CVE-2023-23969

CVE-2023-23969 affects Django: parsing of Accept-Language headers is cached, enabling potential DoS via memory exhaustion if a very large header is received. Affected versions are Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6. Mitigation is to upgrade to fixed releases (3.2.17+...

CVE-2024-50055

In CVE-2024-50055, the vulnerability is in the Linux kernel's driver core: bus_register() can double-free @priv after kset_register() if an error occurs, freeing it twice. The fix is to set @priv to NULL after the first free to prevent a second free. This mode C entry is supported by connected do...

CVE-2015-2305

CVE-2015-2305 describes an integer/heap overflow in the Henry Spencer BSD regex library (rxspencer), specifically in regcomp on 32-bit platforms. The issue can be triggered by a very large regular expression, potentially allowing context-dependent attackers to execute arbitrary code via a heap-ba...

CVE-2016-7068

PowerDNS (Authoritative Server and Recursor) pre-fix versions are affected by CVE-2016-7068, allowing remote, unauthenticated attackers to cause abnormal CPU usage by sending crafted DNS queries that trigger parsing of all records in a query, potentially leading to a partial DoS. Affected ranges ...

CVE-2017-3157

CVE-2017-3157 affects Apache OpenOffice versions older than 4.1.4. The flaw arises in Calc/Writer when rendering embedded objects, enabling an attacker to craft a document that discloses files from the user’s filesystem (e.g., via hidden sections) and trick the user into saving/shipping the docum...

CVE-2017-3265

The connected advisories provide concrete details for CVE-2017-3265 in Oracle MySQL Server (Server: Packaging). Affected are MySQL Server subcomponent packaging with versions 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. Root cause: packaging/init scripts weakness enabling a hig...

CVE-2018-10907

CVE-2018-10907 is a vulnerability in GlusterFS where the server-rpc-fopc.c code path allocates fixed-size buffers with alloca(3). An authenticated attacker mounting a Gluster volume could send a string longer than the fixed buffer, causing a stack-based overflow that may crash the glusterfs serve...

CVE-2018-18065

CVE-2018-18065 affects Net-SNMP before 5.8. The vulnerability is a NULL pointer dereference in _set_key within agent/helpers/table_container.c, which an authenticated attacker can exploit by sending a crafted UDP packet to remotely crash the SNMP service (DoS). Documented CVSS v3 base score is 6....

CVE-2018-19628

Wireshark vulnerability CVE-2018-19628 affects the ZigBee ZCL dissector in Wireshark 2.6.0–2.6.4, causing a crash due to a divide-by-zero in epan/dissectors/packet-zbee-zcl-lighting.c. The issue is fixed by preventing the divide-by-zero in the dissector. Vulnerable component/file: ZigBee ZCL diss...

CVE-2018-2618

CVE-2018-2618 affects the Java cryptography (JCE) key-agreement in OpenJDK/OpenJDK-derived OpenJDK builds such as Java SE, Java SE Embedded, and JRockit. The connected sources describe insufficient strength of keys in the JCE component, enabling an unauthenticated attacker with network access to ...

CVE-2018-5729

CVE-2018-5729 (and CVE-2018-5730) affects MIT Kerberos 5 (krb5) where an authenticated kadmin user with LDAP-principal-adding rights can cause a NULL pointer dereference or bypass a DN container check by supplying crafted data or DN arguments. The issue stems from insufficient validation in the K...

CVE-2018-8777

CVE-2018-8777 affects Ruby WEBrick: sending a large HTTP request or crafted body to WEBrick can cause memory-based denial of service. Affected Ruby branches include 2.2.x before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1. Mitigation is upgrading to the ...

CVE-2019-13761

CVE-2019-13761 affects Google Chrome/Chromium Omnibox UI, where a security UI flaw allowed domain spoofing via IDN homographs in crafted domain names. Root cause: incorrect security UI in Omnibox. Impact: remote attacker could spoof domains; no exploit details provided in the sources. Remediation...

CVE-2019-16713

CVE-2019-16713 affects ImageMagick 7.0.8-43, describing a memory leak in coders/dot.c (demonstrated by PingImage in MagickCore/constitute.c). Connected advisories confirm multiple ImageMagick CVEs; this entry notes a leak in the 7.0.8-43 release. No additional remediation details are provided in ...

CVE-2019-1787

CVE-2019-1787 affects ClamAV’s PDF scanning; an out-of-bounds heap read can crash the engine, enabling DoS when processing crafted PDFs. Affects 0.101.1 and earlier. Public references indicate the issue stems from improper tracking of remaining buffer bytes during indexing, leading to a heap read...

CVE-2020-10108

CVE-2020-10108 affects Twisted Web up to 19.10.0, causing an HTTP request splitting vulnerability when two Content-Length headers are present; if the second Content-Length is zero, the request body can be interpreted as a pipelined request. Connected advisories confirm this issue across multiple ...

CVE-2020-11086

CVE-2020-11086 affects FreeRDP before version 2.1.0, where ntlm_read_ntlm_v2_client_challenge can read beyond an internal structure (out-of-bounds read). The issue is fixed in FreeRDP 2.1.0 and later. Connected advisories (e.g., MiracleLinux/Miracle Linux AXSA entries, Debian/DLA updates, Rocky/R...

CVE-2020-1746

CVE-2020-1746 affects Ansible Engine components (and Ansible Tower) where LDAP modules ldap_attr/ldap_entry can leak the LDAP bind password to stdout or logs when bind_pw is used. Versions vulnerable: Ansible 2.7.x before 2.7.17, 2.8.x before 2.8.11, 2.9.x before 2.9.7, and corresponding Ansible ...

CVE-2022-33743

CVE-2022-33743 maps to a Xen netfront memory-handling issue in the Linux kernel where SKBs with retained references can be freed, caused by a label move while adding XDP support. This can lead to use-after-free in the network backend and a potential Denial of Service when interacting with the Xen...

CVE-2023-5851

CVE-2023-5851 describes an insecure/incorrect implementation in Downloads of Google Chrome (Chromium) prior to 119.0.6045.105, which allowed a remote attacker to obfuscate the security UI via a crafted HTML page. Public references in the connected documents confirm the issue affects Chromium-base...

CVE-2017-10109

CVE-2017-10109 concerns a serialization flaw in Oracle/OpenJDK Java SE components (Java SE, Java SE Embedded, JRockit). The vulnerability, tied to the Serialization subcomponent, can allow an unauthenticated, network-scoped attacker to trigger a denial of service (partial DoS) by loading untruste...

CVE-2018-17581

CVE-2018-17581 is associated with Exiv2 0.26. The vulnerability arises from excessive stack consumption caused by a recursive function in CiffDirectory::readDirectory() implemented in crwimage_int.cpp, leading to a denial of service. The connected documents corroborate a DoS impact for this CVE, ...

CVE-2018-20152

Affected software: WordPress (before 4.9.9 and before 5.0.1 in the 5.x branch). Vulnerability: CVE-2018-20152 allows bypassing restrictions on post types via crafted input, enabling authors to create or manipulate posts beyond intended types. Root cause: improper validation of post-type restricti...

CVE-2018-2761

CVE-2018-2761 affects the MySQL Server component (Client programs) of Oracle MySQL. Affected ranges are 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. It enables an unauthenticated, network-accessible attacker to cause the MySQL Server to hang or crash (partial DOS). The descript...

CVE-2018-5388

CVE-2018-5388 affects strongSwan up to version 5.6.2 (before 5.6.3). The stroke plugin did not verify the message length when reading from its control socket, allowing a buffer underflow that can cause resource exhaustion and denial of service. Impact is a DoS during socket reads; exploitation de...

CVE-2018-6554

CVE-2018-6554 describes a memory leak in the Linux kernel’s irda_bind path (net/irda/af_irda.c and later staging/irda/net/af_irda.c). A local user can cause memory exhaustion by repeatedly binding an AF_IRDA socket, leading to denial of service. The vulnerability exists in kernels prior to 4.17 a...

CVE-2019-7524

In CVE-2019-7524, Dovecot before 2.2.36.3 and before 2.3.5.1 for the 2.3.x line, suffers a local buffer overflow in the indexer-worker due to missing checks in fts and pop3-uidl. This can enable local privilege escalation to root. Affected products include Dovecot IMAP/POP3 servers on various Lin...

CVE-2020-8164

CVE-2020-8164 is a Rails deserialization vulnerability affecting Rails < 5.2.4.3 and Rails

CVE-2021-21208

CVE-2021-21208 affects Google Chrome/Chromium’s QR scanner. Root cause: insufficient data validation in the QR code scanner on iOS prior to 90.0.4430.72, enabling a crafted QR code to induce domain spoofing. Affected versions are Chrome/Chromium before that build. Remediation: upgrade to Chromium...

CVE-2021-21225

CVE-2021-21225 is an out-of-bounds memory access in V8 within Google Chrome prior to 90.0.4430.85. The connected advisories confirm this vulnerability affects Chrome/V8 and describe the impact as potentially enabling heap corruption via a crafted HTML page, allowing remote code execution in the s...

CVE-2021-29473

Exiv2 (library/CLI) is affected by CVE-2021-29473 due to an out-of-bounds read when writing metadata into a crafted image, triggered in Exiv2 prior to 0.27.4. The issue specifically concerns Exiv2::Jp2Image::doWriteMetadata, allowing a potential denial of service via crashing the application when...

CVE-2021-3500

CVE-2021-3500 affects djvulibre up to version 3.5.28. A stack overflow in function DJVU::DjVuDocument::get_djvu_file() triggered by a crafted DjVu file may crash the application and, as described in connected advisories, could lead to further consequences including possible arbitrary code executi...

CVE-2021-3927

CVE-2021-3927 is a heap-based buffer overflow vulnerability in vim reported across multiple advisories (Debian, Amazon ALAS/ALAS2, Astra Linux). The issue can lead to a crash or, in some bulletins, potential code execution when opening a crafted file. Public details list vim as affected and refer...

CVE-2021-42096

CVE-2021-42096 affects GNU Mailman before 2.1.35 where a CSRF token is derived from the admin password, enabling offline brute-force attacks and contributing to remote privilege escalation. Related advisories (CVE-2021-42097, CVE-2021-44227) describe additional CSRF/token issues and password-rela...

CVE-2022-1195

CVE-2022-1195 describes a use-after-free in the Linux kernel driver for hamradio (drivers/net/hamradio), specifically involving the mkiss and sixpack paths. The flaw allows a local attacker with user privileges to trigger a denial of service when the mkiss/sixpack device is detached and resources...

CVE-2022-22818

CVE-2022-22818 affects Django’s {% debug %} template tag. The issue: the tag does not properly encode the current context, enabling potential XSS. Affected versions: Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Remediation: upgrade to 2.2.27, 3.2.12, or 4.0.2 or newer (as pe...

CVE-2022-2850

Summary: CVE-2022-2850 affects 389-ds-base where the Content Synchronization plugin, when enabled, allows an authenticated user to trigger a NULL pointer dereference and cause a denial of service. This entry is tied to an incomplete fix for CVE-2021-3514. What’s affected (from connected docs): 38...

CVE-2022-40768

CVE-2022-40768 affects the Linux kernel (through 5.19.9) where stex_queuecommand_lck does not memset for the PASSTHRU_CMD path, enabling local users to read kernel memory. Affected: drivers/scsi/stex.c in the kernel. Impact: information disclosure from kernel memory; local, low complexity, no use...

CVE-2023-6346

CVE-2023-6346 is a use-after-free in WebAudio within Chromium-based browsers, enabling potential heap corruption. The vulnerability affects Chromium and derivatives (e.g., Google Chrome) prior to version 119.0.6045.199. Multiple connected advisories confirm the fix in version 119.0.6045.199 or ne...

CVE-2024-26777

CVE-2024-26777 concerns Linux kernel fbdev drivers (sis and savage) where pixclock may be used as a divisor before being validated, enabling a divide-by-zero error via user-supplied ioctl values. The root cause is that pixclock is used in calculations (e.g., drate) before a zero check, with fixes...

CVE-2024-37371

CVE-2024-37371 details (krb5) : MIT Kerberos 5 (krb5) before 1.21.3 is affected. An attacker can trigger invalid memory reads during GSS token handling by sending tokens with invalid length fields, as described in multiple vendor advisories. Affected versions are krb5 up to but not including 1.21...

CVE-2016-0773

CVE-2016-0773 affects PostgreSQL mainline before upgrades: 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1. The issue is an overflow/logic flaw in PostgreSQL’s regular expression handling, where an excessively large Unicode range in a bracket expressio...

CVE-2017-10081

CVE-2017-10081 is a Sandbox/Access-Restriction bypass in the Hotspot component of OpenJDK. Affected Java runtimes include Java SE 6u151, 7u141, and 8u131 (Java SE Embedded 8u131). Several connected advisories note this as part of a broader OpenJDK set of issues (RMI, JAXP, ImageIO, Libraries, AWT...

CVE-2017-10384

CVE-2017-10384 affects the MySQL Server component (Server: DDL) of Oracle MySQL. Affected versions include 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.19 and earlier. An attacker with network access via multiple protocols and low privileges can cause a hang or a complete denial of service in ...

CVE-2018-20151

CVE-2018-20151 affects WordPress prior to 4.9.9 and 5.x prior to 5.0.1. The vulnerability allows a search-engine crawler to access the user activation page under certain configurations, enabling indexing/display of a user’s email address and, rarely, the default-generated password. CVSS data from...

CVE-2018-2637

CVE-2018-2637 affects the OpenJDK/OpenJDK JMX component (SingleEntryRegistry deserialization filter). A remote, unauthenticated attacker could exploit improper deserialization filter setup to bypass deserialization restrictions. Multiple advisories (ALAS-2018-949; CentOS/DSA entries; Debian secur...

CVE-2019-10185

The connected Nessus entries confirm CVE-2019-10185 affects icedtea-web up to and including 1.7.2 and 1.8.2, with a zip-slip vulnerability during auto-extraction of a JAR that can write files to arbitrary locations and potentially break out of the sandbox. This is tied to multiple advisories (e.g...

CVE-2019-25034

CVE-2019-25034 concerns the Unbound DNS resolver. The connected documents confirm a vulnerability in the function sldns_str2wire_dname_buf_origin that can cause an integer overflow and an ensuing out-of-bounds write in Unbound builds prior to 1.9.5. The vendor disputes this is a vulnerability, no...

CVE-2020-12672

GraphicsMagick up to 1.3.35 is affected by a heap-based buffer overflow in ReadMNGImage (coders/png.c) per CVE-2020-12672. Remediation observed in multiple advisories is to upgrade GraphicsMagick to a newer version (e.g., 1.3.38 or later, per GLSA-202209-19; DLA-2902 update; openSUSE patch). The ...

CVE-2020-13904

CVE-2020-13904 affects FFmpeg up to 4.2.3 (and 2.8) due to a use-after-free in M3U8 processing: parse_playlist in libavformat/hls.c frees a pointer, which is later accessed in av_probe_input_format3 (libavformat/format.c). This can enable remote code execution via crafted media content, with seve...