10005 matches found
CVE-2024-26808
The CVE-2024-26808 issue affects the Linux kernel netfilter nft_chain_filter logic. When NETDEV_UNREGISTER is reported, the fix removes the netdevice from the inet/ingress basechain to prevent a stale reference in the hook list. The vulnerability is exploitable locally (attack vector LOCAL) with ...
CVE-2024-26984
CVE-2024-26984 is a Linux kernel issue affecting the nouveau GPU driver where a race around pointer stores in instmem (ptrs) can yield a NULL pointer dereference under contention. The root cause is a race between nv50_instobj_acquire/refcount_set and concurrent refcount_inc_not_zero, which may le...
CVE-2019-10185
The connected Nessus entries confirm CVE-2019-10185 affects icedtea-web up to and including 1.7.2 and 1.8.2, with a zip-slip vulnerability during auto-extraction of a JAR that can write files to arbitrary locations and potentially break out of the sandbox. This is tied to multiple advisories (e.g...
CVE-2019-25034
CVE-2019-25034 concerns the Unbound DNS resolver. The connected documents confirm a vulnerability in the function sldns_str2wire_dname_buf_origin that can cause an integer overflow and an ensuing out-of-bounds write in Unbound builds prior to 1.9.5. The vendor disputes this is a vulnerability, no...
CVE-2020-13904
CVE-2020-13904 affects FFmpeg up to 4.2.3 (and 2.8) due to a use-after-free in M3U8 processing: parse_playlist in libavformat/hls.c frees a pointer, which is later accessed in av_probe_input_format3 (libavformat/format.c). This can enable remote code execution via crafted media content, with seve...
CVE-2021-30890
CVE-2021-30890 is a WebKit/WebKitGTK/WebKitGTK-derived vulnerability described as a logic/state issue where processing maliciously crafted web content may lead to universal cross-site scripting. Public mentions appear in multiple connected advisories: Debian DSA-5030-1 (webkit2gtk) and DSA-5031-1...
CVE-2021-39251
CVE-2021-39251 affects NTFS-3G: a crafted NTFS image can trigger a NULL pointer dereference in ntfs_extent_inode_open. Affected versions are NTFS-3G before 2021.8.22. Reports across multiple distributions confirm the issue and indicate fixes in 2021.8.22+. Impact is NULL pointer dereference (poss...
CVE-2021-3941
OpenEXR vulnerability CVE-2021-3941 involves a divide-by-zero in ImfChromaticities.cpp RGBtoXYZ() when computing Z and related values, risking availability of programs linked with OpenEXR. Connected advisories (Astra Linux, Debian/Ubuntu disclosures, and global advisories) confirm OpenEXR as affe...
CVE-2022-3099
CVE-2022-3099 (vim/vim) affects Vim. The issue is a use-after-free in do_cmdline triggered when an invalid line number on the for loop is ignored, potentially causing a crash or memory corruption. Public advisories confirm the vulnerability in Vim prior to version 9.0.0360 and indicate a fix in 9...
CVE-2022-47318
CVE-2022-47318 affects the ruby-git library. Vulnerable in versions prior to v1.13.0, it allows a remote authenticated attacker to execute arbitrary Ruby code by loading a repository containing a specially crafted filename. Several advisories confirm this issue alongside CVE-2022-46648, with Debi...
CVE-2023-4905
CVE-2023-4905 affects Google Chrome/Chromium where an inappropriate implementation in Prompts allowed a remote attacker to spoof the security UI via a crafted HTML page. The vulnerability is associated with Chrome/Chromium versions prior to 117.0.5938.62. Publicly documented fixes include Chrome/...
CVE-2023-5186
CVE-2023-5186 is a use-after-free vulnerability in Chromium-based browsers (Google Chrome and Chromium) prior to 117.0.5938.132. The issue lies in Passwords handling, where a crafted UI interaction can lead to a heap corruption through a use-after-free condition, potentially enabling arbitrary co...
CVE-2024-32487
CVE-2024-32487 affects the less utility. The issue allows OS command execution via a newline character in a file name due to faulty quoting in filename.c (affecting versions up to 653). Exploitation typically requires attacker-controlled file names (e.g., from an untrusted archive) and the LESSOP...
CVE-2008-7220
PrototypeJS (prototype.js) prior to 1.6.0.2 has an unspecified vulnerability that could permit a remote attacker to perform cross-site Ajax requests via unknown vectors. The issue is referenced in multiple sources, including IBM security notices for IBM Cloud Pak System variants (recommending upg...
CVE-2016-6797
CVE-2016-6797 stems from Apache Tomcat’s ResourceLinkFactory not restricting web app access to global JNDI resources, allowing a web application to access any global JNDI resource regardless of explicit ResourceLink. Affects Tomcat 6.x/7.x/8.x/9.x releases listed in the entry (various 6.0–9.0 lin...
CVE-2017-18249
CVE-2017-18249 affects the Linux kernel’s f2fs implementation: the add_free_nid function in fs/f2fs/node.c fails to properly track an allocated nid, enabling local attackers to cause a denial of service via a race condition (and potentially other impact) when multiple threads run concurrently. Af...
CVE-2018-18690
CVE-2018-18690 pertains to the Linux kernel before 4.17 where a local attacker able to set attributes on an xfs filesystem could render the filesystem non-operational until remount by triggering an unchecked error during an xfs attribute change. The root cause is mishandling of ATTR_REPLACE in xf...
CVE-2018-5332
CVE-2018-5332 affects the Linux kernel up to version 3.2, where rds_message_alloc_sgs() does not validate a value used during DMA page allocation, causing a heap-based out-of-bounds write in net/rds/rdma.c (via rds_rdma_extra_size). Exploitation would rely on local access to trigger DMA-related a...
CVE-2019-16710
CVE-2019-16710: ImageMagick 7.0.8-35 has a memory leak in MagickCore/memory.c triggered by AcquireMagickMemory while processing images via coders/dot.c. Public advisories (Ubuntu USN, Debian/SELUX, etc.) reference this CVE; exploitation status is not stated in the provided documents. The material...
CVE-2019-25032
Unbound (pre-1.9.5) contains an integer overflow in the regional allocator (regional_alloc). The vendor disputes this as a vulnerability, and a running Unbound installation is not remotely or locally exploitable per the cited descriptions. Connected advisories note multiple CVEs in Unbound and re...
CVE-2019-3901
CVE-2019-3901 describes a race condition in perf_event_open() that can leak data from setuid processes. The root cause is that cred_guard_mutex is not held during the ptrace_may_access() check, allowing a target task to execve() with setuid execution before perf_event_alloc() attaches, bypassing ...
CVE-2020-10177
CVE-2020-10177 affects Pillow prior to 7.1.0, with multiple out-of-bounds reads in libImaging/FliDecode.c. Technical details across connected advisories confirm affected package is python-pillow and fixes are provided in Pillow 7.1.0+ (e.g., ALAS-2024-2648, ALAS2 advisories; Mageia notes referenc...
CVE-2020-11038
FreeRDP CVE-2020-11038 affects versions
CVE-2020-1770
CVE-2020-1770 is an information-disclosure issue in the OTRS/Open Source Ticket Request System where generated support bundle files could contain sensitive data. Public advisories list affected products as OTRS Community Edition 5.0.41 and earlier, 6.0.26 and earlier, and OTRS 7.0.15 and earlier,...
CVE-2020-8163
CVE-2020-8163 is a code injection vulnerability in Rails prior to 5.0.1 where an attacker who controls the locals argument of a render call can achieve remote code execution (RCE). Affected software is Ruby on Rails before 5.0.1; exploitation and public proof-of-concept/exploit code exist (e.g., ...
CVE-2021-20203
CVE-2021-20203 affects the QEMU vmxnet3 NIC emulator (versions up to v5.2.0). A defect allows an integer overflow when a guest supplies invalid rx/tx queue sizes or NIC parameters, potentially crashing the QEMU process on the host and causing DoS. Multiple connected advisories note fixes via upda...
CVE-2021-32493
CVE-2021-32493 affects djvulibre up to version 3.5.28 and earlier, with a heap buffer overflow in DJVU::GBitmap::decode() when processing crafted DjVu files. Impact per sources ranges from application crash to potential arbitrary code execution in some advisories. Remediation is to upgrade/downgr...
CVE-2021-32558
The CVE-2021-32558 issue affects Sangoma Asterisk and Certified Asterisk: IAX2 channel driver may crash when receiving a packet with an unsupported media format. Affected versions include Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, 18.x before 18.5.1, and Certified Aste...
CVE-2021-38165
CVE-2021-38165 affects Lynx up to version 2.8.9. HTParse mishandles the URI userinfo subcomponent, risking disclosure of cleartext credentials that may appear in SNI data or HTTP headers. A remote attacker could retrieve credentials during TLS/HTTPS connections. Public advisories in multiple dist...
CVE-2022-0629
CVE-2022-0629 affects Vim (vim/vim) prior to 8.2. The connected Cloud Foundry USN advisory notes a stack-based buffer overflow in vim's ga_concat_shorten_esc() in src/testing.c that can be triggered by opening a crafted file, potentially crashing the editor and causing a denial of service (no exp...
CVE-2022-2129
CVE-2022-2129 affects vim/vim with an out-of-bounds write in the codebase prior to 8.2. Debian and Debian LTS advisories (DLA-3204-1, DLA-4097-1) note fixes in vim packages: Debian 10 up to 8.1.0875-5+deb10u4 and Debian 11 via vim-9.x packages (e.g., 2:8.2.2434-3+deb11u3). Astra/Cloud Foundry ref...
CVE-2022-40307
CVE-2022-40307 is a Linux kernel issue in drivers/firmware/efi/capsule-loader.c that creates a race condition with a resulting use-after-free . Connections show multiple references: Debian’s LTS advisory for linux-5.10 includes CVE-2022-40307 among the listed fixes, indicating affected kernel ser...
CVE-2022-48554
CVE-2022-48554 affects the file utility (the Open Source project named “File”) with a stack-based buffer over-read in file_copystr() in funcs.c, before version 5.43. The issue can cause denial of service or potentially memory corruption. Affected distributions/contexts include Apple platforms (ma...
CVE-2023-3212
CVE-2023-3212 affects the Linux kernel gfs2 file system. A NULL pointer dereference occurs on corrupt gfs2 filesystems when the evict path references the journal descriptor structure after it has been freed, enabling a local privileged user to trigger a kernel panic. Affected: Linux kernel with g...
CVE-2000-0666
CVE-2000-0666 affects the rpc.statd component of the nfs-utils package across various Linux distributions. The vulnerability arises from the rpc.statd daemon failing to cleanse untrusted format strings, with CERT/CC documenting that user-supplied data can be passed to syslog as a format string, e...
CVE-2015-5345
CVE-2015-5345 affects the Tomcat Mapper component: redirects are processed before security constraints/Filters, enabling a remote attacker to determine the existence of a directory via a URL that lacks a trailing slash. Affected upstream versions are Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8...
CVE-2017-10101
CVE-2017-10101 is a concrete OpenJDK/OpenJDK JAXP vulnerability. Affected: Java SE (6u151, 7u141, 8u131) and Java SE Embedded (8u131). Issue: untrusted code loaded in sandboxed deployments can bypass protections and lead to full takeover of Java SE/Embedded via JAXP. Exploitation is network-based...
CVE-2017-3636
CVE-2017-3636 affects the MySQL/MariaDB stack (MySQL Server component, subcomponent: Client programs). Public details in connected documents confirm affected versions include 5.5.56 and earlier and 5.6.36 and earlier (as per initial). The vulnerability is exploitable with low privileges and local...
CVE-2017-7526
GnuPG/libgcrypt: CVE-2017-7526 affects libgcrypt before 1.7.8, allowing a cache-side-channel attack that can fully recover RSA-1024 private keys (and likely RSA-2048 with more effort) when the attacker can run code on the same hardware. Connected sources confirm the vulnerability exists in libgcr...
CVE-2018-1000877
CVE-2018-1000877 is a double-free in libarchive’s RAR decoder (parse_codes in archive_read_support_format_rar.c) that can crash the process or enable a DoS when a victim opens a specially crafted RAR file. The issue occurs when realloc(rar->lzss.window, new_size) is invoked with new_size = 0. ...
CVE-2018-19758
CVE-2018-19758 affects libsndfile 1.0.28 with a heap-based buffer over-read in wav.c: wav_write_header, leading to denial of service. Multiple advisories indicate a fix is available via upgraded libsndfile packages (examples: Debian/ Mageia advisories citing updates to address this issue; Mariner...
CVE-2018-19873
CVE-2018-19873 affects Qt up to version 5.11.2 (before 5.11.3): QBmpHandler can overflow a buffer when processing BMP data, leading to a potentially exploitable crash or arbitrary code execution as implied by the CVE entry. Public mentions across advisories (e.g., F5 K08037765, K42941419, Debian/...
CVE-2018-5785
OpenJPEG 2.3.0 is affected by CVE-2018-5785 due to an integer overflow caused by an out-of-bounds left shift in opj_j2k_setup_encoder (openjp2/j2k.c). This vulnerability can allow a remote attacker to cause a denial of service via a crafted BMP file. Multiple vendor advisories (Debian DSA-4405, A...
CVE-2019-13727
CVE-2019-13727 is a policy-enforcement error in Chrome’s WebSockets implementation that could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability affects Google Chrome versions prior to 79.0.3945.79, with the issue explicitly tied to insufficient po...
CVE-2019-17545
CVE-2019-17545 affects GDAL up to 3.0.1, with a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. Public advisories (Debian DLA-2877/3129, Mageia, Fedora) confirm the issue and list CVE-2019-17545 as fixable by upgrading GDAL to newer builds; Deb...
CVE-2019-19816
CVE-2019-19816 affects the Linux kernel 5.0.21: mounting a crafted btrfs image can trigger a slab-out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c due to mishandling of the data stripes value = 1. The connected Nessus advisory blocks (Unity Linux UTSA-2026-004332 and related plugin ...
CVE-2020-11030
CVE-2020-11030 affects WordPress blocks/search handling. A crafted payload can cause scripts to run within the block editor search block when an authenticated user with content-adding rights is present. The vulnerability is mitigated by upgrading to WordPress 5.4.1 or applying the listed minor re...
CVE-2020-11088
CVE-2020-11088 is an out-of-bounds read vulnerability in FreeRDP’s NTLM NegotiateMessage handling. Public documents consistently describe this as affecting FreeRDP
CVE-2020-14573
CVE-2020-14573 affects Oracle Java SE (Hotspot) with affected Java SE versions 11.0.7 and 14.0.1. The vulnerability can be exploited remotely by an unauthenticated attacker over multiple protocols, potentially allowing unauthorized updates, insertions, or deletions of Java data. Exploitation deta...