CVE-2021-20313

CVE-2021-20313 is a vulnerability in ImageMagick prior to 7.0.11 describing a potential cipher leak when calculating signatures in TransformSignature, with data confidentiality as the highest concern. The connected advisories (Astra Linux, Debian LTS, Cloud Foundry USNs) confirm ImageMagick invol...

CVE-2021-39713

Technical details about CVE-2021-39713 are not provided in the provided documents; only high-level references (Android kernel and upstream kernel) are present. Monitor for updates.

CVE-2022-32084

CVE-2022-32084 affects MariaDB servers (component: sub_select) and is documented to cause a segmentation fault/server crash. The Initial Description notes a vulnerability in MariaDB versions 10.2 through 10.7. Connected advisories reference concrete fixes for this issue in MariaDB-related securit...

CVE-2022-42328

Technical details about CVE-2022-42328 (and related CVEs) are not provided in the connected documents. Monitor the cited Xen/XenServer advisories and AWS Amazon/Linux advisories for updates and fixes.

CVE-2011-1939

CVE-2011-1939 is a SQL injection vulnerability in Zend Framework when using non-ASCII-compatible encodings with PDO_MySql in PHP before 5.3.6. Affected are Zend Framework 1.10.x prior to 1.10.9 and 1.11.x prior to 1.11.6. The underlying issue is in the encoding handling with PDO_MySql that can al...

CVE-2011-4566

CVE-2011-4566 is an integer overflow in the exif extension (exif_process_IFD_TAG) of PHP, triggered on 32‑bit platforms by a crafted EXIF header in a JPEG. This allows remote attackers to read arbitrary memory or cause a denial of service. The CVE is acknowledged in multiple advisories (Debian, C...

CVE-2017-10350

CVE-2017-10350 is an OpenJDK/Oracle Java SE vulnerability in the JAX-WS subcomponent that could allow an unauthenticated network attacker to cause a partial denial of service in Java SE/Java SE Embedded deployments (clients loading untrusted code in sandbox). Affected versions per initial descrip...

CVE-2017-10388

CVE-2017-10388 affects the OpenJDK Kerberos client: the sname field from the plain-text KDC reply was used instead of the encrypted part, enabling a potential MITM impersonation of Kerberos services for Java applications acting as Kerberos clients. This vulnerability is documented across multiple...

CVE-2017-14482

GNU Emacs contains a command injection vulnerability in the enriched mode handling (CVE-2017-14482). The issue arises when rendering text/enriched MIME data in emails/news; a crafted message can cause arbitrary commands to execute with the privileges of the Emacs process. Exploitation requires th...

CVE-2017-6817

CVE-2017-6817 affects WordPress versions before 4.7.3, where authenticated XSS is possible via YouTube URL embeds in wp-includes/embed.php. The CVSS metrics in the record indicate a Medium severity (CVSS‑3 base 5.4). Remediation is to upgrade to WordPress 4.7.3 or later (as noted in the WordPress...

CVE-2018-1053

PostgreSQL CVE-2018-1053 affects 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2. pg_upgrade creates a file in the current working directory containing the output of pg_dumpall -g, under the umask in effect when pg_upgrade was invoked, not un...

CVE-2018-11219

CVE-2018-11219 is a Redis Lua subsystem integer overflow vulnerability (bounds checking failure) affecting Redis up to versions prior to 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2. The issue originates in lua_struct.c:b_unpack() and can lead to memory corruption or a crash. Public details ...

CVE-2018-14354

The CVE-2018-14354 issue affects Mutt before 1.10.1 and NeoMutt before 2018-07-16, where backquote handling in IMAP mailboxes commands allows a remote IMAP server to cause arbitrary commands to execute. Root cause: insufficient escaping of backquote characters during manual or automatic subscribe...

CVE-2018-2603

CVE-2018-2603 is an OpenJDK/Oracle Java Libraries vulnerability: unbounded memory allocation when reading DER-encoded input in the Libraries (and related JNDI/AWT/JMX contexts). This can allow an unauthenticated attacker with network access via multiple protocols to cause a partial denial of serv...

CVE-2018-2641

CVE-2018-2641 affects Oracle/OpenJDK Java SE/Java SE Embedded, specifically the AWT component. Public records in Debian/CentOS/AIX advisories show multiple OpenJDK/OpenJDK7/8 packages with this CVE, related to the Java sandbox and deserialization/LDAP/JMX weaknesses. The vulnerability is exploita...

CVE-2018-3760

CVE-2018-3760 is a Local File Inclusion/path-traversal vulnerability in Ruby on Rails’ Sprockets, caused by a flaw in the server-side routine forbidden_request?() that allowed access to files outside the application root when the Sprockets server is used in production. Affected versions include S...

CVE-2018-9251

CVE-2018-9251 affects libxml2

CVE-2019-12854

CVE-2019-12854 affects Squid up to 4.7, where incorrect string termination in cachemgr.cgi can cause access to unallocated memory and DoS for clients. Public advisories document this as a Denial of Service vector and list Squid 4.0–4.7 as affected; remediation seen in later vendor advisories/upda...

CVE-2019-13726

CVE-2019-13726: A buffer overflow in Google Chrome’s password manager allows remote code execution via a crafted HTML page. Affected product: Google Chrome (Chromium core). Root cause: buffer/overflow in the password management path. Impact: remote arbitrary code execution with high impact on con...

CVE-2019-13752

CVE-2019-13752: Affected software is Google Chrome/Chromium with SQLite in the WebKit/Blink stack. The issue is an out-of-bounds read in the SQLite library, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. It affects Chrome/Chromi...

CVE-2019-15946

OpenSC prior to 0.20.0-rc1 contains an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (libopensc/asn1.c). Affected software: OpenSC (OpenSC libraries/utilities). Root cause: out-of-bounds read in ASN.1 decoding. Reported impact in sources indicates potential denial-of-service ...

CVE-2019-19911

Summary (CVE-2019-19911) : Pillow before 6.2.2 contains a DoS vulnerability in FpxImagePlugin.py where range() is applied to an unvalidated 32‑bit integer when the number of bands is large. On 32‑bit Windows Python this can trigger OverflowError or MemoryError due to the 2 GB limit; on 64‑bit Lin...

CVE-2019-25035

CVE-2019-25035 affects Unbound prior to 1.9.5, with an out-of-bounds write in the function sldns_bget_token_par. The vendor disputes this as a vulnerability, stating a running Unbound installation cannot be remotely or locally exploited. Connected advisories indicate vendor-provided mitigations/u...

CVE-2019-7574

CVE-2019-7574 affects SDL (libsdl1.2 and libsdl2) up to SDL 1.2.15 and 2.x up to 2.0.9, caused by a heap-based buffer over-read in IMA_ADPCM_decode inside audio/SDL_wave.c. Multiple vendor advisories (Arch Linux ASA-201908-5, Debian DLA entries, AlmaLinux ALAS2-2020-1500, CentOS/CESA notes) docum...

CVE-2020-35490

CVE-2020-35490 : jackson-databind 2.x before 2.9.10.8 is affected. The issue arises from mishandling the interaction between serialization gadgets and typing, related to PerUserPoolDataSource in org.apache.commons.dbcp2. Root cause: polymorphic deserialization/gadget chaining leads to potential c...

CVE-2022-24805

CVE-2022-24805 affects net-snmp prior to 5.9.2. The issue is a buffer overflow in handling the INDEX of NET-SNMP-VACM-MIB, allowing an out-of-bounds memory access to be triggered by a user with read-only credentials. Net-snmp 5.9.2 contains a patch. Public references consistently describe the vul...

CVE-2022-27447

CVE-2022-27447 affects MariaDB Server v10.9 and earlier, with a use-after-free in Binary_string::free_buffer() (sql/sql_string.h) that can trigger crashes/segmentation faults. Multiple connected advisories reference the same issue (notably MariaDB server crash scenarios and use-after-free in Bina...

CVE-2023-4349

CVE-2023-4349 : Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96. A remote attacker could potentially exploit heap corruption via a crafted HTML page. Affected product is Chrome (Chromium-based). The issue is addressed by updating to the latest Chrome/Chromium bui...

CVE-2023-4361

CVE-2023-4361 concerns Google Chrome/Chromium Autofill on Android (pre-116.0.5845.96). The vulnerability is an inappropriate Autofill implementation that allows a remote attacker to bypass Autofill restrictions via a crafted HTML page, enabling potential unauthorized autofill actions. Affected so...

CVE-2016-5772

CVE-2016-5772 : A double free in the PHP WDDX extension (php_wddx_process_data in wddx.c) allows remote attackers to crash the application or potentially execute arbitrary code via crafted XML in wddx_deserialize. Affected PHP versions: before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8. Re...

CVE-2017-10067

CVE-2017-10067 affects Java SE Security in OpenJDK (targets: Java 6u151, 7u141, 8u131). The vulnerability allows a network-accessing, unauthenticated attacker to take control of the Java runtime via multiple protocols; exploitation requires user interaction. Impact aligns with the CVSS 3.0 base s...

CVE-2017-10285

CVE-2017-10285 is confirmed to affect Oracle/OpenJDK Java SE and Java SE Embedded, specifically the RMI (Remote Method Invocation) component. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE/Embedded, with exploitation described...

CVE-2018-1000121

CVE-2018-1000121 affects curl/libcurl: LDAP NULL pointer dereference in curl's LDAP handling (CVE-2018-1000121) could cause a denial of service. Affected range is curl 7.21.0 through 7.58.0 (up to 7.59.0 fixed in some advisories). Exploitation would crash a client using LDAP URLs or redirects to ...

CVE-2018-10811

CVE-2018-10811 affects strongSwan (5.6.0 and older). Root cause: a missing initialization of a variable in the IKEv2 key derivation, enabling a remote attacker to trigger a denial-of-service condition. Public disclosures describe DoS via specially crafted requests, with CVSS in the 5.x range (bas...

CVE-2018-10861

CVE-2018-10861 describes an authorization issue in Ceph Monitor (ceph-mon) where any authenticated Ceph user with read access can delete, create Ceph storage pools, and corrupt snapshot images. Affected releases include Ceph branches master, mimic, luminous, and jewel. The impact is the ability t...

CVE-2018-14567

CVE-2018-14567: libxml2 2.9.8 with LZMA support is vulnerable to denial of service via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR (infinite loop). Exploitation vector is a crafted XML payload; affected component is libxml2/xz decompression path when built with --with-lzma. Several vendo...

CVE-2018-18520

CVE-2018-18520 – elfutils (libelf): In elfutils up to v0.174, the function elf_end mishandles recursive ar files (eu-size/handle_ar in size.c) by closing the outer ar file before finishing inner entries, enabling an invalid memory access that can crash the application (denial of service). This is...

CVE-2018-2633

CVE-2018-2633 affects OpenJDK/OpenJDK-based runtimes (Java SE/Java SE Embedded/JRockit) via the JNDI LDAP path, specifically the LDAPCertStore in JNDI. The vulnerability arises from insecure handling of LDAP referrals, which could allow a remote attacker to cause a security impact by manipulating...

CVE-2018-6616

OpenJPEG is affected by CVE-2018-6616 (and related) due to excessive iteration in opj_t1_encode_cblks (openjp2/t1.c), enabling DoS via crafted BMP files. Public details reference OpenJPEG 2.3.0/2.3.1 and similar advisories indicating this weakness in the t1.c path. Upstream fixes are reported in ...

CVE-2019-0201

CVE-2019-0201 affects Apache ZooKeeper up to versions 3.4.13 and 3.5.4-beta, where getACL() does not enforce permissions and returns the ACL Id in plaintext. When Digest Authentication is in use, the unsalted hash value contained in the Id field can be disclosed to unauthenticated or unprivileged...

CVE-2019-13729

CVE-2019-13729 : Use-after-free in Chrome’s WebSockets before 79.0.3945.79 allowing remote heap corruption via a crafted HTML page. Affected: Google Chrome (WebSockets) on legacy builds up to 79.0.3945.79. Root cause: use-after-free in the WebSockets implementation. Impact: heap corruption; remot...

CVE-2019-13739

The CVE-2019-13739 entry describes an insufficent policy enforcement flaw in Google Chrome’s Omnibox, enabling domain spoofing via IDN homographs. A remote attacker could exploit a crafted domain name to spoof a site, with impact limited to the UI/identity surface. Affected software is Chrome (Om...

CVE-2019-15681

CVE-2019-15681 is a memory-leak vulnerability (CWE-655) in LibVNCServer’s VNC server component. The issue, introduced in LibVNC commit prior to d01e1bb4246..., could allow an attacker to read stack memory and cause information disclosure; when combined with another vulnerability this memory leaka...

CVE-2019-5758

CVE-2019-5758 is a use-after-free in Blink/WebKit reported for Chromium-based browsers (Zhe Jin). The connected Debian/Nessus entries enumerate it among Chromium CVEs, linked to Blink/WebKit handling of HTML, and remediation is to update Chromium/Chrome to a newer version as released in the 72.x+...

CVE-2019-7398

ImageMagick (before 7.0.8-25) contains a memory leak in WriteDIBImage (coders/dib.c). The provided connected advisories confirm CVE-2019-7398 and indicate the issue is a memory leak, not an exploitable condition described here. Remediation: update ImageMagick to 7.0.8-25 or newer to fix the vulne...

CVE-2020-11810

OpenVPN 2.4.x prior to 2.4.9 is affected by CVE-2020-11810. An attacker can inject a P_DATA_V2 data channel packet using a victim’s peer-id, potentially dropping the victim’s connection if the packet arrives before data channel crypto parameters are initialized. The attack relies on a small timin...

CVE-2020-12100

CVE-2020-12100 affects Dovecot before 2.3.11.3, where uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause resource exhaustion/denial of service via a crafted email with deeply nested MIME parts. The issue is addressed by upgrading to a fixed version (2.3.11.3 or n...

CVE-2020-28035

CVE-2020-28035 affects WordPress up to version 5.5.2, where an XML‑RPC based flaw allows an attacker to escalate privileges. The issue is publicly documented in CVE-2020-28035 with a high launcher in the CVSS context (network, low attack complexity, no authentication). The connected records corro...

CVE-2021-20255

The CVE-2021-20255 vulnerability affects the QEMU eepro100 i8255x device emulator. The root cause is a DMA reentry condition that can trigger a stack overflow via infinite recursion while processing controller commands, allowing a guest user or process to consume CPU cycles or crash the QEMU host...

CVE-2021-21231

CVE-2021-21231 affects the V8 JavaScript engine in Google Chrome/Chromium prior to 90.0.4430.93. The root cause is insufficient data validation in V8, which can enable a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability is evidenced across multiple connected advi...