulnerability in image buffer size calculations that can cause out-of-bounds writes. The description in connected advisories ties this CVE to Thunderbird and Firefox families (Thunderbird < 60.4, Firefox ESR < 60.4, Firefox

CVE-2019-13743

CVE-2019-13743 affects Google Chrome/Chromium prior to version 79.0.3945.79, where an incorrect security UI in external protocol handling could allow a remote attacker to spoof the security UI via a crafted HTML page. Impact is spoofing of security prompts; practical exploitation details are not ...

CVE-2019-19953

GraphicsMagick 1.4 snapshot-20191208 Q8 is affected by CVE-2019-19953 due to a heap-based buffer over-read in EncodeImage (coders/pict.c). The issue is confirmed in multiple disclosures (Debian/Mageia advisories and Ubuntu/DSA/Nessus plugins) as part of a set of GraphicsMagick vulnerabilities, wi...

CVE-2019-5769

CVE-2019-5769 is an input validation error in Blink/WebKit that affected Chromium-based browsers (per Debian/Fedora advisories). The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page. The connected documents confirm the flaw and attribute it to Blink/WebKit in...

CVE-2020-27775

CVE-2020-27775 entry is rejected/not used; not an active vulnerability.

CVE-2020-6381

CVE-2020-6381 refers to an integer overflow in the JavaScript engine of Chromium/Google Chrome prior to 80.0.3987.87, enabling potential heap corruption via a crafted HTML page. Affected products include Chrome/Chromium on ChromeOS and Android. Root cause: integer overflow in the v8 JavaScript li...

CVE-2020-6523

CVE-2020-6523: Out-of-bounds write in Skia used by Google Chrome prior to 84.0.4147.89. This could allow remote execution via heap corruption triggered by a crafted HTML page. Affected software: Google Chrome (Skia component); underlying issue described as an out-of-bounds write in Skia. Impact p...

CVE-2021-3409

CVE-2021-3409 affects QEMU up to 5.2.0 and stems from an ineffective patch for CVE-2020-17380/CVE-2020-25085, leading to a heap/buffer overflow in the SDHCI controller emulation. Astra Linux reports these issues as a heap-based overflow triggered by a mis-handled write in the SDHC_BLKSIZE path of...

CVE-2022-0685

CVE-2022-0685 affects Vim in the Vim/Vim GitHub repo prior to 8.2.4418, due to an out-of-range pointer offset that enables a heap-based overflow when processing certain indentation-related data. Reports from Astra Linux, Cloud Foundry, Debian/Ubuntu advisories, and Apple security content confirm ...

CVE-2022-1734

CVE-2022-1734 affects the Linux kernel nfcmrvl NFC driver (drivers/nfc/nfcmrvl/main.c). The flaw is a use-after-free caused by a race between the cleanup path and firmware download, allowing memory corruption with local access (read/write) and potentially denial of service or privilege escalation...

CVE-2022-27384

Summary: CVE-2022-27384 affects MariaDB Server v10.6 and earlier, due to a flaw in Item_subselect::init_expr_cache_tracker that can cause a Denial of Service when processing specially crafted SQL statements. The vulnerability is documented across multiple advisories (e.g., Astra Linux, ALAS2 advi...

CVE-2023-4901

CVE-2023-4901 affects Google Chrome/Chromium: an improper Prompts implementation prior to Chrome 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Impact is Medium (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N; base score 4.3). Affected products in...

CVE-2023-5484

The CVE-2023-5484 entry concerns Chrome/Chromium where an inappropriate implementation in the Navigation UI allows a remote attacker to spoof security UI via a crafted HTML page. Affected product: Google Chrome/Chromium browser. Root cause: navigation handling in Chromium before 118.0.5993.70 per...

CVE-2014-3710

CVE-2014-3710 affects the Fileinfo extension used by PHP (via the file command parser) in ELF file handling. The vulnerability lies in readelf.c (up to PHP 5.4.34 and fileinfo up to 5.20) where insufficient ELF note-header validation can enable a crafted ELF file to trigger an out-of-bounds read ...

CVE-2018-10811

CVE-2018-10811 affects strongSwan (5.6.0 and older). Root cause: a missing initialization of a variable in the IKEv2 key derivation, enabling a remote attacker to trigger a denial-of-service condition. Public disclosures describe DoS via specially crafted requests, with CVSS in the 5.x range (bas...

CVE-2018-10875

CVE-2018-10875 affects Ansible where ansible.cfg is read from the current working directory, allowing an attacker to influence the plugin/module path and potentially execute arbitrary code. The issue arises because the CWD can be manipulated to point to controlled code. Red Hat/Ubuntu/openSUSE ad...

CVE-2018-2579

CVE-2018-2579 affects OpenJDK components (Java SE/OpenJDK/JRockit) across multiple platforms; connected sources document an issue with unsynchronized access to encryption key data in Libraries, enabling potential information disclosure under network access. Public advisories show affected package...

CVE-2019-5779

CVE-2019-5779: In Google Chrome, the ServiceWorker implementation suffered from insufficient policy validation, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected software is Chrome prior to 72.0.3626.81 and the issue is fixed in later builds. The descr...

CVE-2019-5815

CVE-2019-5815 describes a type confusion in libxslt’s xsltNumberFormatGetMultipleLevel causing heap corruption when processing crafted XML data. Connected advisories (Debian DLA, Debian security tracker, Cloud Foundry USN, etc.) confirm libxslt as the affected component and indicate that fixes ex...

CVE-2019-8322

CVE-2019-8322 affects RubyGems 2.6 and later through 3.0.2. The root cause is that the gem owner command outputs the API response contents directly to stdout, enabling escape sequence injection if the response is crafted. The connected documents provide multiple references (including Debian, Red ...

CVE-2020-13362

CVE-2020-13362 affects QEMU up to and including 5.0.0, where megasas_lookup_frame in hw/scsi/megasas.c may perform an out-of-bounds read when a crafted reply_queue_head field comes from a guest OS user. The impact is described as low (partial availability impact) with local access/vector details ...

CVE-2020-25085

CVE-2020-25085 affects QEMU 5.0.0 where a heap-based overflow occurs in flatview_read_continue (exec.c) due to mishandling of a write in the SDHC_BLKSIZE path within the SDHCI emulation. The issue is linked to out-of-bounds read/write behavior in the SDHCI code, with potential for a privileged gu...

CVE-2020-26117

CVE-2020-26117 affects TigerVNC up to version 1.11.0, where TLS certificate exceptions are stored as authorities, enabling a certificate owner to impersonate any server after an exception is added. The issue is remedied by upgrading to TigerVNC 1.11.0 or later (per linked advisories and product r...

CVE-2020-6471

CVE-2020-6471 concerns Google Chrome prior to 83.0.4103.61, where insufficient policy enforcement in the Developer Tools could allow a user-initiated extension to escape the sandbox. The vulnerability is attributed to a policy enforcement error in the Chromium developer tools component, potential...

CVE-2020-6481

CVE-2020-6481 affects Google Chrome (and Chromium) prior to 83.0.4103.61, where insufficient policy enforcement in URL formatting can enable domain spoofing via crafted domain names. The issue is categorized as an access restriction bypass in the URL formatting path. Remediation per connected adv...

CVE-2020-6484

CVE-2020-6484 refers to insufficient data validation in the ChromeDriver component of Google Chrome prior to 83.0.4103.61. Multiple connected sources confirm the flaw affects Chrome/Chromium and that exploitation could bypass navigation restrictions via a crafted request. The Debian security noti...

CVE-2021-32785

CVE-2021-32785 affects mod_auth_openidc (Apache 2.x) prior to 2.4.9 when configured with an unencrypted Redis cache. The issue arises from argument interpolation before Redis requests are passed to hiredis, causing an uncontrolled format string bug. Impact described as reliable denial of service ...

CVE-2022-0408

CVE-2022-0408 is a Vim/vim prior to 8.2 stack-based buffer overflow. Astra/Amazon/Cloud advisory entries describe a stack-based overflow in vim that could let an attacker supply a crafted file to crash Vim or, per advisories, potentially execute code. Affected product is Vim; root cause is a stac...

CVE-2015-5289

CVE-2015-5289 covers multiple stack-based buffer overflows in PostgreSQL’s json/jsonb input parsing, allowing denial of service (server crash) via crafted input. Public advisories across distributions confirm the issue in PostgreSQL before 9.3.10 and 9.4.5. The affected components are the json an...

CVE-2017-1000501

AWStats is affected by a path-traversal vulnerability in cgi-bin/awstats.pl?config= (and related migrate/config handling) that can disclose or modify files due to improper handling of absolute/partial paths. The issue is described as affecting AWStats 7.7 and earlier, with an incomplete fix in CV...

CVE-2018-16062

CVE-2018-16062 affects elfutils (libdw/dwarf_getaranges.c) where the function dwarf_getaranges() can read beyond ELF section limits, allowing a crafted file to cause a denial of service via a heap-based buffer over-read. Public advisories and vendor notes link this to elfutils releases prior to 2...

CVE-2018-18820

Icecast contains a buffer overflow in the URL-auth backend prior to 2.4.4. When URL authentication is enabled, a crafted HTTP header can trigger a denial of service and potentially remote code execution. Public advisories from multiple distros (openSUSE, Fedora, Debian) indicate that updates addr...

CVE-2019-15215

The CVE-2019-15215 issue is a use-after-free in the Linux kernel, caused by a malicious USB device via the cpia2_usb.c driver (drivers/media/usb/cpia2). Affected: kernel versions before 5.2.6. Impact: potential local denial of service or privilege issues due to use-after-free in USB cpia2 handlin...

CVE-2019-7575

CVE-2019-7575 affects SDL (SDL 1.2.15 and 2.x up to 2.0.9). It is a heap-based buffer overflow in MS_ADPCM_decode within audio/SDL_wave.c. Exploitation could allow arbitrary code execution or crash when processing crafted audio data, as reflected in multiple advisories (Arch Linux, AlmaLinux, Deb...

CVE-2020-27772

CVE-2020-27772 affects ImageMagick. A flaw in coders/bmp.c lets an attacker craft a BMP file that processed by ImageMagick could trigger undefined behavior in the form of values outside the range of unsigned int, most likely impacting availability. The issue applies to ImageMagick versions prior ...

CVE-2020-27774

CVE-2020-27774 entry is rejected and not a valid security vulnerability entry.

CVE-2020-35491

CVE-2020-35491 affects FasterXML jackson-databind 2.x prior to 2.9.10.8, tied to deserialization gadget typing interactions via org.apache.commons.dbcp2.datasources.SharedPoolDataSource. Connected docs corroborate an extensive Jackson deserialization issue set with high impact, but the provided m...

CVE-2020-36226

CVE-2020-36226 affects OpenLDAP prior to 2.4.57, where a memch->bv_len miscalculation in the saslAuthzTo processing can crash slapd, causing denial of service. Connected advisories (Astra Linux, ALAS summaries) corroborate OpenLDAP crashes/denial of service under OpenLDAP 2.x before 2.4.57 dur...

CVE-2020-6491

CVE-2020-6491 affects Chromium/Google Chrome prior to 83.0.4103.61. The issue is an insufficient data validation in the site information component, enabling a remote attacker to spoof the security UI via a crafted domain. Impact involves content spoofing; remediation is to upgrade Chromium/Chrome...

CVE-2021-21231

CVE-2021-21231 affects the V8 JavaScript engine in Google Chrome/Chromium prior to 90.0.4430.93. The root cause is insufficient data validation in V8, which can enable a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability is evidenced across multiple connected advi...

CVE-2021-3630

DjVuLibre: CVE-2021-3630 is an out-of-bounds write in DJVU::DjVuTXT::decode() (DjVuText.cpp) exploitable via crafted DjVu files. Affected in versions prior to 3.5.28; Debian Bullseye fix is 3.5.28-2, and advisories (e.g., USN, other distro notes) recommend upgrading to 3.5.28+. Exploitation statu...

CVE-2022-0714

CVE-2022-0714 affects vim/vim prior to 8.2.4436. Technical details across connected docs indicate a heap-based buffer overflow in Vim’s code path (notably in vim/vim’s charset handling in win_lbr_chartabsize() and associated regexp/line processing). Impact stated includes crashes, possible memory...

CVE-2022-20001

CVE-2022-20001 affects fish shell 3.1.0–3.3.1 where changing directories can trigger arbitrary commands via git in per-repository configurations, affecting prompts and git integration when using default config. Root cause is per-repo configuration execution invoked during directory changes (promp...

CVE-2023-3610

The CVE-2023-3610 issue is a use-after-free in the Linux kernel nf_tables (netfilter) logic, specifically in the NFT_MSG_NEWRULE abort path, caused by flawed error handling of bound chains. This vulnerability can enable local privilege escalation for an attacker possessing CAP_NET_ADMIN, within a...

CVE-2017-10268

CVE-2017-10268 affects Oracle MySQL Server (Server: Replication) with affected versions 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.19 and earlier. The vulnerability allows a high-privilege attacker with logon to the infrastructure where MySQL Server executes to compromise the server, potenti...