CVE-2023-4763

CVE-2023-4763 is a Use-After-Free in Chromium/Google Chrome’s networking code that could allow a remote attacker to cause heap corruption via a crafted HTML page. The initial entry lists Chrome versions prior to 116.0.5845.179 as affected. Connected documents confirm the same issue across Chromiu...

CVE-2023-6040

CVE-2023-6040 is an out-of-bounds access in the Linux kernel netfilter nf_tables code. The issue arises when creating a new nf_tables table with an invalid nf_tables family value (pf), leading to out-of-bounds access in nf_tables_newtable. The vulnerability is classified as LOCAL with high impact...

CVE-2010-5312

CVE-2010-5312 is a cross-site scripting (XSS) vulnerability in the jQuery UI Dialog widget (jquery.ui.dialog.js) where the title option for the dialog could be attacker-controlled to inject arbitrary script/HTML. It affects jQuery UI prior to 1.10.0. Public disclosures across Debian, Fedora, Red ...

CVE-2013-1861

CVE-2013-1861 affects MariaDB SQL branches (5.5.x up to 5.5.30, 5.3.x up to 5.3.13, 5.2.x up to 5.2.15, 5.1.x up to 5.1.68) and Oracle MySQL (5.1.69 and earlier, 5.5.31 and earlier, 5.6.11 and earlier). The vulnerability allows remote DoS (crash) via a crafted geometry feature with a large number...

CVE-2015-5300

CVE-2015-5300 (NTP panic-threshold bypass) is detailed in connected advisory from F5 for BIG-IP products, describing a vulnerability in ntpd where the threshold for the -g option is not correctly enforced. An attacker controlling NTP traffic could cause ntpd to step the clock to an arbitrary valu...

CVE-2015-8126

CVE-2015-8126 concerns libpng buffer overflows in png_set_PLTE and png_get_PLTE caused by improper bounds checks. Affected ranges include libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19. Exploitation via a small bit-...

CVE-2017-7656

CVE-2017-7656 affects Eclipse Jetty: HTTP/0.9 handling vulnerability in Jetty 9.2.x and older, 9.3.x (all configurations), and 9.4.x with RFC2616 compliance enabled. An HTTP/1 style request line declaring HTTP/0.9 could be treated as a 0.9 request, potentially enabling intermediar y proxies to mi...

CVE-2018-14682

CVE-2018-14682 affects libmspack (CHM decompression) with an off-by-one error in the TOLOWER() macro in mspack/chmd.c (pre-0.7alpha). Related advisories note additional CHM/CHM-related issues (14679, 14680) and KWAD header issues (14681). Affected: libmspack; potential impact described in advisor...

CVE-2018-14734

CVE-2018-14734 affects the Linux kernel before 4.17.11, where ucma_leave_multicast can access a data structure after cleanup in ucma_process_join, enabling a use-after-free that leads to DoS. The vulnerability is in drivers/infiniband/core/ucma.c. Exploitation status is not provided in the suppli...

CVE-2018-16540

Artifex Ghostscript is affected by CVE-2018-16540 (ghostscript before 9.24). The issue is a use-after-free in the PDF14 converter’s copydevice handling that could crash the interpreter or have other unspecified impact when processing crafted PostScript/PDF. Evidence in connected advisories confir...

CVE-2018-20662

CVE-2018-20662 relates to Poppler 0.72.0, where PDFDoc::setup can crash the app (SIGABRT) due to a wrong return value while processing extracted PDF subtypes, enabling DoS via a crafted xref structure. Connected advisories note an ongoing issue in Poppler 22.07.0: PDFDoc::savePageAs can cause a d...

CVE-2018-21247

CVE-2018-21247 : The vulnerability affects LibVNCServer prior to 0.9.13, with an information leak of uninitialized memory in the libvncclient/rfbproto.c ConnectToRFBRepeater function. The connected Nessus/Mirai-style advisories enumerate LibVNCServer in affected packages (e.g., libvncserver befor...

CVE-2018-2629

CVE-2018-2629 corresponds to a GSS context use-after-free vulnerability in the OpenJDK JGSS component (Oracle Java SE/JRockit/JRE). Affected products/versions include Oracle Java SE (client/server), Java SE Embedded, and JRockit with affected releases such as Java SE 6u171, 7u161, 8u152, 9.0.1; J...

CVE-2019-13725

CVE-2019-13725 describes a use-after-free vulnerability in Bluetooth handling in Google Chrome before 79.0.3945.79 that could allow a remote attacker to execute arbitrary code via a crafted HTML page. The CVE is part of a broader Chrome/Chromium set of issues (CVE-2019-13725–...-6380) disclosed a...

CVE-2019-5759

CVE-2019-5759 is a use-after-free vulnerability in Chromium-based browsers related to handling HTML pages containing select elements. The Debian advisory attributes it to Almog Benin and confirms a use-after-free in that area, contributing to potential sandbox escape. Public details across connec...

CVE-2020-14562

CVE-2020-14562 affects Oracle Java SE ImageIO in Java 11 (11.0.7) and 14 (14.0.1). An unauthenticated network-accessible attacker can exploit this to cause a partial denial of service in Java SE deployments that load untrusted code (e.g., client-side sandboxed apps). Several connected advisories ...

CVE-2020-26088

CVE-2020-26088 affects the Linux kernel up to version 5.8.2, where a missing CAP_NET_RAW check in NFC socket creation (net/nfc/rawsock.c) could let a local attacker create raw sockets and bypass security mechanisms. This is demonstrated in multiple Nessus advisories (Unity Linux/OpenSUSE/EulerOS ...

CVE-2021-3476

OpenEXR CVE-2021-3476 affects the B44 uncompression in OpenEXR prior to 3.0.0-beta. A crafted EXR file can trigger shift overflows, potentially causing denial of service and affecting availability. The provided documents consistently describe this as a vulnerability in the OpenEXR library (B44 un...

CVE-2022-20421

CVE-2022-20421 : In the Android kernel, the memory corruption arises from a use-after-free in binder_inc_ref_for_node() inside binder.c, enabling a possible local escalation of privilege with no extra execution privileges and without user interaction. The affected software is the Android kernel; ...

CVE-2023-1667

CVE-2023-1667 is a vulnerability in the libssh library causing a NULL pointer dereference during re-keying with algorithm guessing, which can allow an authenticated client to trigger a denial of service. Connected advisories from AlmaLinux, Fedora, Debian, Cloud Foundry (Ubuntu), and others confi...

CVE-2023-3417

CVE-2023-3417 affects Mozilla Thunderbird. The issue arises from the Text Direction Override Unicode Character in filenames, which could cause an email attachment to appear as a non-executable document when it was actually an executable. Affected: Thunderbird versions before 115.0.1 and before 10...

CVE-2023-41358

FRR CVE-2023-41358 affects the BGP daemon (bgpd) where bgp_packet.c processes NLRIs when the attribute length is zero, enabling potential DoS by malformed BGP data. Affected product: FRRouting FRR. Root cause: zero-length attribute handling in BGP NLRI processing. Impact: denial of service (crash...

CVE-2025-48432

CVE-2025-48432 affects Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, allowing remote attackers to craft URLs that may inject/forge log output when logs are viewed or processed externally. Impact is log injection/ fo...

CVE-2018-2797

CVE-2018-2797 (OpenJDK/OpenJDK for Java SE/Java SE Embedded/JRockit; subcomponent: JMX) concerns unbounded memory allocation during deserialization in the JMX-related path, enabling a network-exposed attacker to cause a partial denial of service. Public advisories and vendor pages (CentOS CESA-20...

CVE-2019-10894

Wireshark CVE-2019-10894 affects the GSS-API dissector in versions 2.4.0–2.4.13, 2.6.0–2.6.7, and 3.0.0. The root cause is a crash when an invalid/discrepant dissector is invoked. The mitigation implemented in epan/dissectors/packet-gssapi.c ensures that a valid dissector is called, preventing th...

CVE-2019-13736

CVE-2019-13736 is a vulnerability in Google Chrome/Chromium where an integer overflow in the PDFium library could enable a remote attacker to trigger heap corruption via a crafted PDF. Public advisories confirm the affected product (Chromium/Chrome), the vulnerable component (PDFium), and the roo...

CVE-2019-13748

CVE-2019-13748 affects Google Chrome (and Chromium) prior to 79.0.3945.79. It arises from insufficient policy enforcement in developer tools, allowing a local attacker to extract potentially sensitive information from process memory through a crafted HTML page. The issue is documented across mult...

CVE-2019-19925

CVE-2019-19925 concerns SQLite 3.30.1. The connected documents identify the vulnerable function as zipfileUpdate in ext/misc/zipfile.c, where a NULL pathname is mishandled during an update of a ZIP archive. The material does not provide additional technical details such as version ranges beyond S...

CVE-2020-10781

CVE-2020-10781 affects the Linux kernel ZRAM module: a local attacker who can read /sys/class/zram-control/hot_add can create ZRAM device nodes in /dev, and repeated reads can allocated memory and trigger OOM killer, potentially making the system inoperable. Connected advisories (e.g., ALAS2KERNE...

CVE-2020-16119

CVE-2020-16119 is a Linux kernel use-after-free vulnerability in DCCP where a socket reused as a listener after release (with an attached dccps_hc_tx_ccid) can be exploited locally. Affected: Linux kernel variants affected by upstream fixes; the issue allows local escalation to execute code or ca...

CVE-2020-36222

CVE-2020-36222 affects OpenLDAP and is caused by an assertion failure in slapd during saslAuthzTo validation, leading to a denial of service. The connected documents confirm OpenLDAP versions before 2.4.57 are vulnerable, with the issue fixed in 2.4.57 (OPENLDAP_REL_ENG_2_4_57). Impact is a denia...

CVE-2021-42097

GNU Mailman 2.1.x before 2.1.35 is affected by a CSRF/token bypass vulnerability (CVE-2021-42097) where a csrf_token value is not bound to a single user, enabling a CSRF attack against an admin that can lead to admin account takeover. The issue arises from CSRF protection weaknesses on the user o...

CVE-2022-0562

CVE-2022-0562 affects libtiff: a NULL source pointer passed to memcpy() in TIFFReadDirectory() (tif_dirread.c) on libtiff versions 4.0–4.3.0 can cause Denial of Service when processing a crafted TIFF file. Public sources in connected documents confirm the root cause is a NULL source pointer in TI...

CVE-2022-2127

Samba components using winbind for NTLM authentication are affected by an out-of-bounds read in winbindd_pam_auth_crap.c due to insufficient bounds checks on Lan Manager responses. This can cause a crash when processing cryptographic challenges of variable length. Affected are Samba distributions...

CVE-2024-26735

CVE-2024-26735 concerns the Linux kernel IPv6 SR subsystem. The issue is a use-after-free and a null pointer dereference in the ipv6/sr path, caused by registering the pernet operations structure for the subsystem after the generic netlink family, i.e., the pernet ops are not registered in the co...

CVE-2016-3994

The CVE-2016-3994 issue affects the GIF loader in imlib2 up to version 1.4.9, caused by an out-of-bounds read that can lead to a denial of service (application crash) or exposure of sensitive information. A fix is available in upstream imlib2 1.4.9 and related security updates (e.g., Ubuntu/Fedor...

CVE-2016-6306

CVE-2016-6306 affects OpenSSL and is documented in multiple connected advisories. The issue is an out-of-bounds/read vulnerability in the certificate parsing flow (OpenSSL <= 1.0.1u and 1.0.2

CVE-2017-3318

CVE-2017-3318 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Affected versions are 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The issue is described as difficult to exploit, requiring a high-privilege attacker with logon to the infr...

CVE-2018-0494

CVE-2018-0494 affects GNU Wget prior to 1.19.5. The vulnerability is due to cookie handling in the resp_new function in http.c that can be abused via a CRLF sequence in a continuation line, enabling cookie injection. Exploitation details are not provided in the sources; some advisories state the ...

CVE-2018-1152

CVE-2018-1152 affects libjpeg-turbo, where processing a crafted BMP image can trigger a divide-by-zero in the BMP path, causing a denial of service. The vulnerability is documented across multiple connected advisories and vendor pages. Remediation details from connected docs include: IBM DSA Preb...

CVE-2019-25036

Unbound prior to 1.9.5 contains an assertion failure in synth_cname that can lead to denial of service. The vendor notes this may not be a vulnerability and that a running Unbound install cannot be remotely or locally exploited; nevertheless, multiple advisories report CVE-2019-25036 with DoS pot...

CVE-2019-25038

Unbound prior to 1.9.5 contains an integer overflow in a size calculation in dnscrypt/dnscrypt.c (CVE-2019-25038). The issue is described across multiple sources as potentially vulnerable code, but vendor disputes that it is exploitable in running installations. Affected versions are those before...

CVE-2020-11077

CVE-2020-11077 affects the Puma RubyGem HTTP server. It describes an HTTP request/response smuggling scenario where a proxy with persistent connections and HTTP pipelining can cause the proxy to deliver a second response to the wrong client, due to how Puma parses the first request and its body. ...

CVE-2020-11097

CVE-2020-11097: In FreeRDP before 2.1.2, there is an out-of-bounds read that accesses memory outside the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. The root cause is an OOB read in ntlm_av_pair_get, with the issue fixed in FreeRDP 2.1.2. Public advisories and Debian ARNs co...

CVE-2020-1772

CVE-2020-1772 affects OTRS/Open Source Ticket Request System. An attacker can craft Lost Password requests with wildcards in the Token value to retrieve valid tokens generated for users who requested password resets, impacting versions: OTRS Community Edition 5.0.41 and earlier, 6.0.26 and earlie...

CVE-2020-8161

Summary of risk : CVE-2020-8161 is a directory-traversal vulnerability in Rack (

CVE-2021-21228

CVE-2021-21228 relates to Chromium/Google Chrome’s extensions policy enforcement. The vulnerability is a policy enforcement bypass in the extensions component of the Chromium-based browser, prior to version 90.0.4430.93, where a user convinced to install a crafted malicious extension could bypass...

CVE-2021-21233

CVE-2021-21233 has concrete details in connected documents: a heap buffer overflow in ANGLE, part of the Chromium/Google Chrome browser stack, before version 90.0.4430.93 on Windows. The vulnerability is described as an arbitrary code execution/heap corruption risk exploitable via a crafted HTML ...

CVE-2021-3974

CVE-2021-3974 is a Use-After-Free vulnerability in Vim. Connected advisories indicate Vim versions prior to 8.2.4081-1 are affected; upgrading to 8.2.4081-1 or newer resolves the issue (per Mariner, ALAS2-2022-1743, ALAS2022-1557, and Cloud Foundry USN-5247-1). Exploitation details are not provid...

CVE-2022-23042

CVE-2022-23042 is part of a set describing race-condition vulnerabilities in Linux PV (paravirtualization) grant-table frontends. The Astra Linux advisories summarize that multiple frontends—blkfront, netfront, scsifront, and the gntalloc driver—test whether a grant reference is still in use, and...