CVE-2018-17540

CVE-2018-17540 : The gmp plugin in strongSwan before 5.7.1 is vulnerable to a buffer overflow triggered by a crafted X.509 certificate, allowing an attacker to potentially overflow a buffer and execute arbitrary code. Public advisories note the issue in the gmp-based RSA verification path and lin...

CVE-2020-4030

FreeRDP contains an out-of-bounds read in TrioParse (CVE-2020-4030) with logging potentially bypassing string length checks due to an integer overflow. The issue is fixed in version 2.1.2. Several advisories (Arch, Debian LTS, AlmaLinux, Fedora) document this and related CVEs as part of a broader...

CVE-2022-27777

CVE-2022-27777 : Rails contains an XSS vulnerability in Action View tag helpers that could allow an attacker to inject content when they can control input in specific attributes. The issue is confirmed across multiple sources (Rails ecosystem advisories and debian/security notes) and is tied to t...

CVE-2022-41325

The CVE-2022-41325 entry concerns a vulnerability in VideoLAN VLC Media Player’s VNC module up to version 3.0.17.4, caused by an integer overflow that can be triggered by opening a crafted playlist or connecting to a rogue VNC server. Impact stated: crash or potential code execution under certain...

CVE-2024-26772

CVE-2024-26772: In the Linux kernel, the fix prevents allocating blocks from a corrupted ext4 group. The patch moves the block bitmap integrity check under the group lock in ext4_mb_find_by_goal(), ensuring blocks are not allocated from a group with a corrupted bitmap. This mitigates a local-priv...

CVE-2014-9709

CVE-2014-9709 is a GD library/GD PHP extension issue in which the GetCode_ function in gd_gif_in.c (GD 2.1.1 and earlier) can cause a buffer over-read and DoS when processing a crafted GIF in imagecreatefromgif(); affects PHP builds before 5.5.21 and 5.6.x before 5.6.5. Public references in Debia...

CVE-2015-3195

CVE-2015-3195 affects OpenSSL’s ASN.1/TASN_DEC implementation mishandling errors from malformed X509_ATTRIBUTE data, enabling remote attackers to read memory of a CMS/PKCS#7 process. Public records show impact across multiple OpenSSL lines prior to updates: 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 bef...

CVE-2017-3533

CVE-2017-3533 is an access restriction bypass in the Networking component (FTP client) of Oracle/OpenJDK Java SE. The newline-injection flaw in the FTP client could allow a remote attacker to manipulate FTP connections established by a Java application. Affected: Java SE/Embedded and JRockit vari...

CVE-2017-5436

CVE-2017-5436 is an out-of-bounds write in the Graphite 2 library triggered by a malicious Graphite font, causing a potentially exploitable crash. The issue was fixed in Graphite 2 and in Mozilla products; affected Mozilla components include Thunderbird < 52.1, Firefox ESR < 45.9 and < 5...

CVE-2018-12376

CVE-2018-12376 involves memory safety bugs in Firefox 61/ESR 60.1 and Thunderbird

CVE-2018-14357

CVE-2018-14357 affects Mutt (before 1.10.1) and NeoMutt (before 2018-07-16). The flaw lets a remote IMAP server cause arbitrary commands to execute via backquote characters in the mailboxes command tied to automatic subscriptions. Root cause: improper handling/escaping of backquotes in mailbox-re...

CVE-2018-18312

Perl 5.26.3 and 5.28.0 before 5.28.1 are affected by CVE-2018-18312 due to a buffer overflow in handling crafted regular expressions (regcomp.c). The issue enables invalid writes when parsing certain regex patterns. Affected versions: Perl before 5.26.3 and 5.28.0 before 5.28.1. Fixes are availab...

CVE-2019-8907

The CVE-2019-8907 issue affects the file utility (libmagic, static libmagic.a) in version 5.35, where do_core_note in readelf.c triggers a stack corruption/DoS (and possible other impact). The connected Arch Linux advisory (ALAS-2019-1186) documents multiple CVEs in file, including CVE-2019-8907,...

CVE-2020-1735

CVE-2020-1735 is a vulnerability in the Ansible Engine where the fetch module can be intercepted, enabling an attacker to inject a new path and choose a different destination path on the controller. The issue affects all 2.7.x, 2.8.x and 2.9.x branches. Connected advisories confirm multiple vendo...

CVE-2020-6550

CVE-2020-6550 is a Use-After-Free in IndexedDB in Google Chrome before 84.0.4147.125 that could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue affects Chrome/Chromium’s IndexedDB component; root cause is a use-after-free memory error leading to potential arbit...

CVE-2021-20296

OpenEXR (IlmImf) before 3.0.0-beta is affected by CVE-2021-20296 due to a crafted input file in the Dwa decompression path that can trigger a NULL pointer dereference, primarily impacting availability. Affected versions are OpenEXR prior to 3.0.0-beta; exploitation would involve processing a mali...

CVE-2021-28091

CVE-2021-28091 affects the Lasso library. All versions prior to 2.7.0 are vulnerable due to improper verification of a cryptographic signature in SAML/XML signature processing, which can allow manipulation of SAML responses and potential impersonation. Remediation is to upgrade to version 2.7.0 o...

CVE-2022-2946

CVE-2022-2946 is a documented Use-After-Free vulnerability in vim/vim prior to 9.0.0246. The connected documents confirm Vim-related memory-safety issues across multiple advisories, but do not specify an exact fixed version for this CVE beyond general guidance to update Vim. The risk and impact a...

CVE-2023-24580

The CVE-2023-24580 issue affects Django’s Multipart Request Parser, impacting Django 3.2 up to 3.2.17, Django 4.0 up to 4.0.9, and Django 4.1 up to 4.1.6. Passing excessive multipart form parts can exhaust file descriptors or memory, enabling denial-of-service. Remediation is available: upgrade t...

CVE-2023-4909

CVE-2023-4909 describes an Inappropriate implementation in Interstitials in Google Chrome/Chromium prior to 117.0.5938.62 that allows a remote attacker to obfuscate the security UI via a crafted HTML page. The issue is documented across multiple sources (Chromium/Chrome advisories, Debian securit...

CVE-2011-1176

CVE-2011-1176 affects the Apache HTTP Server ITK MPM (mpm-itk) configuration merger in itk.c for versions 2.2.11-01 and 2.2.11-02. The flaw allows a remote attacker to potentially gain privileges by abusing configuration sections that specify NiceValue but omit AssignUserID, leveraging the root U...

CVE-2012-3363

CVE-2012-3363 : Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 mishandles SimpleXMLElement classes, enabling remote attackers to read arbitrary files or make TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request (XXE). This is cause...

CVE-2016-6354

CVE-2016-6354 describes a heap-based buffer overflow in the yy_get_next_buffer function of Flex, before version 2.6.1. The vulnerability could allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read. Connected advisories ...

CVE-2017-7658

In CVE-2017-7658, Eclipse Jetty had a flaw in how it handles HTTP requests when multiple Content-Length headers are present or when a Content-Length header accompanies a chunked encoding header. This could allow a forged or pipelined request to bypass intermediary authorization if the shorter len...

CVE-2018-12365

CVE-2018-12365 is a vulnerability where a compromised IPC child process can escape the content sandbox and list names of arbitrary files on the file system without user consent. It affects Thunderbird (versions below 60, including 52.9) and Firefox-based products (Firefox ESR < 60.1/52.9, Fire...

CVE-2019-10896

Wireshark CVE-2019-10896 affects DOF dissector in versions 2.4.0–2.4.13, 2.6.0–2.6.7, and 3.0.0. The root cause is improper handling of generated IID and OID bytes in epan/dissectors/packet-dof.c, which could cause a crash. The vulnerability is addressed by the DOF dissector fix in that file. Rem...

CVE-2019-17540

CVE-2019-17540 affects ImageMagick, with a heap-based buffer overflow in ReadPSInfo (coders/ps.c) present in releases before 7.0.8-54. This could cause crashes or instability when processing crafted PS files. Affected product/version details in the provided documents show the issue tied to ImageM...

CVE-2019-5717

Wireshark 2.6.0–2.6.5 and 2.4.0–2.4.11 had a crash in the P_MUL dissector caused by an invalid Data PDU sequence number of 0. The issue is fixed by rejecting the zero sequence number in epan/dissectors/packet-p_mul.c. Public advisories indicate fixes in later Wireshark packages (e.g., Debian DSA-...

CVE-2019-5764

CVE-2019-5764 is a use-after-free/incorrect pointer management in the WebRTC code path of Chromium/Google Chrome, prior to version 72.0.3626.81, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Public references in Debian advisories and Fedora/Nessus entr...

CVE-2019-9433

CVE-2019-9433 is a libvpx vulnerability identified in multiple advisories. The issue is described as an information disclosure caused by improper input validation in libvpx, enabling remote information disclosure without extra execution privileges (user interaction required per the CVE entry). Th...

CVE-2020-11098

CVE-2020-11098 : FreeRDP before version 2.1.2 contains an out-of-bounds read in glyph_cache_put, affecting all FreeRDP clients with the +glyph-cache option enabled. The issue is fixed in version 2.1.2. Affected products/versions are limited to FreeRDP prior to 2.1.2; there is no exploitation deta...

CVE-2021-21212

CVE-2021-21212 affects Google Chrome on ChromeOS (and Chromium-based builds) with an incorrect security UI in the Network Config UI, before version 90.0.4430.72. The underlying issue is a security UI flaw that could allow a remote attacker to potentially compromise WiFi connection security via a ...

CVE-2021-21223

CVE-2021-21223 describes an integer overflow in Mojo inside Google Chrome prior to 90.0.4430.85. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Affected: Google Chrome (Mojo component) before 90.0.4430.85. Impact per ...

CVE-2021-23215

CVE-2021-23215 concerns the OpenEXR library’s DwaCompressor. Affected: OpenEXR versions before 3.0.1. Description: an integer overflow leads to a heap-buffer overflow, which could cause an application crash when processing crafted EXR files. Root cause: overflow in DwaCompressor logic. Impact: de...

CVE-2021-26260

CVE-2021-26260 reports an integer overflow in OpenEXR’s DwaCompressor, causing a heap-buffer overflow in affected builds before 3.0.1. Multiple connected sources confirm the issue (OpenEXR library, DwaCompressor, and related advisories) and note the flaw can crash applications compiled with OpenE...

CVE-2021-33287

NTFS-3G contains a heap buffer overflow in ntfs_attr_pread_i when reading specially crafted NTFS attributes, affecting versions

CVE-2022-0171

CVE-2022-0171 affects the Linux kernel KVM SEV API and allows a non-root host-user application to crash the host kernel by creating a confidential guest VM on AMD SEV-capable CPUs. The issue is local in scope (AV:L, AC:L, PR:L) with a CVSSv3 base score of 5.5 (I:A/H). A fix is available in the Li...

CVE-2023-1855

CVE-2023-1855 describes a use-after-free in xgene_hwmon_remove (drivers/hwmon/xgene-hwmon.c) of the Linux kernel hardware monitoring driver. The Astra Linux security bulletin mirrors this flaw and notes it could allow a local attacker to crash the system or leak kernel memory due to a race condit...

CVE-2023-5187

CVE-2023-5187 is a use-after-free vulnerability in Chrome/Chromium extensions prior to 117.0.5938.132. A user who installs a crafted malicious extension could trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution. Affected: Google Chrome/Chromium extensi...

CVE-2023-52619

The CVE-2023-52619 issue affects the Linux kernel’s pstore/ram subsystem, where setting CPU count to an odd number causes zone_size to be odd, breaking address alignment and risking crashes when accessing zone memory. The documented fix uses ALIGN_DOWN() to ensure even zone sizes, preventing non‑...

CVE-2017-1000385

CVE-2017-1000385 affects the Erlang OTP TLS server, where RSA PKCS#1 v1.5 padding errors elicit different TLS alerts, enabling a Bleichenbacher-style oracle to decrypt content or forge signatures with the server’s private key. Public disclosures describe a CERT/ROBOT-related risk and list affecte...

CVE-2017-2870

CVE-2017-2870 is an exploitable integer overflow in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang, causing a heap overflow that can lead to remote code execution via a crafted TIFF file or URL. Documented in multiple advisories and vendor bulletins linked to thi...

CVE-2018-10850

CVE-2018-10850 affects 389-ds-base prior to versions 1.4.0.10 and 1.3.8.3, caused by a race condition in how persistent searches are handled. An anonymous attacker could trigger a crash and denial of service under load. Affected products across multiple distributions (e.g., 389-ds-base packages o...

CVE-2018-14719

CVE-2018-14719 involves FasterXML Jackson Databind 2.x up to but before 2.9.7. The root cause is failure to block polymorphic deserialization of certain gadgets (blaze-ds-opt/blaze-ds-core), enabling remote code execution if the gadget classes can be reached. The IBM bulletin references Jackson D...

CVE-2018-19409

Ghostscript advisory CVE-2018-19409 affects Artifex Ghostscript prior to 9.26, where LockSafetyParams is not checked correctly if another device is used. This is part of several post-2018 vulnerabilities in Ghostscript; Red Hat/CentOS and Debian/LTS advisories indicate that fixes were released in...

CVE-2018-2588

CVE-2018-2588 affects Oracle Java SE (Java SE, Java SE Embedded, JRockit) LDAP component. Root cause: a vulnerability in the LDAP subcomponent could allow an attacker with network access to read data from affected Java deployments. Affected versions cited include Java SE: 6u171, 7u161, 8u152, 9.0...

CVE-2019-1000020

CVE-2019-1000020 affects libarchive. The documented issue is an infinite loop in the ISO9660 parser (archive_read_support_format_iso9660.c)—specifically in read_CE()/parse_rockridge()—which can cause DoS when a victim opens a specially crafted ISO9660 file. Affected: libarchive versions from v2.8...

CVE-2019-10185

The connected Nessus entries confirm CVE-2019-10185 affects icedtea-web up to and including 1.7.2 and 1.8.2, with a zip-slip vulnerability during auto-extraction of a JAR that can write files to arbitrary locations and potentially break out of the sandbox. This is tied to multiple advisories (e.g...

CVE-2020-11095

CVE-2020-11095 affects FreeRDP prior to 2.1.2, where an out-of-bounds read accesses memory outside the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. Multiple connected sources (Debian/Alpine advisories and related vendor notes) confirm this exact flaw and its fix in version 2....

CVE-2021-21172

CVE-2021-21172 corresponds to a policy enforcement error in Chrome's File System API on Windows, allowing a remote attacker to bypass filesystem restrictions via a crafted HTML page. Affected: Google Chrome/Chromium prior to 89.0.4389.72 (File System API component). Root cause: insufficient polic...