CVE-2019-6799

Summary of CVE-2019-6799 (phpMyAdmin) Affected: phpMyAdmin before 4.8.5. The issue arises when the AllowArbitraryServer setting is true and a rogue MySQL server is used. The vulnerability allows an attacker to read arbitrary files on the server that the web server user can access. It is related t...

CVE-2019-9741

CVE-2019-9741 affects Go’s net/http in Go 1.11.5, enabling CRLF injection when an attacker controls a URL parameter. The issue arises from constructing an HTTP request with http.NewRequest where a CRLF sequence can precede a header or Redis command, allowing potential header injection and related...

CVE-2020-12100

CVE-2020-12100 affects Dovecot before 2.3.11.3, where uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause resource exhaustion/denial of service via a crafted email with deeply nested MIME parts. The issue is addressed by upgrading to a fixed version (2.3.11.3 or n...

CVE-2020-25650

CVE-2020-25650 : A flaw in the spice-vdagentd daemon allows an unprivileged local guest user with access to the UNIX domain socket /run/spice-vdagentd/spice-vdagent-sock to trigger a memory denial of service for spice-vdagentd or other VM processes. Affected: spice-vdagent 0.20 and earlier. Impac...

CVE-2020-36223

CVE-2020-36223 affects OpenLDAP before 2.4.57 and causes a slapd crash due to a flaw in the Values Return Filter control handling, resulting in denial of service via a double free and an out-of-bounds read. The initial description and connected advisories identify the same root cause and impact, ...

CVE-2023-4361

CVE-2023-4361 concerns Google Chrome/Chromium Autofill on Android (pre-116.0.5845.96). The vulnerability is an inappropriate Autofill implementation that allows a remote attacker to bypass Autofill restrictions via a crafted HTML page, enabling potential unauthorized autofill actions. Affected so...

CVE-2023-5367

CVE-2023-5367 is an out-of-bounds write in xorg-x11-server, caused by an incorrect calculation of a heap buffer offset in XIChangeDeviceProperty (Xi/xiproperty.c) and RRChangeOutputProperty (randr/rrproperty.c). Affects the xorg-x11-server component across multiple Linux distributions; can lead t...

CVE-2011-1939

CVE-2011-1939 is a SQL injection vulnerability in Zend Framework when using non-ASCII-compatible encodings with PDO_MySql in PHP before 5.3.6. Affected are Zend Framework 1.10.x prior to 1.10.9 and 1.11.x prior to 1.11.6. The underlying issue is in the encoding handling with PDO_MySql that can al...

CVE-2015-5300

CVE-2015-5300 (NTP panic-threshold bypass) is detailed in connected advisory from F5 for BIG-IP products, describing a vulnerability in ntpd where the threshold for the -g option is not correctly enforced. An attacker controlling NTP traffic could cause ntpd to step the clock to an arbitrary valu...

CVE-2017-10243

CVE-2017-10243 affects Oracle Java SE, Java SE Embedded, and JRockit (JAX-WS subcomponent). Affected: Java SE 6u151, 7u141, 8u131; Java SE Embedded 8u131; JRockit R28.3.14. Exploitation: unauthenticated attacker with network access via multiple protocols can read a subset of data and cause a part...

CVE-2017-10378

CVE-2017-10378 affects the MySQL Server component (Server: Optimizer) with affected versions 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.11 and earlier. The vulnerability is exploitable remotely over multiple protocols by a low-privilege user and can cause the MySQL Server to hang or crash (D...

CVE-2017-13086

CVE-2017-13086 affects WPA/WPA2, specifically the TDLS handshake where the TDLS PeerKey (TPK) can be reinstalled. The root cause is key reinstallation during the TDLS handshake, enabling an attacker within radio range to replay, decrypt, or spoof frames. This vulnerability is documented across mu...

CVE-2018-1000121

CVE-2018-1000121 affects curl/libcurl: LDAP NULL pointer dereference in curl's LDAP handling (CVE-2018-1000121) could cause a denial of service. Affected range is curl 7.21.0 through 7.58.0 (up to 7.59.0 fixed in some advisories). Exploitation would crash a client using LDAP URLs or redirects to ...

CVE-2018-1053

PostgreSQL CVE-2018-1053 affects 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2. pg_upgrade creates a file in the current working directory containing the output of pg_dumpall -g, under the umask in effect when pg_upgrade was invoked, not un...

CVE-2018-15756

CVE-2018-15756 (Spring Framework) affects Spring Web MVC/WebFlux ranges handling: the ResourceHttpRequestHandler, or returning a Resource from an annotated controller, can be abused by a crafted Range header to trigger a denial-of-service. Affected versions include Spring Framework 5.1, 5.0.x bef...

CVE-2018-18310

CVE-2018-18310 is an invalid memory address dereference in libdwfl/dwfl_segment_report_module.c of elfutils (through v0.174) that can cause a denial of service (application crash) when processing a crafted ELF file. Connected advisories confirm the issue and indicate that upstream fixes exist in ...

CVE-2018-2602

CVE-2018-2602 affects Oracle Java SE and Java SE Embedded (I18n). Publicly available docs describe the issue as a vulnerability in the I18n component where loading resource bundles from an untrusted location may allow a locally authenticated attacker to execute code or bypass sandboxing, with CVS...

CVE-2018-2641

CVE-2018-2641 affects Oracle/OpenJDK Java SE/Java SE Embedded, specifically the AWT component. Public records in Debian/CentOS/AIX advisories show multiple OpenJDK/OpenJDK7/8 packages with this CVE, related to the Java sandbox and deserialization/LDAP/JMX weaknesses. The vulnerability is exploita...

CVE-2018-8032

CVE-2018-8032 affects Apache Axis 1.x (up to 1.4) with a cross-site scripting (XSS) vulnerability in the default servlet/services. This vulnerability is documented in IBM/PM security bulletins linked to Axis, confirming an XSS flaw (CWE-79) in Axis 1.x and indicating broader IBM product exposure....

CVE-2018-9251

CVE-2018-9251 affects libxml2

CVE-2019-11281

CVE-2019-11281 affects Pivotal RabbitMQ and RabbitMQ for PCF where two UI components (virtual host limits page and federation management UI) fail to sanitize user input. A remote authenticated administrator could craft a cross-site scripting attack to access virtual hosts and policy management in...

CVE-2019-13962

CVE-2019-13962 affects VLC

CVE-2019-15681

CVE-2019-15681 is a memory-leak vulnerability (CWE-655) in LibVNCServer’s VNC server component. The issue, introduced in LibVNC commit prior to d01e1bb4246..., could allow an attacker to read stack memory and cause information disclosure; when combined with another vulnerability this memory leaka...

CVE-2019-25035

CVE-2019-25035 affects Unbound prior to 1.9.5, with an out-of-bounds write in the function sldns_bget_token_par. The vendor disputes this as a vulnerability, stating a running Unbound installation cannot be remotely or locally exploited. Connected advisories indicate vendor-provided mitigations/u...

CVE-2020-27778

CVE-2020-27778 = flaw in Poppler's pdftohtml when converting certain PDFs to HTML that could be exploited remotely to crash the application (DoS). Connected docs confirm affected Poppler/pdftohtml use and DoS impact; no explicit fixed version is provided in the supplied materials. Remediation: ap...

CVE-2020-28035

CVE-2020-28035 affects WordPress up to version 5.5.2, where an XML‑RPC based flaw allows an attacker to escalate privileges. The issue is publicly documented in CVE-2020-28035 with a high launcher in the CVSS context (network, low attack complexity, no authentication). The connected records corro...

CVE-2020-3327

The CVE-2020-3327 issue affects ClamAV’s ARJ archive-parsing module and is caused by an out-of-bounds read in the ARJ parser that could trigger a denial of service. Advisories confirm a fix was released in ClamAV 0.102.3 (with subsequent updates addressing the issue in later releases, e.g., 0.102...

CVE-2021-39713

Technical details about CVE-2021-39713 are not provided in the provided documents; only high-level references (Android kernel and upstream kernel) are present. Monitor for updates.

CVE-2022-20698

The CVE-2022-20698 entry describes a Denial of Service in ClamAV caused by an OOXML parsing flaw. A crafted OOXML file can trigger an invalid pointer read in the OOXML parsing module, allowing an unauthenticated remote attacker to crash the ClamAV scanning process. Affected versions are ClamAV 0....

CVE-2022-2946

CVE-2022-2946 is a documented Use-After-Free vulnerability in vim/vim prior to 9.0.0246. The connected documents confirm Vim-related memory-safety issues across multiple advisories, but do not specify an exact fixed version for this CVE beyond general guidance to update Vim. The risk and impact a...

CVE-2023-4763

CVE-2023-4763 is a Use-After-Free in Chromium/Google Chrome’s networking code that could allow a remote attacker to cause heap corruption via a crafted HTML page. The initial entry lists Chrome versions prior to 116.0.5845.179 as affected. Connected documents confirm the same issue across Chromiu...

CVE-2011-2189

Summary (CVE-2011-2189): The Linux kernel (2.6.32 and earlier) has a flaw in net_namespace.c that mishandles a high rate of network-namespace creation/cleanup. This can allow remote attackers to cause a denial of service via memory consumption in a daemon that creates a separate namespace per con...

CVE-2015-8126

CVE-2015-8126 concerns libpng buffer overflows in png_set_PLTE and png_get_PLTE caused by improper bounds checks. Affected ranges include libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19. Exploitation via a small bit-...

CVE-2016-5772

CVE-2016-5772 : A double free in the PHP WDDX extension (php_wddx_process_data in wddx.c) allows remote attackers to crash the application or potentially execute arbitrary code via crafted XML in wddx_deserialize. Affected PHP versions: before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8. Re...

CVE-2017-5436

CVE-2017-5436 is an out-of-bounds write in the Graphite 2 library triggered by a malicious Graphite font, causing a potentially exploitable crash. The issue was fixed in Graphite 2 and in Mozilla products; affected Mozilla components include Thunderbird < 52.1, Firefox ESR < 45.9 and < 5...

CVE-2018-10861

CVE-2018-10861 describes an authorization issue in Ceph Monitor (ceph-mon) where any authenticated Ceph user with read access can delete, create Ceph storage pools, and corrupt snapshot images. Affected releases include Ceph branches master, mimic, luminous, and jewel. The impact is the ability t...

CVE-2018-18520

CVE-2018-18520 – elfutils (libelf): In elfutils up to v0.174, the function elf_end mishandles recursive ar files (eu-size/handle_ar in size.c) by closing the outer ar file before finishing inner entries, enabling an invalid memory access that can crash the application (denial of service). This is...

CVE-2018-2771

CVE-2018-2771 affects the MySQL Server component (subcomponent: Server: Locking) across Oracle MySQL releases. Affected series include 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. The vulnerability is described as difficult to exploit but can allow a high-privilege attacker wit...

CVE-2018-6616

OpenJPEG is affected by CVE-2018-6616 (and related) due to excessive iteration in opj_t1_encode_cblks (openjp2/t1.c), enabling DoS via crafted BMP files. Public details reference OpenJPEG 2.3.0/2.3.1 and similar advisories indicating this weakness in the t1.c path. Upstream fixes are reported in ...

CVE-2019-0201

CVE-2019-0201 affects Apache ZooKeeper up to versions 3.4.13 and 3.5.4-beta, where getACL() does not enforce permissions and returns the ACL Id in plaintext. When Digest Authentication is in use, the unsalted hash value contained in the Id field can be disclosed to unauthenticated or unprivileged...

CVE-2019-13739

The CVE-2019-13739 entry describes an insufficent policy enforcement flaw in Google Chrome’s Omnibox, enabling domain spoofing via IDN homographs. A remote attacker could exploit a crafted domain name to spoof a site, with impact limited to the UI/identity surface. Affected software is Chrome (Om...

CVE-2019-17402

Exiv2 0.27.2 has a vulnerability where Exiv2::getULong in types.cpp can crash when invoked from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp due to missing validation of total size against offset/size. The issue is triggered by CRW processing and results in a crash/denial of ...

CVE-2019-19911

Summary (CVE-2019-19911) : Pillow before 6.2.2 contains a DoS vulnerability in FpxImagePlugin.py where range() is applied to an unvalidated 32‑bit integer when the number of bands is large. On 32‑bit Windows Python this can trigger OverflowError or MemoryError due to the 2 GB limit; on 64‑bit Lin...

CVE-2019-7635

CVE-2019-7635 affects SDL (SDL1.2 up to 1.2.15 and SDL2 up to 2.0.9) with a heap-based buffer over-read in Blit1to4 (video/SDL_blit_1.c). Multiple connected sources (Arch/ALMA/CentOS/Debian advisories) describe this alongside related CVEs in audio/video paths (e.g., IMA_ADPCM and MS_ADPCM in audi...

CVE-2020-15676

CVE-2020-15676 affects Firefox (and related Mozilla products) where the onload handler for SVG elements could run after the DOM sanitizer removed content, enabling JavaScript execution when pasting attacker-controlled data into a contenteditable area. Affected versions: Firefox < 81, Thunderbi...

CVE-2020-15803

CVE-2020-15803 affects Zabbix frontend across multiple branches: stored XSS in the URL Widget present in versions before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x–4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1. Impact is stored XSS via the URL widget, enabling script execution in the frontend conte...

CVE-2020-35524

CVE-2020-35524 concerns the libtiff library. It is a heap-based buffer overflow in the TIFF2PDF handling path that can be triggered by a crafted TIFF file, potentially allowing arbitrary code execution and impact on confidentiality, integrity, and availability. Public advisories indicate a patche...

CVE-2020-36227

CVE-2020-36227 is an OpenLDAP flaw that causes an infinite loop in slapd when processing the cancel_extop Cancel operation, leading to denial of service. Public details in connected advisories confirm OpenLDAP before 2.4.57 is affected. Remediation documented in connected sources recommends upgra...

CVE-2021-30846

CVE-2021-30846 is a memory corruption vulnerability in WebKitGTK and WPE WebKit that could allow remote code execution when processing malicious web content. It is publicly fixed upstream in WebKitGTK/WPE WebKit around version 2.34.1 (Arch Linux ASA-202110-9/ASA-202110-10 indicate vulnerability i...

CVE-2021-33285

NTFS-3G vulnerability (CVE-2021-33285) affects versions before 2021.8.22. A crafted NTFS attribute input to ntfs_get_attribute_value can trigger an out-of-bounds heap access due to a missing consistency check after reading an MFT record; if bytes_in_use is not less than bytes_allocated, parsing c...