CVE-2015-9381

FreeType vulnerability CVE-2015-9381 affects FreeType before 2.6.1, with a heap-based buffer over-read in T1_Get_Private_Dict (type1/t1parse.c). This can lead to information disclosure. Connected sources confirm the issue is due to a memory boundary validation flaw in that function. Remediation s...

CVE-2021-23450

CVE-2021-23450 describes a Prototype Pollution vulnerability in the Dojo package, exposed via the setObject function. Multiple connected advisories confirm Dojo is affected and note remediation by upgrading to fixed Dojo versions in vendor advisories (IBM, other vendors) and related security bull...

CVE-2017-10348

CVE-2017-10348 affects OpenJDK/OpenJDK-derived Java SE/Embedded libraries. The vulnerability, exploitable over the network by unauthenticated attackers, can lead to a partial denial of service on Java SE and Java SE Embedded. Public details in the provided materials indicate affected versions var...

CVE-2017-10378

CVE-2017-10378 affects the MySQL Server component (Server: Optimizer) with affected versions 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.11 and earlier. The vulnerability is exploitable remotely over multiple protocols by a low-privilege user and can cause the MySQL Server to hang or crash (D...

CVE-2017-13086

CVE-2017-13086 affects WPA/WPA2, specifically the TDLS handshake where the TDLS PeerKey (TPK) can be reinstalled. The root cause is key reinstallation during the TDLS handshake, enabling an attacker within radio range to replay, decrypt, or spoof frames. This vulnerability is documented across mu...

CVE-2018-12392

CVE-2018-12392 is a vulnerability affecting Firefox (pre-63 and ESR pre-60.3) and Thunderbird (pre-60.3) where manipulating user events in nested loops while opening a document via script can trigger a crash due to poor event handling. Public advisories list the impact as a potentially exploitabl...

CVE-2018-14599

CVE-2018-14599 affects libX11 up to version 1.6.5, with an off-by-one error in XListExtensions (ListExt.c) caused by crafted server responses that can lead to a crash or memory corruption and Denial of Service. Connected sources detail the vulnerability as part of a broader set of libX11 issues i...

CVE-2018-18310

CVE-2018-18310 is an invalid memory address dereference in libdwfl/dwfl_segment_report_module.c of elfutils (through v0.174) that can cause a denial of service (application crash) when processing a crafted ELF file. Connected advisories confirm the issue and indicate that upstream fixes exist in ...

CVE-2018-2771

CVE-2018-2771 affects the MySQL Server component (subcomponent: Server: Locking) across Oracle MySQL releases. Affected series include 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. The vulnerability is described as difficult to exploit but can allow a high-privilege attacker wit...

CVE-2019-11281

CVE-2019-11281 affects Pivotal RabbitMQ and RabbitMQ for PCF where two UI components (virtual host limits page and federation management UI) fail to sanitize user input. A remote authenticated administrator could craft a cross-site scripting attack to access virtual hosts and policy management in...

CVE-2019-13962

CVE-2019-13962 affects VLC

CVE-2019-3835

CVE-2019-3835 affects Ghostscript prior to 9.27. A specially crafted PostScript file could cause a sandbox escape by abusing the internal superexec operator, allowing access to the filesystem outside -dSAFER. The issue was part of sandbox bypasses tied to various operators and has been fixed upst...

CVE-2019-7635

CVE-2019-7635 affects SDL (SDL1.2 up to 1.2.15 and SDL2 up to 2.0.9) with a heap-based buffer over-read in Blit1to4 (video/SDL_blit_1.c). Multiple connected sources (Arch/ALMA/CentOS/Debian advisories) describe this alongside related CVEs in audio/video paths (e.g., IMA_ADPCM and MS_ADPCM in audi...

CVE-2020-15676

CVE-2020-15676 affects Firefox (and related Mozilla products) where the onload handler for SVG elements could run after the DOM sanitizer removed content, enabling JavaScript execution when pasting attacker-controlled data into a contenteditable area. Affected versions: Firefox < 81, Thunderbi...

CVE-2020-36228

CVE-2020-36228 is an integer underflow in OpenLDAP’s Certificate List Exact Assertion processing that can crash slapd, causing denial of service. It affects OpenLDAP releases before 2.4.57. Public advisories confirm the issue and reference related CVEs in the same 2.4.x stream. The vulnerability ...

CVE-2020-6420

CVE-2020-6420 affects Google Chrome (media component). The issue is insufficient policy enforcement that allows a remote attacker to bypass the same-origin policy via a crafted HTML page, enabling information disclosure and potential further actions. Affected versions are Chrome before 80.0.3987....

CVE-2021-21232

CVE-2021-21232 affects Google Chrome DevTools. Use-after-free in Dev Tools prior to version 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Debian and other advisories note the fix in Chrome 90.0.4430.93 (and Chrome/Chromium update channels),...

CVE-2023-6932

CVE-2023-6932 is a Linux kernel vulnerability affecting the ipv4: igmp component. The issue is described as a use-after-free condition with a race that can cause a timer to be registered on an RCU read-locked object that is freed by another thread, enabling local privilege escalation. Connected d...

CVE-2024-0741

CVE-2024-0741 describes an out-of-bounds write in ANGLE that could corrupt memory and cause a potentially exploitable crash. Affected software includes Firefox up to version 121/122 and Firefox ESR up to 115.7, as well as Thunderbird up to 115.7. The connected advisories indicate the root cause i...

CVE-2005-1921

CVE-2005-1921 is a remote PHP code execution vulnerability in PEAR XML_RPC (<=1.3.0) and PHPXMLRPC (

CVE-2011-2189

Summary (CVE-2011-2189): The Linux kernel (2.6.32 and earlier) has a flaw in net_namespace.c that mishandles a high rate of network-namespace creation/cleanup. This can allow remote attackers to cause a denial of service via memory consumption in a daemon that creates a separate namespace per con...

CVE-2014-4049

CVE-2014-4049: Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c used by PHP 5.6.0beta4 and earlier. This vulnerability allows remote servers to crash the PHP process and possibly execute arbitrary code via a crafted DNS TXT record (dns_get_record). The connected docume...

CVE-2017-10243

CVE-2017-10243 affects Oracle Java SE, Java SE Embedded, and JRockit (JAX-WS subcomponent). Affected: Java SE 6u151, 7u141, 8u131; Java SE Embedded 8u131; JRockit R28.3.14. Exploitation: unauthenticated attacker with network access via multiple protocols can read a subset of data and cause a part...

CVE-2017-3308

Summary of findings: CVE-2017-3308 affects Oracle MySQL Server (Server: DML) with affected branches 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability is exploitable over network with low privileges, and can result in a hang or frequent crash (complete DoS) of MySQL...

CVE-2018-1000076

CVE-2018-1000076 (RubyGems) describes an Improper Verification of Cryptographic Signature vulnerability in package.rb that could allow installation of a mis-signed gem because the tarball could contain multiple gem signatures. Affected versions include RubyGems in Ruby 2.2.x, 2.3.x, 2.4.x, and 2....

CVE-2018-14348

CVE-2018-14348 affects libcgroup up to 0.41, where cgrulesengd creates /var/log/cgred with mode 0666 regardless of umask, leading to information disclosure. Connected sources confirm patched releases (e.g., 0.41-23 and later) are available; multiple vendors (Debian, Red Hat, CentOS/Amazon Linux, ...

CVE-2018-15756

CVE-2018-15756 (Spring Framework) affects Spring Web MVC/WebFlux ranges handling: the ResourceHttpRequestHandler, or returning a Resource from an annotated controller, can be abused by a crafted Range header to trigger a denial-of-service. Affected versions include Spring Framework 5.1, 5.0.x bef...

CVE-2018-2602

CVE-2018-2602 affects Oracle Java SE and Java SE Embedded (I18n). Publicly available docs describe the issue as a vulnerability in the I18n component where loading resource bundles from an untrusted location may allow a locally authenticated attacker to execute code or bypass sandboxing, with CVS...

CVE-2019-10895

CVE-2019-10895 affects Wireshark 2.4.0–2.4.13, 2.6.0–2.6.7, and 3.0.0, where the NetScaler file parser could crash due to insufficient data validation. The issue is fixed in the Wireshark codebase by improving validation in wiretap/netscaler.c (as noted in multiple advisories). Public references ...

CVE-2019-14817

Ghostscript before version 9.50 is affected by sandbox escape flaws via multiple PostScript procedures, including .pdfexectoken, .pdf_hook_DSC_Creator, setuserparams, and setsystemparams, allowing bypass of -dSAFER and potential file-system access or command execution. Affected versions are befor...

CVE-2019-20042

CVE-2019-20042 affects WordPress installations using wp-includes/formatting.php: wp_targeted_link_rel() in WordPress versions 3.7–5.3.0 can be exploited to trigger a stored XSS. The issue stems from how the function handles input in that path, allowing injection that persists in the stored conten...

CVE-2019-25039

CVE-2019-25039 affects Unbound before 1.9.5, with an integer overflow in size calculation in respip/respip.c. The vendor disputes this as a vulnerability, and the description notes that a running Unbound installation cannot be remotely or locally exploited. CVSS scores in the entry show: CVSS2 ba...

CVE-2019-3838

Ghostscript prior to 9.27 is vulnerable to sandbox escape via crafted PostScript (CVE-2019-3835, CVE-2019-3838). The flaws enable access to the filesystem outside -dSAFER by exploiting the superexec/forceput paths in the internal dictionary. Upstream fixes are in 9.27; Arch Linux advisory recomme...

CVE-2020-15803

CVE-2020-15803 affects Zabbix frontend across multiple branches: stored XSS in the URL Widget present in versions before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x–4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1. Impact is stored XSS via the URL widget, enabling script execution in the frontend conte...

CVE-2020-27766

CVE-2020-27766 concerns ImageMagick, specifically the MagickCore/statistic.c path. A crafted image could trigger undefined behavior by causing values to exceed the range of unsigned long, with the most likely impact being degradation of application availability. The vulnerability affects ImageMag...

CVE-2020-3327

The CVE-2020-3327 issue affects ClamAV’s ARJ archive-parsing module and is caused by an out-of-bounds read in the ARJ parser that could trigger a denial of service. Advisories confirm a fix was released in ClamAV 0.102.3 (with subsequent updates addressing the issue in later releases, e.g., 0.102...

CVE-2021-30846

CVE-2021-30846 is a memory corruption vulnerability in WebKitGTK and WPE WebKit that could allow remote code execution when processing malicious web content. It is publicly fixed upstream in WebKitGTK/WPE WebKit around version 2.34.1 (Arch Linux ASA-202110-9/ASA-202110-10 indicate vulnerability i...

CVE-2021-4166

CVE-2021-4166 is a Vim vulnerability categorized as an out-of-bounds read affecting Vim buffers. Public references in the connected documents confirm the issue, with remediation guidance tied to Vim updates. The Cloud Foundry advisory (USN-6026-1) and related AWS/Linux bulletins indicate Vim fixe...

CVE-2022-20698

The CVE-2022-20698 entry describes a Denial of Service in ClamAV caused by an OOXML parsing flaw. A crafted OOXML file can trigger an invalid pointer read in the OOXML parsing module, allowing an unauthenticated remote attacker to crash the ClamAV scanning process. Affected versions are ClamAV 0....

CVE-2022-26966

CVE-2022-26966 affects the Linux kernel up to 5.16.12, via the drivers/net/usb/sr9700.c component. A local attacker can attach a specially crafted USB device and cause information disclosure by leaking heap memory from the device, as described in multiple connected documents (upstream kernel note...

CVE-2023-3773

The CVE-2023-3773 entry describes a flaw in the Linux kernel’s XFRM (IP framework) where parsing netlink attributes can trigger a 4-byte out-of-bounds read of XFRMA_MTIMER_THRESH. This could allow a malicious user with CAP_NET_ADMIN to leak sensitive heap data to userspace. The provided descripti...

CVE-2018-14470

The CVE-2018-14470 issue affects tcpdump prior to 4.9.3, where the Babel parser in print-babel.c:babel_print_v2() triggers a buffer over-read. Public advisories and vendor bulletins (AlmaLinux, Debian, Cloud Foundry USN, IBM AIX) confirm this vulnerability as part of a collection of tcpdump issue...

CVE-2018-2579

CVE-2018-2579 affects OpenJDK components (Java SE/OpenJDK/JRockit) across multiple platforms; connected sources document an issue with unsynchronized access to encryption key data in Libraries, enabling potential information disclosure under network access. Public advisories show affected package...

CVE-2019-13732

CVE-2019-13732 describes a use-after-free in the WebAudio implementation of Chromium/Google Chrome, exploitable via a crafted HTML page to potentially trigger heap corruption. The CVE is referenced across multiple advisories, indicating impact on Chromium/Chrome before version 79.0.3945.79, with ...

CVE-2020-35523

CVE-2020-35523 affects libtiff, with the flaw located in tif_getimage.c creating an integer overflow that can allow an attacker to execute arbitrary code when a crafted TIFF file is opened. Public advisories and security trackers consistently reference this as a code-execution risk in affected Li...

CVE-2020-35524

CVE-2020-35524 concerns the libtiff library. It is a heap-based buffer overflow in the TIFF2PDF handling path that can be triggered by a crafted TIFF file, potentially allowing arbitrary code execution and impact on confidentiality, integrity, and availability. Public advisories indicate a patche...

CVE-2020-5267

CVE-2020-5267 is an XSS vulnerability in ActionView’s JavaScript literal escape helpers. It affects Rails ActionView before 6.0.2.2 and 5.2.4.2, where views using j or escape_javascript may be vulnerable. The issue is fixed in version 6.0.2.2 and 5.2.4.2. Public connected documents corroborate th...

CVE-2021-33285

NTFS-3G vulnerability (CVE-2021-33285) affects versions before 2021.8.22. A crafted NTFS attribute input to ntfs_get_attribute_value can trigger an out-of-bounds heap access due to a missing consistency check after reading an MFT record; if bytes_in_use is not less than bytes_allocated, parsing c...

CVE-2022-28347

CVE-2022-28347 is a Django SQL injection vulnerability affecting QuerySet.explain() when a crafted dictionary with dictionary expansion is passed as the options argument and the injection payload is placed in an option name. Affected versions: Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 ...

CVE-2022-28389

CVE-2022-28389 : In the Linux kernel up to version 5.17.1, mcba_usb_start_xmit implemented in drivers/net/can/usb/mcba_usb.c has a double free vulnerability. The issue is documented in multiple advisories linked to this CVE, including Astra Linux and Amazon Linux 2 ALAS advisories, which explicit...