10003 matches found
CVE-2020-10938
CVE-2020-10938 affects GraphicsMagick prior to 1.3.35, caused by an integer overflow that leads to a heap-based buffer overflow in the HuffmanDecodeImage path (magick/compress.c). The issue can be triggered by processing crafted images and has been fixed in 1.3.35 and later per multiple advisorie...
CVE-2020-25275
CVE-2020-25275 affects Dovecot prior to 2.3.13. The issue is improper input validation in the lda, lmtp, and imap paths, which can cause an application crash when processing a crafted email containing a very large number (ten thousand) of MIME parts. Connected sources indicate remediation via upd...
CVE-2020-3341
CVE-2020-3341 affects ClamAV (versions 0.101–0.102.2) where the PDF archive parsing module is vulnerable to a stack buffer overflow read. An unauthenticated, remote attacker could exploit a crafted PDF file to crash the ClamAV scanning process, causing a DoS. Public advisories in connected docs c...
CVE-2021-31215
CVE-2021-31215 affects SchedMD Slurm. Affected: Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7. Root cause: environment mishandling when using PrologSlurmctld or EpilogSlurmctld scripts, enabling remote code execution as SlurmUser. Implication: remote code execution could be perf...
CVE-2021-3927
CVE-2021-3927 is a heap-based buffer overflow vulnerability in vim reported across multiple advisories (Debian, Amazon ALAS/ALAS2, Astra Linux). The issue can lead to a crash or, in some bulletins, potential code execution when opening a crafted file. Public details list vim as affected and refer...
CVE-2021-43528
CVE-2021-43528 : Thunderbird before 91.4.0 enables JavaScript in the composition area. The JS context is restricted to that area with no chrome privileges but could serve as a stepping stone to further attacks involving other vulnerabilities. Affected: Thunderbird
CVE-2022-0572
CVE-2022-0572 affects vim/vim prior to 8.2. Cause: a heap-based buffer overflow in vim’s ex_retab() (indent.c) triggered by repeated use of :retab. Impact per sources: vulnerability could crash Vim and, in some reporting, enable arbitrary code execution. Affected product: vim/vim (GitHub vim/vim)...
CVE-2022-1195
CVE-2022-1195 describes a use-after-free in the Linux kernel driver for hamradio (drivers/net/hamradio), specifically involving the mkiss and sixpack paths. The flaw allows a local attacker with user privileges to trigger a denial of service when the mkiss/sixpack device is detached and resources...
CVE-2022-22818
CVE-2022-22818 affects Django’s {% debug %} template tag. The issue: the tag does not properly encode the current context, enabling potential XSS. Affected versions: Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Remediation: upgrade to 2.2.27, 3.2.12, or 4.0.2 or newer (as pe...
CVE-2022-27381
Summary of CVE-2022-27381 (MariaDB) : The vulnerability affects MariaDB Server, specifically the Field::set_default component, in v10.6 and earlier. It can be triggered by specially crafted SQL statements and results in a Denial of Service (DoS). The connected AstraLinux entry and related advisor...
CVE-2022-3649
CVE-2022-3649 affects the Linux kernel (nilfs_new_inode in fs/nilfs2/inode.c, component BPF). The issue is a use-after-free in nilfs_new_inode that can be triggered remotely, per the initial document and connected advisories. A patch exists to fix this issue (references include a kernel commit ID...
CVE-2022-3890
CVE-2022-3890 refers to a heap buffer overflow in Crashpad used by Google Chrome on Android before 107.0.5304.106. The vulnerability could be exploited by a remote attacker who already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Affected software is...
CVE-2022-42329
CVE-2022-42329 concerns the Linux xen-netback driver. The description shows a potential deadlock when freeing the SKB of a dropped packet under the XSA-392 handling (also tied to CVE-2022-42328) and also when dropping packets if netpoll is active on the connected interface, risking a deadlock in ...
CVE-2023-23969
CVE-2023-23969 affects Django: parsing of Accept-Language headers is cached, enabling potential DoS via memory exhaustion if a very large header is received. Affected versions are Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6. Mitigation is to upgrade to fixed releases (3.2.17+...
CVE-2023-5856
CVE-2023-5856 affects Google Chrome/Chromium: Use-after-free in the Side Panel prior to 119.0.6045.105 can be triggered by a crafted HTML page when a user performs specific UI gestures, potentially causing heap corruption and remote code execution. Affected software: Google Chrome (Chromium-deriv...
CVE-2015-2305
CVE-2015-2305 describes an integer/heap overflow in the Henry Spencer BSD regex library (rxspencer), specifically in regcomp on 32-bit platforms. The issue can be triggered by a very large regular expression, potentially allowing context-dependent attackers to execute arbitrary code via a heap-ba...
CVE-2017-10081
CVE-2017-10081 is a Sandbox/Access-Restriction bypass in the Hotspot component of OpenJDK. Affected Java runtimes include Java SE 6u151, 7u141, and 8u131 (Java SE Embedded 8u131). Several connected advisories note this as part of a broader OpenJDK set of issues (RMI, JAXP, ImageIO, Libraries, AWT...
CVE-2017-9076
CVE-2017-9076 is a Linux kernel issue reported in the CentOS/Red Hat advisory set (CESA-2018:1854) tied to the IPv6 DCCP implementation. The vulnerability arises from mishandling of inheritance in the IPv6 DCCP code, allowing a local attacker to cause a denial of service or possibly other unspeci...
CVE-2018-14718
CVE-2018-14718 affects FasterXML jackson-databind 2.x (pre-2.9.7). Description: remote code execution via deserialization due to failure to block the slf4j-ext class from polymorphic deserialization. IBM watsonx.data is listed as affected (versions 1.0.0–2.0.0 in some bulletins; later bulletins s...
CVE-2018-18690
CVE-2018-18690 pertains to the Linux kernel before 4.17 where a local attacker able to set attributes on an xfs filesystem could render the filesystem non-operational until remount by triggering an unchecked error during an xfs attribute change. The root cause is mishandling of ATTR_REPLACE in xf...
CVE-2018-20340
CVE-2018-20340 affects Yubico libu2f-host 1.1.6, with unchecked buffers in devs.c that could allow a crafted USB token to overflow a buffer and execute code on a host where the library is in use (not with a genuine YubiKey). Public advisories also reference CVE-2019-9578, related to uninitialized...
CVE-2019-16710
CVE-2019-16710: ImageMagick 7.0.8-35 has a memory leak in MagickCore/memory.c triggered by AcquireMagickMemory while processing images via coders/dot.c. Public advisories (Ubuntu USN, Debian/SELUX, etc.) reference this CVE; exploitation status is not stated in the provided documents. The material...
CVE-2019-17545
CVE-2019-17545 affects GDAL up to 3.0.1, with a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. Public advisories (Debian DLA-2877/3129, Mageia, Fedora) confirm the issue and list CVE-2019-17545 as fixable by upgrading GDAL to newer builds; Deb...
CVE-2020-11086
CVE-2020-11086 affects FreeRDP before version 2.1.0, where ntlm_read_ntlm_v2_client_challenge can read beyond an internal structure (out-of-bounds read). The issue is fixed in FreeRDP 2.1.0 and later. Connected advisories (e.g., MiracleLinux/Miracle Linux AXSA entries, Debian/DLA updates, Rocky/R...
CVE-2020-14573
CVE-2020-14573 affects Oracle Java SE (Hotspot) with affected Java SE versions 11.0.7 and 14.0.1. The vulnerability can be exploited remotely by an unauthenticated attacker over multiple protocols, potentially allowing unauthorized updates, insertions, or deletions of Java data. Exploitation deta...
CVE-2020-36225
CVE-2020-36225 : OpenLDAP before 2.4.57 contains a flaw in the saslAuthzTo processing that allows a double free and slapd crash, causing denial of service. Multiple connected advisories confirm OpenLDAP vulnerability and reference a fix in later releases (2.4.58 in some updates). Affected product...
CVE-2021-21225
CVE-2021-21225 is an out-of-bounds memory access in V8 within Google Chrome prior to 90.0.4430.85. The connected advisories confirm this vulnerability affects Chrome/V8 and describe the impact as potentially enabling heap corruption via a crafted HTML page, allowing remote code execution in the s...
CVE-2021-30890
CVE-2021-30890 is a WebKit/WebKitGTK/WebKitGTK-derived vulnerability described as a logic/state issue where processing maliciously crafted web content may lead to universal cross-site scripting. Public mentions appear in multiple connected advisories: Debian DSA-5030-1 (webkit2gtk) and DSA-5031-1...
CVE-2021-3500
CVE-2021-3500 affects djvulibre up to version 3.5.28. A stack overflow in function DJVU::DjVuDocument::get_djvu_file() triggered by a crafted DjVu file may crash the application and, as described in connected advisories, could lead to further consequences including possible arbitrary code executi...
CVE-2021-38165
CVE-2021-38165 affects Lynx up to version 2.8.9. HTParse mishandles the URI userinfo subcomponent, risking disclosure of cleartext credentials that may appear in SNI data or HTTP headers. A remote attacker could retrieve credentials during TLS/HTTPS connections. Public advisories in multiple dist...
CVE-2021-3941
OpenEXR vulnerability CVE-2021-3941 involves a divide-by-zero in ImfChromaticities.cpp RGBtoXYZ() when computing Z and related values, risking availability of programs linked with OpenEXR. Connected advisories (Astra Linux, Debian/Ubuntu disclosures, and global advisories) confirm OpenEXR as affe...
CVE-2021-44731
CVE-2021-44731 describes a race condition in the snapd ecosystem: the snap-confine binary could be induced to execute arbitrary code when preparing a private mount namespace for a snap, enabling a local attacker to escalate to root. Public details show a local-privilege-escalation path via bind-m...
CVE-2022-0561
This CVE (CVE-2022-0561) affects libtiff, with the NULL source pointer passed to memcpy() in TIFFFetchStripThing() within tif_dirread.c observed in libtiff 3.9.0 through 4.3.0, enabling denial of service via crafted TIFF files. The root cause is the NULL source pointer passed to memcpy(), leading...
CVE-2022-27379
CVE-2022-27379 affects MariaDB Server, with the vulnerable component in Arg_comparator::compare_real_fixed. Affected: MariaDB Server v10.6.2 and below. Description and connected advisories consistently indicate this flaw can cause a Denial of Service (DoS) via specially crafted SQL statements, im...
CVE-2022-2850
Summary: CVE-2022-2850 affects 389-ds-base where the Content Synchronization plugin, when enabled, allows an authenticated user to trigger a NULL pointer dereference and cause a denial of service. This entry is tied to an incomplete fix for CVE-2021-3514. What’s affected (from connected docs): 38...
CVE-2022-33743
CVE-2022-33743 maps to a Xen netfront memory-handling issue in the Linux kernel where SKBs with retained references can be freed, caused by a label move while adding XDP support. This can lead to use-after-free in the network backend and a potential Denial of Service when interacting with the Xen...
CVE-2024-37371
CVE-2024-37371 details (krb5) : MIT Kerberos 5 (krb5) before 1.21.3 is affected. An attacker can trigger invalid memory reads during GSS token handling by sending tokens with invalid length fields, as described in multiple vendor advisories. Affected versions are krb5 up to but not including 1.21...
CVE-2009-2408
CVE-2009-2408 affects Mozilla NSS up to 3.12.2/Firefox up to 3.0.12/ Thunderbird up to 2.0.0.22 and SeaMonkey up to 1.1.17. The issue is improper handling of a '\0' character in the domain name present in the certificate subject’s Common Name (CN) field of an X.509 certificate. This enables a man...
CVE-2015-5174
Summary: CVE-2015-5174 is a directory traversal vulnerability in Apache Tomcat’s RequestUtil.java that affects Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27. A remote authenticated user could bypass SecurityManager restrictions and list a parent directory by using a /.. seque...
CVE-2018-10913
CVE-2018-10913 affects GlusterFS server. The vulnerability allows an attacker to issue a xattr request via GlusterFS FUSE to determine the existence of files, causing an information disclosure. The connected Nessus/EulerOS Debian advisories list CVE-2018-10913 among multiple GlusterFS issues and ...
CVE-2018-18521
The CVE-2018-18521 issue is a confirmed vulnerability in elfutils: a Divide-by-Zero in arlib_add_symbols() (arlib.c) when processing crafted ELF files, caused by a mishandled zero sh_entsize. This can lead to denial of service (application crash). Affected upstream releases prior to fix include e...
CVE-2018-2637
CVE-2018-2637 affects the OpenJDK/OpenJDK JMX component (SingleEntryRegistry deserialization filter). A remote, unauthenticated attacker could exploit improper deserialization filter setup to bypass deserialization restrictions. Multiple advisories (ALAS-2018-949; CentOS/DSA entries; Debian secur...
CVE-2019-13727
CVE-2019-13727 is a policy-enforcement error in Chrome’s WebSockets implementation that could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability affects Google Chrome versions prior to 79.0.3945.79, with the issue explicitly tied to insufficient po...
CVE-2019-16711
CVE-2019-16711 affects ImageMagick; a memory leak in Huffman2DEncodeImage (coders/ps2.c) is reported for ImageMagick 7.0.8-40, with related entries mentioning Huffman2DEncodeImage in coders/ps3.c (7.0.8-43). The provided connected documents do not include exploitation details or explicit fixes fo...
CVE-2019-7524
In CVE-2019-7524, Dovecot before 2.2.36.3 and before 2.3.5.1 for the 2.3.x line, suffers a local buffer overflow in the indexer-worker due to missing checks in fts and pop3-uidl. This can enable local privilege escalation to root. Affected products include Dovecot IMAP/POP3 servers on various Lin...
CVE-2019-7576
SDL (libsdl1.2/SDL2) up to affected 1.2.x/2.x versions has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop). Exploitation can enable arbitrary code execution via crafted media files. Upgrades to SDL2 2.0.10+ and SDL 1.2.15-13+/libsdl1.2 1.2.15-13+ are ...
CVE-2020-1770
CVE-2020-1770 is an information-disclosure issue in the OTRS/Open Source Ticket Request System where generated support bundle files could contain sensitive data. Public advisories list affected products as OTRS Community Edition 5.0.41 and earlier, 6.0.26 and earlier, and OTRS 7.0.15 and earlier,...
CVE-2020-27824
OpenJPEG2 CVE-2020-27824 affects the encoder code path opj_dwt_calc_explicit_stepsizes(), where crafted input to decomposition levels can trigger a buffer overflow. The highest stated impact is to availability. Public advisories show remediations via updated openjpeg2 packages (e.g., Debian openj...