CVE-2017-6815

WordPress before 4.7.3 (wp-includes/pluggable.php) is affected by CVE-2017-6815. The vulnerability arises from a control-character input that bypasses redirect URL validation, allowing an unauthenticated, remote attacker to craft a link that redirects a user to an arbitrary site. A fix is availab...

CVE-2018-17540

CVE-2018-17540 : The gmp plugin in strongSwan before 5.7.1 is vulnerable to a buffer overflow triggered by a crafted X.509 certificate, allowing an attacker to potentially overflow a buffer and execute arbitrary code. Public advisories note the issue in the gmp-based RSA verification path and lin...

CVE-2018-5158

CVE-2018-5158: Firefox PDF viewer has insufficient sanitization of PostScript calculator functions, enabling injection of malicious JavaScript via crafted PDFs. Impact affects Firefox ESR < 52.8 and Firefox

CVE-2019-13728

CVE-2019-13728 is an out-of-bounds write in the v8 JavaScript library used by Chromium/Google Chrome, causing heap corruption. A remote attacker could potentially exploit this via a crafted HTML page. Remediation per connected advisories: upgrade to Chromium/Chrome versions where this CVE is fixe...

CVE-2019-13758

CVE-2019-13758: Google Chrome/Chromium navigation policy enforcement flaw on Android allowed remote bypass of navigation restrictions via a crafted HTML page. Affected product: Chrome on Android prior to 79.0.3945.79. Impact: bypass of navigation restrictions (no exploitation details provided). R...

CVE-2019-19269

CVE-2019-19269 — ProFTPD TLS CRL validation NULL-deref . The issue occurs in tls_verify_crl where a NULL pointer may be dereferenced during client certificate validation in a mutual TLS setup, caused by OpenSSL sk_X509_REVOKED_value() returning a NULL for an empty CRL. Affected product is ProFTPD...

CVE-2019-5781

CVE-2019-5781 affects Google Chrome: Incorrect handling of a confusable character in the Omnibox (URL bar). Prior to 72.0.3626.81, a remote attacker could spoof the Omnibox via a crafted domain name. The connected documents do not provide additional technical details, exploitation methods, or rem...

CVE-2020-16116

CVE-2020-16116 affects KDE Ark prior to version 20.08.0, where kerfuffle/jobs.cpp does not sanitize extraction paths, allowing a crafted archive to write outside the extraction directory via a ../ path traversal. The impact is potential writing of files outside the target directory, with follow-o...

CVE-2020-6516

CVE-2020-6516 is a Chrome/CORB policy-bypass vulnerability where cross-origin data could be leaked via a crafted HTML page. Affected product: Google Chrome prior to 84.0.4147.89 (Chromium-based browser). Root cause: CORS policy bypass in Chrome’s handling of cross-origin requests. Impact: potenti...

CVE-2020-8167

The CVE-2020-8167 issue is a CSRF vulnerability in Rails UJS (Rails UJS) affecting Rails up to 6.0.3. If an attacker can control the href of a link or the action of a form, they can cause the CSRF token to be sent to a cross‑origin URL, potentially leaking tokens. Remediation: upgrade Rails to Ra...

CVE-2021-23215

CVE-2021-23215 concerns the OpenEXR library’s DwaCompressor. Affected: OpenEXR versions before 3.0.1. Description: an integer overflow leads to a heap-buffer overflow, which could cause an application crash when processing crafted EXR files. Root cause: overflow in DwaCompressor logic. Impact: de...

CVE-2021-29458

CVE-2021-29458 affects Exiv2 up to v0.27.3, where an out-of-bounds read occurs when writing metadata to a crafted image file, potentially crashing Exiv2 and causing a denial of service. The issue is fixed in v0.27.4. Remediate by upgrading to Exiv2 0.27.4 or later; no further details on exploitat...

CVE-2022-0417

CVE-2022-0417 is a heap-based buffer overflow in Vim (vim/vim) prior to 8.2.4743-1. Multiple connected advisories confirm a risk of crash or code execution when processing crafted input. Affected packages include Vim across various platforms (Ubuntu, Amazon Linux, Cloud Foundry advisories; Astra ...

CVE-2022-32214

CVE-2022-32214 affects the Node.js http module via the llhttp parser, where versions <14.20.1, <16.17.1, and =14.20.1, >=16.17.1, >=18.9.1 or newer Node.js releases that bundle these llhttp versions). If exploitation details or CVSS changes are needed, refer to the linked advisories i...

CVE-2022-3324

CVE-2022-3324 is a stack-based buffer overflow in vim/vim prior to 9.0.0598. Multiple vendors reference a fix in later vim releases (e.g., CBLMariner notes vim 9.0.0614-1; Debian tracks a fix in vim 2:8.2.2434-3+deb11u3; Cloud Linux/ALAS advisories describe the underlying issue as a window width/...

CVE-2023-5187

CVE-2023-5187 is a use-after-free vulnerability in Chrome/Chromium extensions prior to 117.0.5938.132. A user who installs a crafted malicious extension could trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution. Affected: Google Chrome/Chromium extensi...

CVE-2016-6354

CVE-2016-6354 describes a heap-based buffer overflow in the yy_get_next_buffer function of Flex, before version 2.6.1. The vulnerability could allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read. Connected advisories ...

CVE-2017-1000385

CVE-2017-1000385 affects the Erlang OTP TLS server, where RSA PKCS#1 v1.5 padding errors elicit different TLS alerts, enabling a Bleichenbacher-style oracle to decrypt content or forge signatures with the server’s private key. Public disclosures describe a CERT/ROBOT-related risk and list affecte...

CVE-2017-10108

CVE-2017-10108 affects Oracle Java SE, Java SE Embedded, and JRockit (Serialization). Affected versions include Java SE 6u151, 7u141, 8u131; Java SE Embedded 8u131; JRockit R28.3.14. The vulnerability allows unauthenticated remote exploitation via multiple protocols, potentially causing a partial...

CVE-2018-12376

CVE-2018-12376 involves memory safety bugs in Firefox 61/ESR 60.1 and Thunderbird

CVE-2018-12390

CVE-2018-12390 corresponds to memory-safety bugs in Mozilla Firefox and Thunderbird prior to patched versions. Affected: Firefox < 63, Firefox ESR < 60.3, Thunderbird

CVE-2018-14357

CVE-2018-14357 affects Mutt (before 1.10.1) and NeoMutt (before 2018-07-16). The flaw lets a remote IMAP server cause arbitrary commands to execute via backquote characters in the mailboxes command tied to automatic subscriptions. Root cause: improper handling/escaping of backquotes in mailbox-re...

CVE-2018-16057

Wireshark CVE-2018-16057 affects radiotap dissector crashes in Wireshark 2.6.0–2.6.2, 2.4.0–2.4.8, and 2.2.0–2.2.16. The issue was fixed by validating iterator operations in epan/dissectors/packet-ieee80211-radiotap-iter.c, addressing a crash caused by improper iterator handling. No additional ex...

CVE-2018-16874

CVE-2018-16874 affects Go’s go get in GOPATH mode when the import path contains curly braces, enabling an arbitrary filesystem write and potential code execution. The vulnerability is documented for Go <1.10.6 and

CVE-2018-18312

Perl 5.26.3 and 5.28.0 before 5.28.1 are affected by CVE-2018-18312 due to a buffer overflow in handling crafted regular expressions (regcomp.c). The issue enables invalid writes when parsing certain regex patterns. Affected versions: Perl before 5.26.3 and 5.28.0 before 5.28.1. Fixes are availab...

CVE-2019-5762

CVE-2019-5762 is a PDFium-related memory-management issue in Google Chrome prior to 72.0.3626.81, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF. The vulnerability stems from inappropriate memory handling when caching in PDFium. The documented impact is ...

CVE-2019-5772

The CVE-2019-5772 entry affects Google Chrome's PDFium component. Description: Sharing of objects over calls into the JavaScript runtime in PDFium can lead to heap corruption when processing a crafted PDF, enabling a remote attacker to potentially exploit the issue. Affected product/area: Chrome ...

CVE-2019-5806

The CVE-2019-5806 entry concerns Google Chrome/Chromium on Windows prior to 74.0.3729.108. A concrete flaw is an integer overflow in the ANGLE library, which can lead to heap corruption via a crafted HTML page. The issue is actionable in the browser context where remote attackers could exploit it...

CVE-2019-8907

The CVE-2019-8907 issue affects the file utility (libmagic, static libmagic.a) in version 5.35, where do_core_note in readelf.c triggers a stack corruption/DoS (and possible other impact). The connected Arch Linux advisory (ALAS-2019-1186) documents multiple CVEs in file, including CVE-2019-8907,...

CVE-2021-21160

CVE-2021-21160 is a heap buffer overflow in WebAudio within Chromium/Google Chrome prior to version 89.0.4389.72. A remote attacker could exploit this via a crafted HTML page to cause heap corruption. The connected sources confirm this issue across multiple advisories (Chromium/Chromebook updates...

CVE-2021-4009

Affected software: xorg-x11-server (versions before 21.1.2 and before 1.20.14). Fault: out-of-bounds access in SProcXFixesCreatePointerBarrier. Impact: potential data confidentiality, integrity, and availability compromise. Status: fixed in updated releases (e.g., 21.1.2 and 1.20.14 lineage) per ...

CVE-2022-27223

The CVE-2022-27223 entry concerns Linux kernel code, specifically the udc-xilinx USB gadget driver (drivers/usb/gadget/udc/udc-xilinx.c). Affected are kernel builds before 5.16.12 where the endpoint index is not validated and can be manipulated by the host to trigger out-of-array access. The desc...

CVE-2023-5725

CVE-2023-5725 is a documented vulnerability affecting Firefox (before 119), Firefox ESR (before 115.4), and Thunderbird (before 115.4.1). A malicious installed WebExtension could open arbitrary URLs, which under certain conditions could enable collection of sensitive user data. The connected docu...

CVE-2009-3094

The CVE-2009-3094 issue affects Apache HTTP Server’s mod_proxy_ftp (ap_proxy_ftp_handler in proxy modules) and is caused by insufficient input validation in responses to EPSV commands. This allowed remote FTP servers to trigger a NULL pointer dereference, crashing a child httpd process and causin...

CVE-2015-3195

CVE-2015-3195 affects OpenSSL’s ASN.1/TASN_DEC implementation mishandling errors from malformed X509_ATTRIBUTE data, enabling remote attackers to read memory of a CMS/PKCS#7 process. Public records show impact across multiple OpenSSL lines prior to updates: 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 bef...

CVE-2018-12365

CVE-2018-12365 is a vulnerability where a compromised IPC child process can escape the content sandbox and list names of arbitrary files on the file system without user consent. It affects Thunderbird (versions below 60, including 52.9) and Firefox-based products (Firefox ESR < 60.1/52.9, Fire...

CVE-2019-10896

Wireshark CVE-2019-10896 affects DOF dissector in versions 2.4.0–2.4.13, 2.6.0–2.6.7, and 3.0.0. The root cause is improper handling of generated IID and OID bytes in epan/dissectors/packet-dof.c, which could cause a crash. The vulnerability is addressed by the DOF dissector fix in that file. Rem...

CVE-2019-13735

CVE-2019-13735 is a Chrome/Chromium vulnerability: an out-of-bounds write in the V8 JavaScript engine that could allow remote code execution inside the sandbox via a crafted HTML page. Public details in connected sources identify the affected component (V8 in Chromium/Chrome) and confirm remediat...

CVE-2019-17540

CVE-2019-17540 affects ImageMagick, with a heap-based buffer overflow in ReadPSInfo (coders/ps.c) present in releases before 7.0.8-54. This could cause crashes or instability when processing crafted PS files. Affected product/version details in the provided documents show the issue tied to ImageM...

CVE-2019-17570

The CVE-2019-17570 issue affects Apache XML-RPC (ws-xmlrpc) Java library. Root cause: untrusted deserialization in XmlRpcResponseParser:addResult that could allow a malicious XML-RPC server to cause arbitrary code execution on a vulnerable client. Impact: high (remote code execution) with network...

CVE-2019-9959

CVE-2019-9959 affects Poppler (PDF rendering library); the root cause is an integer overflow in JPXStream::init due to not checking negative stream length, enabling allocation of a large heap memory chunk controlled by an attacker. Affected versions include Poppler 0.78.0 and earlier. Connected a...

CVE-2020-25654

CVE-2020-25654 affects Pacemaker: an ACL bypass flaw where a local attacker in the haclient group can use IPC to communicate with various daemons and perform tasks disallowed by ACLs. Documented impact includes potential bypass of ACL restrictions via IPC instead of configuration. Multiple adviso...

CVE-2021-20296

OpenEXR (IlmImf) before 3.0.0-beta is affected by CVE-2021-20296 due to a crafted input file in the Dwa decompression path that can trigger a NULL pointer dereference, primarily impacting availability. Affected versions are OpenEXR prior to 3.0.0-beta; exploitation would involve processing a mali...

CVE-2021-21239

CVE-2021-21239 affects PySAML2 (pre-6.5.0) and stems from improper verification of SAML signatures when using the default CryptoBackendXmlSec1 backend. The underlying xmlsec1 verification can accept arbitrary keys embedded in the document instead of restricting to trusted IdP certificates, enabli...

CVE-2021-32492

CVE-2021-32492 affects djvulibre up to version 3.5.28. The flaw is an out-of-bounds read in DJVU::DataPool::has_data() when processing crafted DjVu files, which may cause an application crash and other consequences. Advisories (e.g., Arch Linux ASA-202105-18) describe potential arbitrary code exe...

CVE-2021-35269

NTFS-3G vulnerability CVE-2021-35269 affects ntfs-3g of versions prior to 2021.8.22. A specially crafted NTFS attribute from the MFT may trigger a heap buffer overflow in ntfs_attr_setup_flag, allowing code execution and privilege escalation. Public advisories (Alpine Linux and Debian/Marian refe...

CVE-2021-39261

CVE-2021-39261 affects NTFS-3G prior to 2021.8.22, with a heap-based buffer overflow in ntfs_compressed_pwrite. Technical details in connected docs confirm the vulnerable component and issue; mitigations are release updates to 2021.8.22 and later (e.g., Debian/Alt Linux advisories). No exploit de...

CVE-2021-3973

CVE-2021-3973 (vim) : A heap-based buffer overflow in vim affects the vim package (older than 8.2.4081-1). Upgrading to 8.2.4081-1 or newer is the advised fix per CVE notes and related advisories. The issue is described as memory handling/filename parsing during certain operations that can crash ...

CVE-2022-0171

CVE-2022-0171 affects the Linux kernel KVM SEV API and allows a non-root host-user application to crash the host kernel by creating a confidential guest VM on AMD SEV-capable CPUs. The issue is local in scope (AV:L, AC:L, PR:L) with a CVSSv3 base score of 5.5 (I:A/H). A fix is available in the Li...

CVE-2022-0908

CVE-2022-0908 affects LibTIFF: a NULL source pointer passed to memcpy() in TIFFFetchNormalTag() (tif_dirread.c) up to version 4.3.0 can cause a denial of service when processing a crafted TIFF file. Connected advisories confirm this issue and reference libtiff variants affected across Linux distr...