CVE-2020-11097

CVE-2020-11097: In FreeRDP before 2.1.2, there is an out-of-bounds read that accesses memory outside the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. The root cause is an OOB read in ntlm_av_pair_get, with the issue fixed in FreeRDP 2.1.2. Public advisories and Debian ARNs co...

CVE-2020-13428

CVE-2020-13428 concerns a heap-based buffer overflow in VLC media player before 3.0.11 for macOS/iOS, specifically in the function hxxx_AnnexB_to_xVC in modules/packetizer/hxxx_nal.c. The vulnerability allows remote attackers to cause a denial of service (application crash) or execute arbitrary c...

CVE-2020-13777

GnuTLS 3.6.x before 3.6.14 is affected by a flaw in how the TLS session-ticket encryption key is constructed, caused by an 2018-09-18 commit. The earliest affected version is 3.6.4 . Until the first key rotation, the TLS server uses incorrect data in place of a key derived from the application, l...

CVE-2020-27824

OpenJPEG2 CVE-2020-27824 affects the encoder code path opj_dwt_calc_explicit_stepsizes(), where crafted input to decomposition levels can trigger a buffer overflow. The highest stated impact is to availability. Public advisories show remediations via updated openjpeg2 packages (e.g., Debian openj...

CVE-2020-28032

CVE-2020-28032 affects WordPress prior to 5.5.2, caused by unsafe deserialization in wp-includes/Requests/Utility/FilteredIterator.php (Requests_Utility_FilteredIterator). The provided data notes high-severity impact (CVE‑SS scores show critical/high across CONF, INTE, AVAIL) with network attack ...

CVE-2021-21191

CVE-2021-21191 is a use-after-free vulnerability in the WebRTC component of Chromium-based browsers (Google Chrome) prior to 89.0.4389.90. The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page, as described in the CVE entry. Connected documents confirm ...

CVE-2021-33623

CVE-2021-33623 : The trim-newlines package for Node.js is vulnerable to a regular-expression Denial of Service (ReDoS) on the .end() method. Affected versions are before 3.0.1 and 4.x before 4.0.1. Remedies include upgrading to trim-newlines 3.0.1 or 4.0.1 (or later). The available connected docu...

CVE-2021-38506

CVE-2021-38506 describes a UI spoofing risk in Mozilla products where, after a series of navigations, Firefox could enter fullscreen mode without user notification. Affected: Firefox < 94, Thunderbird < 91.3, and Firefox ESR

CVE-2021-44227

GNU Mailman 2.1.x prior to 2.1.38 is affected by CVE-2021-44227, allowing a list member or moderator to obtain a CSRF token and craft an admin request that can change settings or reset the admin password, potentially leading to admin takeover. Multiple advisories confirm the issue across distribu...

CVE-2022-0359

CVE-2022-0359 is described in connected docs as a Heap-based Buffer Overflow in vim/vim prior to 8.2. The Astra Linux bulletin reiterates the issue, and Cloud Foundry’s USN listing includes this CVE among Vim-related flaws. The provided materials do not specify the exact affected product version ...

CVE-2022-31163

CVE-2022-31163 affects the TZInfo Ruby library. The vulnerability arises when TZInfo::Timezone.get validates time zone identifiers, allowing a newline in the identifier to cause relative path traversal and, with Ruby 1.9.3+, loading unintended files via require. Affected versions are TZInfo prior...

CVE-2023-2603

CVE-2023-2603 concerns libcap: an integer overflow in the internal function _libcap_strdup() when handling very large input strings (near 4 GiB). The issue is exploitable locally and is rated high severity (C/H/I/A). Multiple advisories confirm libcap2 updates to fix this, including Debian’s DLA-...

CVE-2012-6094

CVE-2012-6094 affects the Common UNIX Printing System (CUPS). The issue is that the option to listen on localhost:631 is not honored, which could allow unauthorized access to the system’s web-based admin interface. Publicly documented mitigations include patches in cups updates (e.g., openSUSE cu...

CVE-2013-4449

OpenLDAP OpenLDAP rwm overlay vulnerability CVE-2013-4449 allows a remote attacker to crash slapd by unbinding immediately after a search, due to incorrect reference counting. Public disclosures confirm the affected versions (2.4.23, 2.4.36 and earlier) and describe a denial-of-service condition ...

CVE-2017-7558

CVE-2017-7558 describes a kernel data leak (out-of-bounds read) in the Linux kernel inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() that could leak up to 100 bytes of slab data to userspace. Affected: Linux kernel (4.7-rc1 through 4.13). Root cause: filling sockaddr data structures wit...

CVE-2018-14718

CVE-2018-14718 affects FasterXML jackson-databind 2.x (pre-2.9.7). Description: remote code execution via deserialization due to failure to block the slf4j-ext class from polymorphic deserialization. IBM watsonx.data is listed as affected (versions 1.0.0–2.0.0 in some bulletins; later bulletins s...

CVE-2018-19622

Wireshark MMSE dissector (CVE-2018-19622) could enter an infinite loop in versions 2.6.0–2.6.4 and 2.4.0–2.4.10 due to length overflow handling, addressed by epan/dissectors/packet-mmse.c. Remediation: upgrade to Wireshark 2.6.5 or newer (and related vendor advisories confirm the fix).

CVE-2018-8778

CVE-2018-8778 affects Ruby prior to 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1. It describes a buffer under-read in String#unpack triggered by an attacker-controlled unpacking format, leading to massive information disclosure. Affected platforms include...

CVE-2019-13619

Wireshark vulnerable components: ASN.1 BER dissector and related dissectors. A crash could occur in Wireshark versions 3.0.0–3.0.2, 2.6.0–2.6.9, and 2.4.0–2.4.15 due to improper buffer increment handling in epan/asn1.c. Root cause: buffer increment handling allowed crash scenarios in the ASN.1 BE...

CVE-2019-5716

Wireshark 2.6.0–2.6.5 contained a crash in the 6LoWPAN dissector. The root cause was use of TVB before creation in epan/dissectors/packet-6lowpan.c; this was addressed by avoiding the premature TVB use. Technical details across connected sources confirm the affected component, vulnerability class...

CVE-2019-9849

CVE-2019-9849 affects LibreOffice prior to 6.2.5. In stealth mode, protection that blocks remote resources did not apply to bullet graphics, potentially exposing or loading remote content via bullet graphics. Upgrade LibreOffice to a version 6.2.5 or newer to remediate.

CVE-2020-11096

FreeRDP vulnerability CVE-2020-11096 affects FreeRDP up to version 2.1.2, caused by a global out-of-bounds (OOB) read in update_read_cache_bitmap_v3_order. The workaround is to disable bitmap cache (-bitmap-cache, which is the default). The issue is fixed in version 2.1.2. Related advisories conf...

CVE-2020-36221

CVE-2020-36221 is an integer underflow in OpenLDAP’s Certificate Exact Assertion processing that crashes slapd, causing denial of service. The issue affects OpenLDAP before 2.4.57; Astra Linux and ALAS advisories explicitly reference the underflow and the need to upgrade to 2.4.57 or newer to fix...

CVE-2020-6468

CVE-2020-6468 is a type confusion vulnerability in the V8 JavaScript engine used by Google Chrome/Chromium, affecting versions prior to 83.0.4103.61. The issue, identified in the V8 component, can lead to heap corruption and potential remote code execution when a user visits a specially crafted H...

CVE-2021-3482

Exiv2 vulnerability CVE-2021-3482 affects versions up to 0.27.4-RC1, due to improper input validation of rawData.size in Jp2Image::readMetadata() that can cause a heap-based buffer overflow when processing a crafted JPEG with malicious EXIF data. Exploitation could lead to arbitrary code executio...

CVE-2022-2509

CVE-2022-2509 is a vulnerability in the GnuTLS library (gnutls) caused by a double free during verification of PKCS7 signatures in gnutls_pkcs7_verify. Connected documents show affected packages across several ecosystems (e.g., Debian gnutls28, AlmaLinux gnutls, Cloud Foundry USN). The root cause...

CVE-2022-28389

CVE-2022-28389 : In the Linux kernel up to version 5.17.1, mcba_usb_start_xmit implemented in drivers/net/can/usb/mcba_usb.c has a double free vulnerability. The issue is documented in multiple advisories linked to this CVE, including Astra Linux and Amazon Linux 2 ALAS advisories, which explicit...

CVE-2023-3141

CVE-2023-3141 : A use-after-free in the Linux kernel memstick driver (drivers/memstick/host/r592.c, function r592_remove) can crash the system on device disconnect and may lead to kernel information leaks. Affected tracked advisories confirm this issue across multiple vendor/distro kernels (e.g.,...

CVE-2002-2443

CVE-2002-2443 affects MIT Kerberos 5 (krb5) kadmind, specifically the kpasswd service, where schpw.c does not validate incoming UDP packets. This can allow a remote attacker to cause a denial of service via a forged UDP packet that triggers a packet/communication loop, consuming CPU and bandwidth...

CVE-2018-1108

CVE-2018-1108 affects Linux kernel random seed handling in kernel drivers prior to 4.17-rc1. Seeds could be consumed during early boot before sufficient entropy was gathered, risking confidentiality and integrity of encrypted communications. Public documents specify that the entropy/generator had...

CVE-2018-16402

CVE-2018-16402 affects elfutils (libelf/elf_end.c) where double decompression of sections can lead to a denial of service or application crash. Affected upstream version is 0.173. Public advisories confirm a remediation path: upgrade elfutils to newer releases (e.g., 0.176) across affected platfo...

CVE-2019-20479

The CVE-2019-20479 issue affects mod_auth_openidc before 2.4.1, caused by insufficient validation of URLs beginning with a slash and backslash, leading to an Open Redirect vulnerability in logout URLs. Multiple connected advisories (Debian, Red Hat/CentOS, Fedora, Amazon Linux advisories) confirm...

CVE-2019-5766

CVE-2019-5766 describes an incorrect origin taint handling in Canvas within Chromium/Google Chrome, which could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Canvas origin taint check and is listed against Chrome versions prior to 72.0...

CVE-2019-5807

CVE-2019-5807 is a memory corruption issue in the V8 JavaScript engine in Google Chrome/Chromium prior to 74.0.3729.108. The vulnerability exists in V8’s handling of crafted HTML pages, potentially enabling heap corruption and remote code execution through a page load. Remediation across affected...

CVE-2019-6128

CVE-2019-6128 : LibTIFF 4.0.10 is affected by a memory leak in the TIFFFdOpen function (tif_unix.c), demonstrated by pal2rgb. The initial description does not provide details on exploit vectors, impact scope beyond memory leakage, or available remediations. Based on the provided document, there i...

CVE-2019-9631

CVE-2019-9631 affects Poppler 0.74.0, with a heap-based buffer over-read in CairoRescaleBox.cc downsample_row_box_filter. The vulnerability is disclosed across multiple advisories (e.g., MiracleLinux AXSA-2019-4277, SUSE/SUSE-SU advisories, Oracle Linux ELSA-2019-2022) and is tracked in CVE-2019-...

CVE-2019-9848

CVE-2019-9848 affects Document Foundation LibreOffice prior to 6.2.5. It exploits LibreLogo invoked via document event handlers to execute arbitrary Python code contained in a document, enabling remote code execution without user warning. The root cause is the ability for documents to trigger pre...

CVE-2020-11076

CVE-2020-11076 affects Puma (RubyGem). The issue allows an attacker to smuggle an HTTP response by using an invalid transfer-encoding header. Affected versions are Puma before 4.3.4 and 3.12.5; fixes are in Puma 4.3.4 and 3.12.5. Connected advisories and bulletins (Debian, openSUSE/openSUSE-2020-...

CVE-2020-11758

CVE-2020-11758 affects OpenEXR before 2.4.1 via an out-of-bounds read in ImfOptimizedPixelReading.h. Public docs (Debian DLA-2358-1) note potential denial of service and possible arbitrary code execution when processing malformed EXR files; OpenEXR/ImageIO entries reference the same CVE family. R...

CVE-2020-11760

CVE-2020-11760 affects OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in ImfRle.cpp (function rleUncompress). OpenEXR releases indicate the fix is to upgrade to v2.4.1. Public references in the connected documents confirm the CVE entry is included among OpenEXR issu...

CVE-2020-11765

CVE-2020-11765 concerns OpenEXR prior to 2.4.1, where an off-by-one error in the ImfXdr.h read function used by DwaCompressor::Classifier::Classifier caused an out-of-bounds read. Public disclosures and vendor advisories (OpenEXR/OpenEXR 2.4.1 release notes; GLSA-202107-27; Debian DLA-2358-1) con...

CVE-2021-43528

CVE-2021-43528 : Thunderbird before 91.4.0 enables JavaScript in the composition area. The JS context is restricted to that area with no chrome privileges but could serve as a stepping stone to further attacks involving other vulnerabilities. Affected: Thunderbird

CVE-2022-1942

CVE-2022-1942 is a vim/vim vulnerability (affecting Vim prior to 8.2) where a heap-based buffer overflow can be triggered by opening a command-line window from a substitute expression. Debian LTS advisory DLA-3204-1 (vim 2:8.1.0875-5+deb10u4) and Debian 11/NVD entries categorize it as a heap-base...

CVE-2022-27379

CVE-2022-27379 affects MariaDB Server, with the vulnerable component in Arg_comparator::compare_real_fixed. Affected: MariaDB Server v10.6.2 and below. Description and connected advisories consistently indicate this flaw can cause a Denial of Service (DoS) via specially crafted SQL statements, im...

CVE-2022-32215

CVE-2022-32215 concerns the llhttp parser used by Node.js. The http module can mis-handle multi-line Transfer-Encoding headers in vulnerable builds, enabling HTTP Request Smuggling (HRS). Affected are Node.js ships with llhttp < v14.20.1, < v16.17.1, and

CVE-2013-6712

CVE-2013-6712 affects PHP up to 5.5.6, where the DateInterval object creation from parsed ISO intervals was not properly restricted. This can enable a remote attacker to trigger a heap-based buffer over-read, leading to a denial of service. The issue is reported across multiple advisories/vendors...

CVE-2017-10102

CVE-2017-10102 is a remotely exploitable issue in Oracle Java SE and Java SE Embedded (RMI subcomponent) affecting Java SE 6u151, 7u141, 8u131 and Java SE Embedded 8u131. A remote attacker could compromise the target via API data handling over network access, potentially taking over the Java runt...

CVE-2018-18313

Perl before 5.26.3 is affected by a buffer over-read triggered by crafted regular expressions, which can disclose sensitive data from process memory. Public sources (e.g., USN-3834-1, Debian/CVE trackers) confirm CVE-2018-18313 and list affected platforms, noting that upgrading to Perl 5.26.3 or ...

CVE-2019-13754

CVE-2019-13754 affects Google Chrome/Chromium where insufficient policy enforcement in extensions could let a remote attacker bypass navigation restrictions via a crafted HTML page. The vulnerability is scoped to Chrome versions before 79.0.3945.79. Public advisories and updates indicate remediat...

CVE-2019-16789

Affected software: Waitress (Python WSGI server) up to version 1.4.0. Vulnerability arises when a front-end proxy sends requests with Transfer-Encoding containing invalid whitespace characters; Waitress may parse such requests as chunked while the front-end uses Content-Length, enabling HTTP requ...