CVE-2020-14397

CVE-2020-14397 affects LibVNCServer prior to 0.9.13. The issue is a NULL pointer dereference in libvncserver/rfbregion.c, which can cause a crash and contribute to a denial of service. Public references in multiple advisories (e.g., MiracleLinux, Alibaba Cloud Linux, Red Hat and Rocky Linux conte...

CVE-2020-15103

CVE-2020-15103 affects FreeRDP with versions

CVE-2020-25651

CVE-2020-25651 affects spice-vdagent (SPICE file transfer protocol) where file data can leak to a client connection or cause denial of service for spice-vdagent versions 0.20 and earlier. Exploitation could occur via the host-to-VM transfer path; impact includes confidentiality loss and availabil...

CVE-2020-28972

SaltStack Salt CVE-2020-28972 : A vulnerability in Salt before 3002.5 allows authentication to VMware vcenter, vSphere, and ESXi servers via the vmware.py code paths without always validating SSL/TLS certificates. The issue stems from improper certificate validation in the SSL/TLS verification fl...

CVE-2021-32490

CVE-2021-32490 affects djvulibre up to version 3.5.28 and earlier. A flaw causes an out-of-bounds write in DJVU::filter_bv() when processing crafted DjVu files, potentially crashing the application and causing other consequences. Public advisories confirm the issue and list related fixes/updates....

CVE-2021-3475

OpenEXR vulnerability CVE-2021-3475 affects versions prior to 3.0.0-beta. A crafted EXR file processed by OpenEXR can trigger an integer overflow, with the greatest impact being reduced availability of the affected application. The connected Astra Linux and vendor advisories corroborate the same ...

CVE-2021-3974

CVE-2021-3974 is a Use-After-Free vulnerability in Vim. Connected advisories indicate Vim versions prior to 8.2.4081-1 are affected; upgrading to 8.2.4081-1 or newer resolves the issue (per Mariner, ALAS2-2022-1743, ALAS2022-1557, and Cloud Foundry USN-5247-1). Exploitation details are not provid...

CVE-2022-0585

Wireshark is affected by CVE-2022-0585 due to large loops in multiple protocol dissectors, leading to denial of service via packet injection or crafted capture files. Affected versions include 3.6.0–3.6.1 and 3.4.0–3.4.11. Several connected advisories confirm the issue and note fixes in newer pac...

CVE-2022-1897

CVE-2022-1897 is described in connected Astra Linux bulletin as an Out-of-bounds Write in vim/vim prior to 8.2. The bulletin confirms the issue type but does not provide vendor/version specifics beyond Vim before 8.2. Remediation (where documented) is to update Vim to fixed versions per affected ...

CVE-2022-27387

CVE-2022-27387 affects MariaDB Server 10.7 and earlier, due to a global buffer overflow in the decimal_bin_size component exploitable via specially crafted SQL statements. The issue is documented across multiple advisories (e.g., Debian LTS, Amazon Linux advisories, and Astra Linux) and is mitiga...

CVE-2014-5266

CVE-2014-5266 affects Drupal Core XML-RPC Endpoint xmlrpc.php. The DoS arises from how XML-RPC requests are processed, leading to very high CPU load and memory exhaustion. Affected: Drupal 6.x prior to 6.33 and Drupal 7.x prior to 7.31. Exploitation requires no authentication and is remote. Remed...

CVE-2015-3194

OpenSSL vulnerability CVE-2015-3194 affects OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e, where an RSA PSS ASN.1 signature missing a mask generation function parameter can allow a remote attacker to cause a denial of service (NULL pointer dereference and crash). Mitigation is to upgrade to...

CVE-2017-10053

CVE-2017-10053 is an OpenJDK/OpenJDK 2D JPEGImageReader vulnerability. The issue affects Java SE components (Java SE, Java SE Embedded, JRockit) with affected versions including Java 6u151, 7u141, 8u131 (and 8u131 for Java SE Embedded; JRockit R28.3.14). The vulnerability could allow an unauthent...

CVE-2017-8386

CVE-2017-8386 affects git-shell in Git prior to 2.12.3 (and upstreams) where command-line option handling allows a remote authenticated user to bypass restrictions by a repo name starting with a dash. The connected advisories confirm a restricted-shell bypass impacting multiple distros; mitigatio...

CVE-2018-1088

CVE-2018-1088 affects GlusterFS 3.x via the snapshot scheduler: an unauthenticated client could exploit the scheduler to mount shared storage and escalate privileges by scheduling a malicious cronjob via a symlink. The issue is tied to a regression/regression-related chain (CVE-2018-1112) in patc...

CVE-2018-2599

CVE-2018-2599 (Oracle Java SE/JRockit JNDI) affects Java SE 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded 8u151; JRockit R28.3.16. It is exploitable over network with unauthenticated access and can lead to partial data integrity/availability impact. Connected advisories corroborate multiple aff...

CVE-2018-2781

CVE-2018-2781 is a vulnerability in the MySQL Server component (subcomponent: Server: Optimizer). Affected versions are 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. The fixed text indicates an easily exploitable issue that allows a high-privileged attacker with network access v...

CVE-2018-2796

CVE-2018-2796 causes unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency) in Oracle/OpenJDK Java SE. Affected: Java SE/Embedded and JRockit components with Java 7u171, 8u162 and 10, plus related JDK/JRE packages (e.g., OpenJDK builds) per the CVE references. I...

CVE-2019-10181

The CVE-2019-10181 entry relates to icedtea-web (versions up to 1.7.2 and 1.8.2) where executable code could be injected into a trusted JAR without triggering signature verification, enabling code execution inside the sandbox. The vulnerability is documented across multiple vendors (e.g., Red Hat...

CVE-2019-10650

CVE-2019-10650: ImageMagick 7.0.8-36 Q16 has a heap-based buffer over-read in WriteTIFFImage (coders/tiff.c) that can cause denial of service or information disclosure via crafted TIFF images. Likely linked to LibTIFF write paths (TIFFRewriteDirectory/TIFFWriteDirectory) and incomplete prior fix....

CVE-2019-13738

CVE-2019-13738 affects Google Chrome (navigation component) where insufficient policy enforcement allows a remote attacker to bypass site isolation via a crafted HTML page. The issue is in Chrome versions prior to 79.0.3945.79. Remediation per the provided records is to upgrade to the fixed versi...

CVE-2019-25036

Unbound prior to 1.9.5 contains an assertion failure in synth_cname that can lead to denial of service. The vendor notes this may not be a vulnerability and that a running Unbound install cannot be remotely or locally exploited; nevertheless, multiple advisories report CVE-2019-25036 with DoS pot...

CVE-2019-7573

CVE-2019-7573 affects SDL (1.2.15 and 2.x up to 2.0.9). The vulnerability is a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (within the wNumCoef loop). Exploitation could allow arbitrary code execution on affected hosts. Remediation is to upgrade SDL to a fixed release (SDL 1.2...

CVE-2019-9200

CVE-2019-9200: A heap-based buffer underwrite in ImageStream::getLine() (Stream.cc) in Poppler 0.74.0 can be triggered by a crafted PDF sent to pdfimages, leading to Denial of Service (segmentation fault) or possibly other impact. Connected advisories enumerate the issue across affected packages,...

CVE-2020-10938

CVE-2020-10938 affects GraphicsMagick prior to 1.3.35, caused by an integer overflow that leads to a heap-based buffer overflow in the HuffmanDecodeImage path (magick/compress.c). The issue can be triggered by processing crafted images and has been fixed in 1.3.35 and later per multiple advisorie...

CVE-2021-21202

CVE-2021-21202: Use-after-free in Chrome extensions (extensions subsystem) prior to 90.0.4430.72 enables a crafted Chrome Extension to potentially escape the sandbox. Affected product: Google Chrome; root cause: use-after-free in extensions. Impact: sandbox escape risk. Remediation: update to Chr...

CVE-2021-21996

CVE-2021-21996 affects SaltStack Salt prior to 3003.3. A user who controls the source and source_hash URLs can gain full filesystem access as root on a Salt minion. The connected Nessus/Gentoo GLSA entries corroborate the vulnerability in Salt and point to a remediation path: upgrade Salt to a ne...

CVE-2021-3479

CVE-2021-3479 is a vulnerability in OpenEXR’s Scanline API. The flaw affects OpenEXR versions prior to 3.0.0-beta where processing a crafted EXR file can trigger excessive memory consumption, resulting in a denial of service (system availability impact). Connected advisories confirm real-world re...

CVE-2022-22844

CVE-2022-22844 affects LibTIFF. Affected: libtiff prior to version 4.3.0-2 (as indicated by multiple advisories). Description in sources: LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy() in tif_unix.c when handling a custom tag and 0x0200 as the second word of the DE field. Impact details...

CVE-2022-23633

CVE-2022-23633 (Rails Action Pack) : Under certain circumstances, response bodies could remain unclosed, causing ActionDispatch::Executor to fail to reset thread-local state between requests and potentially leak data to subsequent requests. This affects Rails Action Pack components used to handle...

CVE-2022-27381

Summary of CVE-2022-27381 (MariaDB) : The vulnerability affects MariaDB Server, specifically the Field::set_default component, in v10.6 and earlier. It can be triggered by specially crafted SQL statements and results in a Denial of Service (DoS). The connected AstraLinux entry and related advisor...

CVE-2022-3256

CVE-2022-3256 affects vim/vim, with exploitation observed in versions prior to 9.0.0530 (Use After Free). Advisories across Linux distros (ALAS/ALAS2, Cloud Foundry, Debian LTS, etc.) indicate that an upgraded Vim version resolves the issue; upgrade to a non-vulnerable release (e.g., 9.0.0530 or ...

CVE-2022-41915

CVE-2022-41915 (Netty) : Netty versions 4.1.83.Final through 4.1.85.Final are affected. When calling DefaultHttpHeaders.set with an Iterator, header value validation was not performed, enabling HTTP Response Splitting via malicious iterator values. This is patched in 4.1.86.Final. Remediation/wor...

CVE-2022-4283

CVE-2022-4283 affects the X.Org X server component handling keyboard name lookups (XkbGetKbdByName/XkbCopyNames). The provided documents link this issue to use-after-free/out-of-bounds conditions in Xkb-related code, potentially enabling local privilege elevation on privileged X servers and remot...

CVE-2022-48627

CVE-2022-48627 (Linux kernel) describes a memory overlap bug in vt buffer character deletion caused by an overlapping copy when using scr_memcpyw, which may lead to data corruption or leakage if destination overlaps source. The issue is mitigated by replacing scr_memcpyw with scr_memmovew; severa...

CVE-2023-5852

Summary of CVE-2023-5852 : A use-after-free in the Printing component of Google Chrome/Chromium prior to version 119.0.6045.105 could allow a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures. Impact is high (CVE-2023-5852 is associated with high base...

CVE-2017-10107

CVE-2017-10107 affects OpenJDK/OpenJDK-based packages (RMI) with vulnerable components in Java SE/Java SE Embedded. The connected security data confirms multiple OpenJDK subcomponents are vulnerable, including RMI-related sandbox bypass issues, and lists affected versions such as Java 6u151, 7u14...

CVE-2017-10346

CVE-2017-10346 is an OpenJDK/Java SE vulnerability affecting multiple OpenJDK components (Hotspot, OpenJDK sandboxes) across affected Java versions (OpenJDK6/7/8/9 in various advisories). The public records in connected documents indicate the issue includes bypassing Java sandbox restrictions via...

CVE-2018-1000078

CVE-2018-1000078 describes a Cross Site Scripting (XSS) vulnerability in RubyGems: gem server displays the homepage attribute and can execute injected scripts if a victim browses a malicious gem. Affected RubyGems before 2.7.6 (versions in the 2.x line) are vulnerable; the issue has been fixed in...

CVE-2020-25652

CVE-2020-25652 affects spice-vdagentd, where improper handling of client connections over the UNIX domain socket /run/spice-vdagentd/spice-vdagent-sock lets an unprivileged local guest user prevent legitimate agents from connecting, causing a denial of service and affecting availability. The vuln...

CVE-2020-27560

CVE-2020-27560 affects ImageMagick 7.0.10-34. The vulnerability is a Division by Zero in OptimizeLayerFrames within MagickCore/layer.c, which may lead to a denial of service. The connected sources corroborate the issue location and impact for that ImageMagick version. There is no explicit remedia...

CVE-2020-36225

CVE-2020-36225 : OpenLDAP before 2.4.57 contains a flaw in the saslAuthzTo processing that allows a double free and slapd crash, causing denial of service. Multiple connected advisories confirm OpenLDAP vulnerability and reference a fix in later releases (2.4.58 in some updates). Affected product...

CVE-2021-31215

CVE-2021-31215 affects SchedMD Slurm. Affected: Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7. Root cause: environment mishandling when using PrologSlurmctld or EpilogSlurmctld scripts, enabling remote code execution as SlurmUser. Implication: remote code execution could be perf...

CVE-2022-0561

This CVE (CVE-2022-0561) affects libtiff, with the NULL source pointer passed to memcpy() in TIFFFetchStripThing() within tif_dirread.c observed in libtiff 3.9.0 through 4.3.0, enabling denial of service via crafted TIFF files. The root cause is the NULL source pointer passed to memcpy(), leading...

CVE-2022-0572

CVE-2022-0572 affects vim/vim prior to 8.2. Cause: a heap-based buffer overflow in vim’s ex_retab() (indent.c) triggered by repeated use of :retab. Impact per sources: vulnerability could crash Vim and, in some reporting, enable arbitrary code execution. Affected product: vim/vim (GitHub vim/vim)...

CVE-2022-24836

CVE-2022-24836 affects Nokogiri, a Ruby HTML/XML parser. The issue is an inefficient regular expression used to detect encoding in HTML documents in versions = 1.13.4 (or applicable patches) as noted in multiple sources (Debian/Alpine/Amazon/DLA advisories and vendor notices). If upgrade is not p...

CVE-2022-27377

CVE-2022-27377 affects MariaDB Server 10.6.3 and earlier, due to a use-after-free in Item_func_in::cleanup() that can be triggered by specially crafted SQL statements. The connected advisories/notes confirm this CVE is linked to MariaDB server crashes/use-after-free scenarios and are part of broa...

CVE-2022-3586

CVE-2022-3586 : A use-after-free in the Linux kernel networking path (sch_sfb enqueue function using SKB cb field after enqueueing/freeding into a child qdisc) allows a local, unprivileged user to crash the system, causing a denial of service. Affected component: kernel networking code; root caus...

CVE-2022-3649

CVE-2022-3649 affects the Linux kernel (nilfs_new_inode in fs/nilfs2/inode.c, component BPF). The issue is a use-after-free in nilfs_new_inode that can be triggered remotely, per the initial document and connected advisories. A patch exists to fix this issue (references include a kernel commit ID...

CVE-2022-38784

Poppler up to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg). Processing a crafted PDF or JBIG2 image could crash or allow arbitrary code execution. This issue is the same class as CVE-2022-38171 in Xpdf. Connected advisories (ALAS/ALSA, A...