10003 matches found
CVE-2017-10087
CVE-2017-10087 is a vulnerability in Oracle Java SE/Java SE Embedded Libraries affecting Java SE 6u151, 7u141, and 8u131, and Java SE Embedded 8u131. The issue is an access-control bypass in the Libraries component that could allow a network-facilitated, unauthenticated attacker to take control o...
CVE-2017-10356
CVE-2017-10356 affects OpenJDK/OpenJDK Security component. The root cause is weak password-based encryption keys used to protect private keys stored in keystores, enabling an unauthenticated attacker with sufficient access to compromise protected data. Affected: Java SE components (OpenJDK/OpenJD...
CVE-2018-2815
CVE-2018-2815 is a deserialization flaw in Oracle Java SE, Java SE Embedded, and JRockit (Serialization component) that can be exploited over network without authentication to cause a partial denial of service. Affected are Java SE 6u181, 7u171, 8u162, 10; Java SE Embedded 8u161; JRockit R28.3.17...
CVE-2018-9363
CVE-2018-9363 is a Linux-kernel vulnerability in the HIDP Bluetooth driver: hidp_process_report can overflow a buffer due to incorrect length handling, potentially causing memory corruption and DoS, with possible remote code execution. Public documents across Debian/Ubuntu/CentOS‑related advisori...
CVE-2019-13742
CVE-2019-13742 corresponds to an UI spoof vulnerability in Google Chrome’s Omnibox on iOS, where an incorrect security UI allowed a remote attacker to spoof the URL bar via a crafted domain name prior to version 79.0.3945.79. Connected security advisories reference Chrome/Chromium remediation pat...
CVE-2019-3701
CVE-2019-3701 affects the Linux kernel CAN subsystem (can_can_gw_rcv in net/can/gw.c) up to version 4.19.13. The CAN frame modification rules can apply bitwise logic to can_dlc, enabling a privileged user with CAP_NET_ADMIN to create a can-gw rule that makes the DLC larger than the frame data. Wh...
CVE-2019-9495
CVE-2019-9495 affects hostapd and wpa_supplicant with EAP-pwd support; vulnerable due to cache access-pattern side-channel. Astra Linux and other sources reinforce that before 2.10, both hostapd and wpa_supplicant are affected. Impact: potential exposure via side-channel, capable of cracking weak...
CVE-2019-9499
CVE-2019-9499 concerns the EAP-pwd implementation in wpa_supplicant (and related hostapd/EAP-pwd paths) where, when built against a crypto library lacking explicit validation, the scalar and element values in EAP-pwd-Commit are not validated. This allows an attacker to craft a commit message and ...
CVE-2020-11089
CVE-2020-11089 is an out-of-bounds read in FreeRDP prior to version 2.1.0, affecting the irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). The issue has been fixed in 2.1.0. Affecte...
CVE-2020-29568
CVE-2020-29568 affects Xen frontends/backends (Xen 4.14.x and older) where watch events are processed by a single thread. If events arrive faster than handling, the unbounded queue can exhaust backend memory, allowing a guest to trigger an OOM in the dom0 backend. The Xen issue is described in mu...
CVE-2020-6403
CVE-2020-6403 affects Google Chrome/Chromium Omnibox behavior. The issue is an incorrect Omnibox implementation on iOS prior to 80.0.3987.87, which could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact described in connected advisories includes UI spoofing r...
CVE-2020-6490
CVE-2020-6490 affects Google Chrome/Chromium loaders prior to 83.0.4103.61, with insufficient data validation in the loader enabling a remote attacker who could write to disk to leak cross-origin data via a crafted HTML page. Upstream fixes are in Chrome/Chromium 83.0.4103.61 and newer; Debian an...
CVE-2021-20309
CVE-2021-20309 affects ImageMagick prior to 7.0.11 and 6.9.12, where a division by zero in WaveImage() (MagickCore/visual-effects.c) can trigger undefined behavior via crafted images. The highest risk described is impact to availability. Connected advisories/patch notes show fixes in ImageMagick ...
CVE-2022-39348
CVE-2022-39348 (Twisted) affects the Twisted event-based framework for internet applications. When the host header does not match a configured host (twisted.web.vhost.NameVirtualHost), NoResource is returned and the Host header is unescaped in the 404, enabling HTML and script injection. The issu...
CVE-2023-0950
CVE-2023-0950 relates to an Improper Validation of Array Index vulnerability in the LibreOffice spreadsheet component (Calc formula parsing). The issue occurs when loading malformed spreadsheet formulas (for example, AGGREGATE) that pass fewer parameters than expected, triggering an array index u...
CVE-2023-5849
CVE-2023-5849 affects Chromium/Google Chrome USB handling: an integer overflow can lead to heap corruption via a crafted HTML page. Impact is high (CVE described as High); exploitation details in the wild are not provided in the documents. Remediation observed in multiple distros includes upgradi...
CVE-2009-2625
CVE-2009-2625 affects Apache Xerces2-Java (XML parser used by JRE/JDK) where parsing a malformed XML with systems DTD identifiers can cause DoS (hangs), via a vulnerability in SYSTEM handling in Xerces2 Java. Connected advisories confirm public fixes: Debian libxerces2-java updates (DSA-1984-1) a...
CVE-2013-6712
CVE-2013-6712 affects PHP up to 5.5.6, where the DateInterval object creation from parsed ISO intervals was not properly restricted. This can enable a remote attacker to trigger a heap-based buffer over-read, leading to a denial of service. The issue is reported across multiple advisories/vendors...
CVE-2015-1819
The CVE-2015-1819 entry is supported by connected data showing a deterministic DoS in libxml2 via XML Entity Expansion (XEE) during XML parsing, causing memory exhaustion. Amazon Linux 2 advisory ALAS2-2019-1220 explicitly groups CVE-2015-1819 with several libxml2 DoS/memory-related CVEs and inst...
CVE-2015-3416
The CVE affects SQLite’s sqlite3VXPrintf in printf.c, vulnerable before 3.8.9. A crafted SELECT with large integers can trigger DoS via integer overflow or stack overflow. Mitigation: upgrade SQLite to a fixed version (3.8.9+); the vulnerability is confirmed in multiple advisories (e.g., F5/K1695...
CVE-2017-10116
CVE-2017-10116 affects Oracle Java SE / Java SE Embedded / JRockit (OpenJDK-related vulnerabilities also reflected in various advisories). The vulnerability arises in the Security component’s LDAPCertStore where LDAP referrals to arbitrary URLs could be used by an unauthenticated network attacker...
CVE-2018-11806
CVE-2018-11806 affects QEMU where the SLiRP networking back-end (mbuf.c) can perform a heap-based buffer overflow when reassembling fragmented datagrams. The described impact in the connected documents includes a potential host compromise via arbitrary code execution or denial of service due to a...
CVE-2018-14681
The CVE-2018-14681 entry concerns libmspack (component: kwajd_read_headers in mspack/kwajd.c) with an off-by-one/file header extension handling issue in versions before 0.7alpha. The vulnerability allows a one- or two-byte overwrite caused by Bad KWAJ file header extensions, as documented in the ...
CVE-2018-14881
CVE-2018-14881 concerns the BGP parser in tcpdump prior to 4.9.3. The issue is a buffer over-read in print-bgp.c:bgp_capabilities_print() when handling BGP_CAPCODE_RESTART. Affected product: tcpdump (and related tcpdump/libpcap stack) with versions before 4.9.3. Consequences stated in sources ind...
CVE-2018-2665
CVE-2018-2665 affects Oracle MySQL Server (Server: Optimizer). Affected releases include MySQL 5.5.58 and older, 5.6.38 and older, and 5.7.20 and older. The vulnerability is exploitable by a low-privileged attacker who can access the server over the network, and can lead to an unauthorized hang o...
CVE-2019-13757
CVE-2019-13757 describes an incorrect security UI issue in the Omnibox of Google Chrome/Chromium that could enable domain spoofing using IDN homographs. The root cause is a security UI flaw in Omnibox handling of domain name input, allowing spoofed domains to appear legitimate. Public reports and...
CVE-2019-13763
CVE-2019-13763 affects Google Chrome: Insufficient policy enforcement in payments in Chrome prior to 79.0.3945.79 allowed a renderer-compromised remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome (renderer process context) with the vulnerability tied to...
CVE-2019-3462
CVE-2019-3462 affects apt 1.4.8 and earlier due to incorrect sanitation of the 302 redirect field in the HTTP transport, enabling content injection by a MITM attacker and potentially leading to remote code execution. Public docs confirm the flaw is in apt’s redirect handling and that exploitation...
CVE-2020-13625
PHPMailer prior to 6.1.6 contains an output escaping bug in attachment name handling when the file name includes a double quote, which can cause the file type to be misinterpreted by recipients or mail relays. The CVE is confirmed across multiple advisories and vendor responses (e.g., PHPMailer r...
CVE-2020-15677
CVE-2020-15677 is an Open Redirect vulnerability affecting Firefox < 81, Thunderbird < 78.3, and Firefox ESR
CVE-2020-36223
CVE-2020-36223 affects OpenLDAP before 2.4.57 and causes a slapd crash due to a flaw in the Values Return Filter control handling, resulting in denial of service via a double free and an out-of-bounds read. The initial description and connected advisories identify the same root cause and impact, ...
CVE-2020-6483
CVE-2020-6483 is a Chromium/Chrome vulnerability where an insufficient policy enforcement in the payments component allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Connected advisories confirm this is a Chromium/Chrome issue affecting the payments module and d...
CVE-2021-20243
ImageMagick vulnerability CVE-2021-20243 affects MagickCore/resize.c: processing a crafted image file can trigger undefined behavior via a division-by-zero, with impact noted as availability. The connected advisories document that this type of flaw is present in ImageMagick and have led to multip...
CVE-2021-20312
CVE-2021-20312 — ImageMagick : Affected in ImageMagick 7.0.11 and earlier; an integer overflow in WriteTHUMBNAILImage (coders/thumbnail.c) may trigger undefined behavior, mainly impacting availability. The connected Debian LTS advisory (DLA-3429-1) fixes this family of issues in imagemagick for D...
CVE-2021-30851
CVE-2021-30851 affects WebKitGTK and WPE WebKit. A memory corruption vulnerability could allow arbitrary code execution when processing malicious web content. Upstream fix is WebKitGTK/WebKit/WPE WebKit 2.34.1; Debian/Arch Linux advisories (DSA-4995/4996, ASA-202110-10) note remediation by upgrad...
CVE-2021-45095
CVE-2021-45095 affects the Linux kernel PhoNet (pep_sock_accept in net/phonet/pep.c). Root cause: reference-count leak in certain error paths, enabling memory exhaustion. Affected: Linux kernel up to 5.15.x (examples cite 5.15.8); remediation: patch released, kernels updated to 5.15.18.1-1 (Marin...
CVE-2022-0729
CVE-2022-0729 affects vim/vim; described as an out-of-range pointer offset in the GitHub repo prior to 8.2.4440. The vulnerability relates to memory access errors that can lead to a crash or potentially arbitrary code execution, as noted across multiple sources referencing Vim’s memory handling. ...
CVE-2022-27448
CVE-2022-27448 affects MariaDB Server v10.9 and below. The issue is an assertion failure in the code path node->pcur->rel_pos == BTR_PCUR_ON (row/row0mysql.cc), which can cause a crash (DoS) of MariaDB Server. The provided documents do not specify a fixed version or exact remediation steps....
CVE-2022-33981
CVE-2022-33981 affects the Linux kernel’s floppy driver (drivers/block/floppy.c) up to version 5.17.6. The issue is a concurrency use-after-free after deallocating raw_cmd in the raw_cmd_ioctl function, leading to a local denial-of-service. Public documents confirm the vulnerable code path and th...
CVE-2023-0666
Wireshark 4.0.x is affected by CVE-2023-0666 due to a RTPS parsing heap overflow in 4.0.5 and earlier. Affected component: RTPS dissector in Wireshark; root cause: failure to validate RTPS packet length. Reported impact includes potential code execution in the Wireshark process and a heap-based o...
CVE-2013-2600
CVE-2013-2600 concerns MiniUPnPd, where the vulnerability arises from improper use of snprintf in SSDP response construction. Versions 1.8 and earlier are affected. An attacker can trigger an information disclosure by sending a crafted SSDP request with a long ST header; if the header is long eno...
CVE-2017-10295
CVE-2017-10295 affects OpenJDK (Java SE/Java SE Embedded) Networking: HttpURLConnection/HttpsURLConnection failed to detect newline characters in URLs, enabling potential HTTP header injection via attacker-provided URLs. Public notices in connected docs show affected package openjdk-7/openjdk-8 w...
CVE-2017-7645
The CVE-2017-7645 issue affects the Linux kernel NFSv2/v3 server (nfsd) and is triggered by processing long RPC replies. The root cause is an out-of-bounds memory access in the NFS server paths (net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, fs/nfsd/nfsxdr.c) that can lead to a system crash (DoS). Affected...
CVE-2017-9287
CVE-2017-9287 affects OpenLDAP slapd back-mdb/search.c and allows a remote crash via a search using Paged Results with page size 0. Public sources in connected docs confirm OpenLDAP versions up to 2.4.44 are affected, with multiple advisories noting a double-free denial-of-service in OpenLDAP and...
CVE-2018-16152
The GMP-based RSA implementation in strongSwan is affected by CVE-2018-16151 and CVE-2018-16152: the gmp_rsa_public_key.c ASN.1/algorithm identifiers do not strictly reject excess or NULL parameters in PKCS#1 v1.5 signatures, enabling potential Bleichenbacher-style forgery and impersonation when ...
CVE-2018-8032
CVE-2018-8032 affects Apache Axis 1.x (up to 1.4) with a cross-site scripting (XSS) vulnerability in the default servlet/services. This vulnerability is documented in IBM/PM security bulletins linked to Axis, confirming an XSS flaw (CWE-79) in Axis 1.x and indicating broader IBM product exposure....
CVE-2019-13747
CVE-2019-13747 affects Google Chrome/Chromium rendering on Android versions prior to 79.0.3945.79, where uninitialized data in rendering could enable a remote attacker to trigger heap corruption via a crafted HTML page. The provided connected documents confirm this CVE is tied to Chromium/Chrome ...
CVE-2019-20485
CVE-2019-20485 affects libvirt’s qemu_driver.c, where libvirt before version 6.0.0 mishandles holding a monitor job during a guest-agent query, enabling a denial of service (API blockage). Connected advisories corroborate the issue across multiple distributions (e.g., Astra Linux, Amazon Linux 2,...