10005 matches found
CVE-2020-11088
CVE-2020-11088 is an out-of-bounds read vulnerability in FreeRDP’s NTLM NegotiateMessage handling. Public documents consistently describe this as affecting FreeRDP
CVE-2020-14573
CVE-2020-14573 affects Oracle Java SE (Hotspot) with affected Java SE versions 11.0.7 and 14.0.1. The vulnerability can be exploited remotely by an unauthenticated attacker over multiple protocols, potentially allowing unauthorized updates, insertions, or deletions of Java data. Exploitation deta...
CVE-2020-15863
CVE-2020-15863 affects QEMU pre-07-20-2020, in the XGMAC Ethernet controller (hw/net/xgmac.c). A buffer overflow during packet transmission can allow a guest user/process to crash the QEMU host process, yielding denial of service or potential privilege escalation, specifically impacting the highb...
CVE-2021-32491
CVE-2021-32491 affects djvulibre
CVE-2021-3474
OpenEXR vulnerability CVE-2021-3474 affects OpenEXR versions before 3.0.0-beta. A crafted EXR file can trigger a shift overflow in FastHufDecoder, leading to availability impact (DoS) for affected applications. The connected documents confirm the flaw and mention mitigation via upgrading to 3.0.0...
CVE-2021-35267
NTFS-3G is affected by CVE-2021-35267 for versions older than 2021.8.22. The issue is a stack/heap buffer overflow in MFT/MFTMirror handling that can enable code execution or privilege escalation when setuid-root. Connected advisories from Astra Linux and Alpine Linux confirm the
CVE-2021-44731
CVE-2021-44731 describes a race condition in the snapd ecosystem: the snap-confine binary could be induced to execute arbitrary code when preparing a private mount namespace for a snap, enabling a local attacker to escalate to root. Public details show a local-privilege-escalation path via bind-m...
CVE-2021-45480
Mode C: CVE-2021-45480 affects the Linux kernel up to 5.15.10 (before 5.15.11). Root cause: memory leak in __rds_conn_create() in net/rds/connection.c under certain conditions. Impact: potential memory leak; CVE details state a leak rather than remote code execution. Public references note mitiga...
CVE-2022-23614
CVE-2022-23614 — Twig sandbox bypass via sort filter . In Twig’s sandbox mode, the sort filter’s arrow parameter must be a closure; in affected versions this constraint was not properly enforced, allowing code injection of arbitrary PHP when the filter was misused (e.g., passing a function name l...
CVE-2022-25375
CVE-2022-25375 affects the Linux kernel rndis gadget: the RNDIS_MSG_SET size is not validated, allowing information disclosure from kernel memory. Affected: kernels prior to 5.16.10. Remediation: apply upstream patch in 5.16.10+; Debian advisories note fixes in stable branches (e.g., 5.10.x/Bulls...
CVE-2022-42329
CVE-2022-42329 concerns the Linux xen-netback driver. The description shows a potential deadlock when freeing the SKB of a dropped packet under the XSA-392 handling (also tied to CVE-2022-42328) and also when dropping packets if netpoll is active on the connected interface, risking a deadlock in ...
CVE-2023-5482
CVE-2023-5482 affects Google Chrome/Chromium before 119.0.6045.105 due to insufficient data validation in USB handling, enabling a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Impact is described as high, with potential memory corruption or crash; exploitation s...
CVE-2024-26772
CVE-2024-26772: In the Linux kernel, the fix prevents allocating blocks from a corrupted ext4 group. The patch moves the block bitmap integrity check under the group lock in ext4_mb_find_by_goal(), ensuring blocks are not allocated from a group with a corrupted bitmap. This mitigates a local-priv...
CVE-2008-4098
CVE-2008-4098 affects MySQL (older 5.0.x) where an attacker with CREATE/ DROP privileges could bypass privilege checks by issuing CREATE TABLE on a MyISAM table with modified DATA DIRECTORY or INDEX DIRECTORY arguments tied to pathnames without symlinks, potentially referencing a table created la...
CVE-2015-3636
CVE-2015-3636 affects the Linux kernel up to 4.0.2, in the ping_unhash path of net/ipv4/ping.c. The issue arises because a certain list data structure is not initialized during an unhash operation, enabling a local user with ping socket access to crash the system or potentially gain privileges by...
CVE-2017-13088
CVE-2017-13088 is part of the KRACK family affecting WPA/WPA2 (802.11) where reinstallation of the Integrity Group Temporal Key (IGTK) can occur while processing a Wireless Network Management Sleep Mode Response frame. The flaw enables an attacker within radio range to replay frames between APs a...
CVE-2017-17789
CVE-2017-17789 affects GIMP 2.8.22 with a heap-based buffer overflow in read_channel_data (plug-ins/common/file-psp.c) used when parsing PSP files. The issue is documented across multiple advisories and vendor notices, including openSUSE and Red Hat/Nessus entries, which reference a PSP importer ...
CVE-2018-10904
CVE-2018-10904 affects GlusterFS servers. The vulnerability arises from improper sanitization of file paths in the trusted.io-stats-dump extended attribute used by the debug/io-stats translator. An attacker with sufficient access to modify extended attributes on a Gluster volume can create files ...
CVE-2018-11780
Apache SpamAssassin is affected by CVE-2018-11780 due to a potential Remote Code Execution in the PDFInfo plugin prior to version 3.4.2. Connected sources confirm SpamAssassin and PDFInfo as the vulnerable components, with upstream/vendors recommending upgrading to 3.4.2 or newer to mitigate. The...
CVE-2018-18521
The CVE-2018-18521 issue is a confirmed vulnerability in elfutils: a Divide-by-Zero in arlib_add_symbols() (arlib.c) when processing crafted ELF files, caused by a mishandled zero sh_entsize. This can lead to denial of service (application crash). Affected upstream releases prior to fix include e...
CVE-2018-19134
CVE-2018-19134 affects Artifex Ghostscript (through 9.25). The setpattern operator mishandles certain types, causing a type-confusion in the pattern dictionary implementation. This could crash Ghostscript or potentially allow arbitrary code execution within the Ghostscript process when processing...
CVE-2018-20340
CVE-2018-20340 affects Yubico libu2f-host 1.1.6, with unchecked buffers in devs.c that could allow a crafted USB token to overflow a buffer and execute code on a host where the library is in use (not with a genuine YubiKey). Public advisories also reference CVE-2019-9578, related to uninitialized...
CVE-2018-5950
CVE-2018-5950 affects Mailman web UI: a cross-site scripting (XSS) vulnerability that can be triggered via a crafted user-options URL to inject arbitrary script/HTML. Affected: Mailman 2.1.x up to 2.1.25 (before 2.1.26). Impact per sources: remote attacker can execute script in user context; info...
CVE-2019-0222
CVE-2019-0222 affects Apache ActiveMQ 5.0.0–5.15.8. Description: unmarshalling of a corrupt MQTT frame can cause a broker Out of Memory, rendering the broker unresponsive. Enterprise/Nessus entries in the connected docs classify this as an unpatched/vulnerable issue with no vendor patch available...
CVE-2019-10241
CVE-2019-10241 affects Eclipse Jetty prior to specific release lines: 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older. The vulnerability is an XSS due to improper validation of user-supplied input by DefaultServlet and ResourceHandler when a remote client uses a specially crafted URL to ...
CVE-2019-10903
Wireshark DCERPC SPOOLSS dissector (CVE-2019-10903) could crash in Wireshark 2.4.0–2.4.13, 2.6.0–2.6.7, and 3.0.0. The root cause was a missing boundary check in epan/dissectors/packet-dcerpc-spoolss.c. A fix was implemented by adding a boundary check in that module, mitigating the crash. Connect...
CVE-2019-25041
Unbound (DNS resolver) prior to 1.9.5 contains an assertion failure in dname_pkt_copy when handling compressed names. The CVE entry notes the vendor disputes this as a vulnerability, and a running Unbound installation cannot be remotely or locally exploited according to the description. Connected...
CVE-2019-7576
SDL (libsdl1.2/SDL2) up to affected 1.2.x/2.x versions has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop). Exploitation can enable arbitrary code execution via crafted media files. Upgrades to SDL2 2.0.10+ and SDL 1.2.15-13+/libsdl1.2 1.2.15-13+ are ...
CVE-2021-4204
Technical details for CVE-2021-4204 are not publicly provided in the supplied documents. Please monitor for updates from connected sources; current materials mention a Linux kernel memory access flaw but do not specify affected versions or fixes here.
CVE-2021-43784
CVE-2021-43784 affects runc prior to 1.0.3, where a 16‑bit length field overflow in netlink bytemsg allowed an attacker who can influence container configuration to have the parsed payload override netlink-based container configuration and disable namespaces. Impact: potential namespace bypass by...
CVE-2022-0443
CVE-2022-0443 affects Vim (vim/vim) prior to 8.2. The flaw is a use-after-free involving freed memory, potentially allowing a crafted file to crash Vim or corrupt memory. Public documents describe the vulnerability in that context but do not provide exploit specifics, affected product versions be...
CVE-2022-23041
The connected Astra Linux entries link CVE-2022-23041 to Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus) that use grant-table interfaces to drop backend access. The issue arises from race conditions when removing grant access: if a backend has mapped the granted page b...
CVE-2022-27383
CVE-2022-27383 affects MariaDB Server v10.6 and below, with a use-after-free in my_strcasecmp_8bit triggerable by specially crafted SQL statements. Connected advisories confirm this issue across MariaDB 10.6 and earlier, and note remediation generally involves updating to a fixed upstream release...
CVE-2022-33740
Summary: The CVE-2022-33740 issue concerns the Linux Block and Network PV device frontends leaking data to the backend. The root cause described in the sources is that memory regions are not zeroed before sharing with the backend, and the grant-table granularity (4K pages) means data from differe...
CVE-2024-26633
CVE-2024-26633 affects the Linux kernel’s ip6_tunnel code, specifically the NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim(). Syzbot reported that frag_off could be read before enough bytes were pulled into skb->head, causing reads of uninitialized or garbage data. The issue is exposed...
CVE-2015-2721
CVE-2015-2721 (NSS) arises from NSS not correctly handling TLS state machine transitions, allowing a MITM to bypass forward secrecy by blocking the ServerKeyExchange message (the SMACK SKIP-TLS issue). Affected: NSS libraries used by Mozilla Firefox/Thunderbird and related products; impact includ...
CVE-2016-6318
CVE-2016-6318 is a stack-based buffer overflow in cracklib’s FascistGecosUser (lib/fascist.c) that can be triggered by parsing an overly long GECOS field, allowing a local attacker to crash the application or gain privileges. Multiple connected sources confirm the issue and reference the same roo...
CVE-2017-10089
CVE-2017-10089 affects Oracle Java SE ImageIO in OpenJDK/OpenJDK-derived disclosures: 6u151, 7u141, 8u131 are vulnerable. The issue allows a network-based, unauthenticated attacker to take control of the Java SE runtime, with UI interaction required, potentially impacting additional products. Aff...
CVE-2017-10349
CVE-2017-10349 affects the OpenJDK/JAXP component (Java SE and Java SE Embedded) where the vulnerability stems from unbounded memory growth during object creation from serialized data, enabling unauthenticated network access to cause a partial denial of service. Multiple connected advisories (IBM...
CVE-2017-14176
CVE-2017-14176 affects Bazaar (bzr) 2.7.0 and earlier, via a vulnerability in subprocess SSH handling when using bzr+ssh URLs with an initial dash in the hostname. Connected data confirms the issue impacts the bzr 2.7.0- series; no patch is available currently. Exploitation details are not provid...
CVE-2018-10913
CVE-2018-10913 affects GlusterFS server. The vulnerability allows an attacker to issue a xattr request via GlusterFS FUSE to determine the existence of files, causing an information disclosure. The connected Nessus/EulerOS Debian advisories list CVE-2018-10913 among multiple GlusterFS issues and ...
CVE-2018-10914
CVE-2018-10914 is a GlusterFS vulnerability where an attacker can issue a xattr request via glusterfs FUSE to crash the gluster brick process, and if multiplexing is enabled, cause crashes across multiple bricks and volumes, enabling a remote denial of service. The issue is documented across mult...
CVE-2018-18873
CVE-2018-18873 affects JasPer 2.0.14 with a NULL pointer dereference in ras_putdatastd (ras_enc.c), which can cause a crash. The Connected documents confirm the vulnerability and its presence in JasPer 2.0.14 but do not provide a specific patch version or remediation details in the supplied mater...
CVE-2018-18897
CVE-2018-18897 refers to a memory leak in Poppler 0.71.0’s GfxColorSpace::setDisplayProfile (GfxState.cc), demonstrated by pdftocairo. The issue is documented across multiple advisories in the connected documents, confirming the component (Poppler), vulnerable function, and affected version. The ...
CVE-2018-6594
CVE-2018-6594 affects PyCrypto before or up to 2.6.1 due to weak ElGamal key parameter generation in lib/Crypto/PublicKey/ElGamal.py. This flaw breaks semantic security: under ciphertext-only attack an adversary could obtain plaintext information from ciphertext, as the Decisional Diffie-Hellman ...
CVE-2019-13744
CVE-2019-13744 affects Google Chrome before 79.0.3945.79, where insufficient policy enforcement in cookies could enable a remote attacker to leak cross-origin data via a crafted HTML page. The issue is rooted in cookie policy handling within Chrome; several advisories reference this CVE as part o...
CVE-2020-0198
The CVE-2020-0198 entry concerns the libexif library used on Android-10. The issue is in exif_data_load_data_content of exif-data.c, where an integer overflow can trigger a UBSAN abort, potentially enabling remote denial of service with no additional execution privileges. Exploitation requires us...
CVE-2020-11653
CVE-2020-11653 affects Varnish Cache prior to 6.0.6 LTS, 6.1.x prior to 6.2.3, and 6.3.x prior to 6.3.2. When a TLS termination proxy uses PROXY v2, an assertion failure can occur, causing the varnishd daemon to restart and leading to performance loss. Connected advisories (Debian/Ubuntu/Rocky) r...
CVE-2020-14928
CVE-2020-14928 affects evolution-data-server (EDS) up to version 3.36.3. The issue is a STARTTLS buffering flaw in SMTP/POP3: when a server sends a begin TLS response, EDS reads extra data and evaluates it in a TLS context, enabling potential response injection with impact on integrity as per the...