CVE-2021-4010

CVE-2021-4010 affects xorg-x11-server (X.Org X server) with an out-of-bounds access in the SProcScreenSaverSuspend function in versions before 21.1.2 and before 1.20.14. This vulnerability could impact confidentiality, integrity, and availability. The issue is mitigated by upgrading to the fixed ...

CVE-2021-4166

CVE-2021-4166 is a Vim vulnerability categorized as an out-of-bounds read affecting Vim buffers. Public references in the connected documents confirm the issue, with remediation guidance tied to Vim updates. The Cloud Foundry advisory (USN-6026-1) and related AWS/Linux bulletins indicate Vim fixe...

CVE-2023-3417

CVE-2023-3417 affects Mozilla Thunderbird. The issue arises from the Text Direction Override Unicode Character in filenames, which could cause an email attachment to appear as a non-executable document when it was actually an executable. Affected: Thunderbird versions before 115.0.1 and before 10...

CVE-2023-5859

CVE-2023-5859 affects Chromium-based browsers (notably Google Chrome) with a security UI flaw in Picture-in-Picture that allowed a remote attacker to spoof the domain via a crafted local HTML page. The issue’s impact is domain spoofing (low severity per NVD, CVSS 3.1: 4.3) and is fixed by updatin...

CVE-2023-6932

CVE-2023-6932 is a Linux kernel vulnerability affecting the ipv4: igmp component. The issue is described as a use-after-free condition with a race that can cause a timer to be registered on an RCU read-locked object that is freed by another thread, enabling local privilege escalation. Connected d...

CVE-2017-3308

Summary of findings: CVE-2017-3308 affects Oracle MySQL Server (Server: DML) with affected branches 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability is exploitable over network with low privileges, and can result in a hang or frequent crash (complete DoS) of MySQL...

CVE-2018-11362

CVE-2018-11362 affects Wireshark LDSS dissector. The issue is an out-of-bounds read when encountering a missing '\0' character, affecting Wireshark 2.6.0, 2.4.0–2.4.6, and 2.2.0–2.2.14. The root cause is in epan/dissectors/packet-ldss.c, and the fix was implemented by avoiding the buffer over-rea...

CVE-2018-14470

The CVE-2018-14470 issue affects tcpdump prior to 4.9.3, where the Babel parser in print-babel.c:babel_print_v2() triggers a buffer over-read. Public advisories and vendor bulletins (AlmaLinux, Debian, Cloud Foundry USN, IBM AIX) confirm this vulnerability as part of a collection of tcpdump issue...

CVE-2018-14599

CVE-2018-14599 affects libX11 up to version 1.6.5, with an off-by-one error in XListExtensions (ListExt.c) caused by crafted server responses that can lead to a crash or memory corruption and Denial of Service. Connected sources detail the vulnerability as part of a broader set of libX11 issues i...

CVE-2018-20662

CVE-2018-20662 relates to Poppler 0.72.0, where PDFDoc::setup can crash the app (SIGABRT) due to a wrong return value while processing extracted PDF subtypes, enabling DoS via a crafted xref structure. Connected advisories note an ongoing issue in Poppler 22.07.0: PDFDoc::savePageAs can cause a d...

CVE-2018-2629

CVE-2018-2629 corresponds to a GSS context use-after-free vulnerability in the OpenJDK JGSS component (Oracle Java SE/JRockit/JRE). Affected products/versions include Oracle Java SE (client/server), Java SE Embedded, and JRockit with affected releases such as Java SE 6u171, 7u161, 8u152, 9.0.1; J...

CVE-2019-12520

CVE-2019-12520 affects Squid (versions up to 4.7 and 5.x per the sources). The vulnerability arises when Squid handles a request by computing an MD5 hash of the absolute URL to check the cache; if the URL includes a decoded UserInfo (username:password), that info is prepended to the domain. An at...

CVE-2019-3835

CVE-2019-3835 affects Ghostscript prior to 9.27. A specially crafted PostScript file could cause a sandbox escape by abusing the internal superexec operator, allowing access to the filesystem outside -dSAFER. The issue was part of sandbox bypasses tied to various operators and has been fixed upst...

CVE-2020-36228

CVE-2020-36228 is an integer underflow in OpenLDAP’s Certificate List Exact Assertion processing that can crash slapd, causing denial of service. It affects OpenLDAP releases before 2.4.57. Public advisories confirm the issue and reference related CVEs in the same 2.4.x stream. The vulnerability ...

CVE-2020-5267

CVE-2020-5267 is an XSS vulnerability in ActionView’s JavaScript literal escape helpers. It affects Rails ActionView before 6.0.2.2 and 5.2.4.2, where views using j or escape_javascript may be vulnerable. The issue is fixed in version 6.0.2.2 and 5.2.4.2. Public connected documents corroborate th...

CVE-2020-6420

CVE-2020-6420 affects Google Chrome (media component). The issue is insufficient policy enforcement that allows a remote attacker to bypass the same-origin policy via a crafted HTML page, enabling information disclosure and potential further actions. Affected versions are Chrome before 80.0.3987....

CVE-2022-1652

CVE-2022-1652 is a Linux kernel local-use-after-free fault in bad_flp_intr that could allow a local attacker to execute arbitrary code or cause a denial of service. Multiple connected advisories confirm the issue resides in the Linux kernel and that mitigation is to apply patched kernel updates (...

CVE-2022-26966

CVE-2022-26966 affects the Linux kernel up to 5.16.12, via the drivers/net/usb/sr9700.c component. A local attacker can attach a specially crafted USB device and cause information disclosure by leaking heap memory from the device, as described in multiple connected documents (upstream kernel note...

CVE-2022-3625

CVE-2022-3625 affects the Linux kernel, specifically the devlink subsystem. The issue is a use-after-free in the functions devlink_param_set and devlink_param_get in net/core/devlink.c, enabling a remote authenticated attacker on the local network to cause a denial of service. A patch is availabl...

CVE-2023-3268

CVE-2023-3268 : An out-of-bounds memory access in Linux kernel relayfs (relay_file_read_start_pos in kernel/relay.c) could allow a local attacker to crash the system or leak kernel information. Connected advisories confirm this vulnerability and its remediation in multiple kernels: CloudLinux not...

CVE-2023-5728

CVE-2023-5728 : In the Firefox/Thunderbird stack, during garbage collection extra operations on an object that should not be touched could lead to a potentially exploitable crash. Affected: Firefox < 119, Firefox ESR < 115.4, and Thunderbird

CVE-2023-6040

CVE-2023-6040 is an out-of-bounds access in the Linux kernel netfilter nf_tables code. The issue arises when creating a new nf_tables table with an invalid nf_tables family value (pf), leading to out-of-bounds access in nf_tables_newtable. The vulnerability is classified as LOCAL with high impact...

CVE-2017-10348

CVE-2017-10348 affects OpenJDK/OpenJDK-derived Java SE/Embedded libraries. The vulnerability, exploitable over the network by unauthenticated attackers, can lead to a partial denial of service on Java SE and Java SE Embedded. Public details in the provided materials indicate affected versions var...

CVE-2017-7518

CVE-2017-7518: In the Linux kernel before 4.12, the KVM module mishandles the trap-flag TF in EFLAGS during syscall emulation, causing a debug exception (#DB) on the guest stack. This could allow a user/process inside a guest to escalate privileges within the guest (Linux guests only; host kernel...

CVE-2018-14734

CVE-2018-14734 affects the Linux kernel before 4.17.11, where ucma_leave_multicast can access a data structure after cleanup in ucma_process_join, enabling a use-after-free that leads to DoS. The vulnerability is in drivers/infiniband/core/ucma.c. Exploitation status is not provided in the suppli...

CVE-2018-19627

Wireshark CVE-2018-19627 affects the IxVeriWave file parser in Wireshark versions 2.6.0–2.6.4 and 2.4.0–2.4.10. The root cause is an out-of-bounds read in the IxVeriWave parser (wiretap/vwr.c) due to a boundary handling issue, which could be triggered by crafted packets or trace files. Reported i...

CVE-2018-21247

CVE-2018-21247 : The vulnerability affects LibVNCServer prior to 0.9.13, with an information leak of uninitialized memory in the libvncclient/rfbproto.c ConnectToRFBRepeater function. The connected Nessus/Mirai-style advisories enumerate LibVNCServer in affected packages (e.g., libvncserver befor...

CVE-2018-8779

CVE-2018-8779 is a Ruby vulnerability in which UNIXServer.open and UNIXSocket.open did not check for NULL (NUL) bytes in the path, potentially creating an unintended socket. Public details in the provided documents show affected series include Ruby 2.2.x prior to 2.2.10, 2.3.x prior to 2.3.7, 2.4...

CVE-2019-13725

CVE-2019-13725 describes a use-after-free vulnerability in Bluetooth handling in Google Chrome before 79.0.3945.79 that could allow a remote attacker to execute arbitrary code via a crafted HTML page. The CVE is part of a broader Chrome/Chromium set of issues (CVE-2019-13725–...-6380) disclosed a...

CVE-2019-25039

CVE-2019-25039 affects Unbound before 1.9.5, with an integer overflow in size calculation in respip/respip.c. The vendor disputes this as a vulnerability, and the description notes that a running Unbound installation cannot be remotely or locally exploited. CVSS scores in the entry show: CVSS2 ba...

CVE-2020-14562

CVE-2020-14562 affects Oracle Java SE ImageIO in Java 11 (11.0.7) and 14 (14.0.1). An unauthenticated network-accessible attacker can exploit this to cause a partial denial of service in Java SE deployments that load untrusted code (e.g., client-side sandboxed apps). Several connected advisories ...

CVE-2020-4030

FreeRDP contains an out-of-bounds read in TrioParse (CVE-2020-4030) with logging potentially bypassing string length checks due to an integer overflow. The issue is fixed in version 2.1.2. Several advisories (Arch, Debian LTS, AlmaLinux, Fedora) document this and related CVEs as part of a broader...

CVE-2021-3476

OpenEXR CVE-2021-3476 affects the B44 uncompression in OpenEXR prior to 3.0.0-beta. A crafted EXR file can trigger shift overflows, potentially causing denial of service and affecting availability. The provided documents consistently describe this as a vulnerability in the OpenEXR library (B44 un...

CVE-2022-28347

CVE-2022-28347 is a Django SQL injection vulnerability affecting QuerySet.explain() when a crafted dictionary with dictionary expansion is passed as the options argument and the injection payload is placed in an option name. Affected versions: Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 ...

CVE-2024-26852

CVE-2024-26852 (Linux kernel) : A use-after-free in IPv6 route multipath logic was fixed. The root cause was a read-after-free in ip6_route_mpath_notify invoked during multipath route updates, leading to potential UAF on fib6_info objects. The patch defers fib6_info_release() to the cleanup phase...

CVE-2014-4049

CVE-2014-4049: Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c used by PHP 5.6.0beta4 and earlier. This vulnerability allows remote servers to crash the PHP process and possibly execute arbitrary code via a crafted DNS TXT record (dns_get_record). The connected docume...

CVE-2016-6306

CVE-2016-6306 affects OpenSSL and is documented in multiple connected advisories. The issue is an out-of-bounds/read vulnerability in the certificate parsing flow (OpenSSL <= 1.0.1u and 1.0.2

CVE-2017-10090

CVE-2017-10090 affects Oracle/OpenJDK libraries (Java SE and Java SE Embedded). The connected documents confirm affected components and versions (Java SE: 7u141, 8u131; Java SE Embedded: 8u131) and describe the root cause as gaps in the Libraries/RMI-related areas that can bypass sandbox restrict...

CVE-2017-3318

CVE-2017-3318 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Affected versions are 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The issue is described as difficult to exploit, requiring a high-privilege attacker with logon to the infr...

CVE-2018-14682

CVE-2018-14682 affects libmspack (CHM decompression) with an off-by-one error in the TOLOWER() macro in mspack/chmd.c (pre-0.7alpha). Related advisories note additional CHM/CHM-related issues (14679, 14680) and KWAD header issues (14681). Affected: libmspack; potential impact described in advisor...

CVE-2019-13732

CVE-2019-13732 describes a use-after-free in the WebAudio implementation of Chromium/Google Chrome, exploitable via a crafted HTML page to potentially trigger heap corruption. The CVE is referenced across multiple advisories, indicating impact on Chromium/Chrome before version 79.0.3945.79, with ...

CVE-2019-13740

CVE-2019-13740 affects Google Chrome prior to 79.0.3945.79, where an incorrect security UI in sharing could enable domain spoofing via a crafted HTML page. The issue is fixed in Chrome updates released after 79.0.3945.79; confirmed patches appear in Debian’s chromium security advisory (DSA-4606-1...

CVE-2019-3500

CVE-2019-3500 affects the download utility aria2 : when using --log, credentials (HTTP Basic username/password) can be written to a local log file, potentially exposing them to local users. The issue is tied to how aria2 handles logging rather than network flow, with vendor advisories and patch l...

CVE-2020-11077

CVE-2020-11077 affects the Puma RubyGem HTTP server. It describes an HTTP request/response smuggling scenario where a proxy with persistent connections and HTTP pipelining can cause the proxy to deliver a second response to the wrong client, due to how Puma parses the first request and its body. ...

CVE-2020-26088

CVE-2020-26088 affects the Linux kernel up to version 5.8.2, where a missing CAP_NET_RAW check in NFC socket creation (net/nfc/rawsock.c) could let a local attacker create raw sockets and bypass security mechanisms. This is demonstrated in multiple Nessus advisories (Unity Linux/OpenSUSE/EulerOS ...

CVE-2020-28941

CVE-2020-28941 affects the Linux kernel’s Speakup screen reader (drivers/accessibility/spk_ttyio.c) up to version 5.9.9. Local attackers could trigger a denial of service by an invalid free when the line discipline is used more than once, leading to a system crash. The issue is confirmed in multi...

CVE-2020-35523

CVE-2020-35523 affects libtiff, with the flaw located in tif_getimage.c creating an integer overflow that can allow an attacker to execute arbitrary code when a crafted TIFF file is opened. Public advisories and security trackers consistently reference this as a code-execution risk in affected Li...

CVE-2020-36222

CVE-2020-36222 affects OpenLDAP and is caused by an assertion failure in slapd during saslAuthzTo validation, leading to a denial of service. The connected documents confirm OpenLDAP versions before 2.4.57 are vulnerable, with the issue fixed in 2.4.57 (OPENLDAP_REL_ENG_2_4_57). Impact is a denia...

CVE-2021-21228

CVE-2021-21228 relates to Chromium/Google Chrome’s extensions policy enforcement. The vulnerability is a policy enforcement bypass in the extensions component of the Chromium-based browser, prior to version 90.0.4430.93, where a user convinced to install a crafted malicious extension could bypass...

CVE-2021-21233

CVE-2021-21233 has concrete details in connected documents: a heap buffer overflow in ANGLE, part of the Chromium/Google Chrome browser stack, before version 90.0.4430.93 on Windows. The vulnerability is described as an arbitrary code execution/heap corruption risk exploitable via a crafted HTML ...