CVE-2020-11099

CVE-2020-11099 affects FreeRDP before 2.1.2, with an out-of-bounds read in the function license_read_new_or_upgrade_license_packet that can read beyond an internal buffer when a license packet is manipulated. The vulnerability is fixed in version 2.1.2. Multiple connected sources (e.g., Debian, A...

CVE-2020-25652

CVE-2020-25652 affects spice-vdagentd, where improper handling of client connections over the UNIX domain socket /run/spice-vdagentd/spice-vdagent-sock lets an unprivileged local guest user prevent legitimate agents from connecting, causing a denial of service and affecting availability. The vuln...

CVE-2021-21172

CVE-2021-21172 corresponds to a policy enforcement error in Chrome's File System API on Windows, allowing a remote attacker to bypass filesystem restrictions via a crafted HTML page. Affected: Google Chrome/Chromium prior to 89.0.4389.72 (File System API component). Root cause: insufficient polic...

CVE-2021-21239

CVE-2021-21239 affects PySAML2 (pre-6.5.0) and stems from improper verification of SAML signatures when using the default CryptoBackendXmlSec1 backend. The underlying xmlsec1 verification can accept arbitrary keys embedded in the document instead of restricting to trusted IdP certificates, enabli...

CVE-2021-30953

CVE-2021-30953 is a WebKit Web content handling vulnerability (out-of-bounds read) that could allow arbitrary code execution. It is fixed in Safari 15.2, iOS 15.2, iPadOS 15.2, macOS Monterey 12.1, and tvOS 15.2. Public sources in the Connected Documents corroborate the issue as an out-of-bounds ...

CVE-2021-32492

CVE-2021-32492 affects djvulibre up to version 3.5.28. The flaw is an out-of-bounds read in DJVU::DataPool::has_data() when processing crafted DjVu files, which may cause an application crash and other consequences. Advisories (e.g., Arch Linux ASA-202105-18) describe potential arbitrary code exe...

CVE-2021-39261

CVE-2021-39261 affects NTFS-3G prior to 2021.8.22, with a heap-based buffer overflow in ntfs_compressed_pwrite. Technical details in connected docs confirm the vulnerable component and issue; mitigations are release updates to 2021.8.22 and later (e.g., Debian/Alt Linux advisories). No exploit de...

CVE-2022-0361

CVE-2022-0361 is a Vim vulnerability described as a heap-based buffer overflow in the Vim source (vim/vim) prior to 8.2. The initial description and connected docs confirm the issue exists in Vim code paths that could lead to memory corruption. Public materials here do not provide concrete root-c...

CVE-2022-2873

CVE-2022-2873 refers to an out-of-bounds memory access in the Linux kernel’s Intel iSMT SMBus 2.0 host controller driver, triggered by I2C_SMBUS_BLOCK_DATA with malicious input. The vulnerability allows a local attacker to crash the system (local denial of service); CVSSv3.1 base score 5.5 (Local...

CVE-2023-46234

CVE-2023-46234 affects the node-browserify-sign package used to provide browser-crypto signing functionality. The root cause is an upper bound check issue in the dsaVerify function, which allows an attacker to construct signatures that can be verified by any public key, enabling a signature forge...

CVE-2023-5724

The connected Astra Linux bulletin confirms CVE-2023-5724: Drivers are not always robust to extremely large draw calls, potentially causing crashes in Firefox before 119, Firefox ESR before 115.4, and Thunderbird before 115.4.1. Affected versions are Firefox <119, Firefox ESR <115.4, Thunde...

CVE-2025-41244

CVE-2025-41244 covers a local privilege-escalation in Open VM Tools used with VMware Aria Operations; a non-administrative local user with access to a VM that has VMware Tools (SDMP enabled) can escalate to root within the same VM. Affected component: open-vm-tools bundled with VMware Tools; root...

CVE-2002-0392

Affected software: Apache HTTP Server 1.3.x (up to 1.3.24) and 2.0.x (up to 2.0.36). The vulnerability arises from processing chunk-encoded HTTP requests, causing Apache to compute an incorrect size, which can lead to a remote denial of service and, in some reports, potential arbitrary code execu...

CVE-2008-7220

PrototypeJS (prototype.js) prior to 1.6.0.2 has an unspecified vulnerability that could permit a remote attacker to perform cross-site Ajax requests via unknown vectors. The issue is referenced in multiple sources, including IBM security notices for IBM Cloud Pak System variants (recommending upg...

CVE-2018-14598

The CVE-2018-14598 issue affects libX11 (XListExtensions in ListExt.c) where a malicious server can craft replies that overflow the first string, causing a NULL pointer to be freed later and triggering a DoS via segmentation fault. The problem is tied to input validation in XListExtensions and re...

CVE-2018-18314

CVE-2018-18314 affects Perl before 5.26.3, with a buffer overflow triggered by a crafted regular expression that leads to invalid write operations during compilation. Connected sources corroborate the issue and mention related details, including a root cause in regcomp.c (S_regatom) and potential...

CVE-2018-19628

Wireshark vulnerability CVE-2018-19628 affects the ZigBee ZCL dissector in Wireshark 2.6.0–2.6.4, causing a crash due to a divide-by-zero in epan/dissectors/packet-zbee-zcl-lighting.c. The issue is fixed by preventing the divide-by-zero in the dissector. Vulnerable component/file: ZigBee ZCL diss...

CVE-2020-15306

CVE-2020-15306 affects OpenEXR up to v2.5.2: invalid chunkCount attributes can cause a heap buffer overflow in getChunkOffsetTableSize() (IlmImf/ImfMisc.cpp). Connected docs confirm the vulnerability in OpenEXR 2.5.2 and prior releases. Impact is a heap-based overflow via crafted EXR files; remed...

CVE-2020-15963

CVE-2020-15963 concerns Google Chrome where insufficient policy enforcement in extensions could allow a user-tempted installation of a malicious extension to sandbox-escape. Affected software: Google Chrome prior to 85.0.4183.121 (extensions component policy enforcement). Root cause: insufficient...

CVE-2020-25651

CVE-2020-25651 affects spice-vdagent (SPICE file transfer protocol) where file data can leak to a client connection or cause denial of service for spice-vdagent versions 0.20 and earlier. Exploitation could occur via the host-to-VM transfer path; impact includes confidentiality loss and availabil...

CVE-2020-25654

CVE-2020-25654 affects Pacemaker: an ACL bypass flaw where a local attacker in the haclient group can use IPC to communicate with various daemons and perform tasks disallowed by ACLs. Documented impact includes potential bypass of ACL restrictions via IPC instead of configuration. Multiple adviso...

CVE-2020-9402

CVE-2020-9402 affects Django: SQL injection via a tolerance parameter in GIS functions/aggregates when using Oracle. Affected versions are Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4. The root cause is improper escaping allowing crafted tolerance to inject SQL. Remediation...

CVE-2021-3545

CVE-2021-3545 affects QEMU’s virtio vhost-user GPU device (vhost-user-gpu) up to version 6.0. The flaw is in virgl_cmd_get_capset_info() within contrib/vhost-user-gpu/virgl.c and arises from reading uninitialized memory, allowing a malicious guest to leak host memory. Connected sources confirm th...

CVE-2021-39365

CVE-2021-39365 affects GNOME Grilo with TLS certificate verification disabled on SoupSessionAsync/SoupSessionSync (grl-net-wc.c). Connected advisories show mitigations via upgraded Grilo packages in several distros (e.g., Debian bullseye 0.3.13-1+deb11u1; Mageia updates; AlmaLinux ALAS2 advisorie...

CVE-2021-41991

Overview: CVE-2021-41991 affects strongSwan prior to 5.9.4, where an in-memory certificate cache can overflow after numerous requests with different certificates. The cache replacement uses a (faulty) random selection, allowing an integer overflow that can lead to a double-dereference and out-of-...

CVE-2022-0417

CVE-2022-0417 is a heap-based buffer overflow in Vim (vim/vim) prior to 8.2.4743-1. Multiple connected advisories confirm a risk of crash or code execution when processing crafted input. Affected packages include Vim across various platforms (Ubuntu, Amazon Linux, Cloud Foundry advisories; Astra ...

CVE-2022-23037

Summary (CVE-2022-23037 context): Astra Linux security advisories describe Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus) using grant-table interfaces in a way vulnerable to race conditions in removing access rights. The result is that a backend may retain access to a...

CVE-2022-23633

CVE-2022-23633 (Rails Action Pack) : Under certain circumstances, response bodies could remain unclosed, causing ActionDispatch::Executor to fail to reset thread-local state between requests and potentially leak data to subsequent requests. This affects Rails Action Pack components used to handle...

CVE-2022-32214

CVE-2022-32214 affects the Node.js http module via the llhttp parser, where versions <14.20.1, <16.17.1, and =14.20.1, >=16.17.1, >=18.9.1 or newer Node.js releases that bundle these llhttp versions). If exploitation details or CVSS changes are needed, refer to the linked advisories i...

CVE-2023-3777

CVE-2023-3777 is a use-after-free in Linux kernel nf_tables (netfilter). When nf_tables_delrule() flushes table rules, it may release objects if the chain is bound, enabling local privilege escalation. Mitigation: upgrade past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8 (Linux kernel versions...

CVE-2014-9751

CVE-2014-9751 affects the Network Time Protocol daemon (ntpd) in Linux/OS X builds of NTP 4.x prior to 4.2.8p1. The read_network_packet function fails to correctly identify IPv6 loopback (::1) sources, allowing remote attackers to spoof restricted packets and potentially disrupt or manipulate ntp...

CVE-2015-7981

CVE-2015-7981 affects libpng in multiple branches: 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17. The issue is an out-of-bounds read in png_convert_to_rfc1123 triggered by crafted tIME chunk data, enabling a remote attacker to disclose sensitive process memory information. The...

CVE-2017-3317

CVE-2017-3317 affects Oracle MySQL Server (Logging subcomponent). Affected versions are 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The flaw allows a high-privilege user with logon access to cause a hang or crash (DoS) of MySQL Server, with exploitation requiring user interact...

CVE-2018-10768

CVE-2018-10768 describes a NULL pointer dereference in Poppler’s AnnotPath::getCoordsLength (Annot.h) affecting Ubuntu’s Poppler 0.24.5. A crafted input can cause a remote denial of service. Multiple connected advisories note that later Poppler versions (e.g., 0.41.0) are not affected. Related do...

CVE-2018-1125

CVE-2018-1125 affects procps-ng up to version 3.3.15, with a stack-based buffer overflow in pgrep caused by a strncat() to a stack-allocated string. The impact is mitigated by Fortify builds (e.g., on RHEL/Fedora) and, in those cases, can be limited to a crash. Connected sources confirm the vulne...

CVE-2019-1000019

CVE-2019-1000019 concerns libarchive’s 7z decompression path. Affected versions (from release v3.0.2 onward) contain a CWE-125 Out-of-bounds Read in archive_read_support_format_7zip.c header_bytes(), exploitable by opening a specially crafted 7zip file and causing a crash/DoS. Public reports conf...

CVE-2019-20043

CVE-2019-20043 affects WordPress core (wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php) in versions 3.7–5.3.0, where authenticated users without publish rights can mark posts as sticky via the REST API, bypassing contributor-like restrictions. The impact is that unauthorized use...

CVE-2019-20919

CVE-2019-20919 is related to the Perl DBI module. The issue affects Perl-DBI before version 1.643, where hv_fetch() checks for NULL but then calls SvOK(profile), causing a NULL pointer dereference. Several advisories (EulerOS, Red Hat, OpenVAS prompts) reference this CVE alongside CVE-2014-10401 ...

CVE-2019-8905

CVE-2019-8905 affects the file utility (libmagic.a) do_core_note in readelf.c, version 5.35, via a stack-based buffer over-read related to file_printable. This can allow information disclosure and may cause denial of service when processing crafted ELF files. Upstream fixes exist in file version ...

CVE-2020-11043

CVE-2020-11043 affects FreeRDP up to version 2.0.0, describing an out-of-bounds read in rfx_process_message_tileset that causes garbled colors on screen when feeding invalid data to the RFX decoder. The issue has been patched in version 2.1.0. Public advisories and release notes from multiple sou...

CVE-2021-33286

NTFS-3G (Tuxera NTFS-3G) is affected for versions older than 2021.8.22. A heap-based overflow is triggered by a specially crafted Unicode string in an NTFS image, which can lead to code execution. The issue is explicitly associated with CVE-2021-33286 and is corroborated across multiple advisorie...

CVE-2021-46790

CVE-2021-46790 affects NTFS-3G’s ntfsck, causing a heap-based buffer overflow in versions up to 2021.8.22. The upstream note states ntfsck is deprecated, but it remains shipped in some distros. Connected advisories confirm the issue and document fixes/upgrades: Debian DSA-5160-1 and various Linux...

CVE-2022-2304

Mode C (detailed and supported): CVE-2022-2304 affects vim/vim up to version 9.0, with a stack-based buffer overflow reported in multiple code paths. The Astra Linux bulletin and the ALAS2 advisory confirm the same issue class and tie it to Vim’s handling of crafted input, enabling crashes or pot...

CVE-2022-40146

CVE-2022-40146 is a Server-Side Request Forgery in Apache XML Graphics Batik (version 1.14) that allows an attacker to access files via a Jar URL. Multiple connected advisories confirm the vulnerability and urge upgrading Batik to patched versions; Debian and Gentoo advisories show Batik updates ...

CVE-2022-46341

CVE-2022-46341 affects the X.Org X server (XIPassiveUngrab) where the handler accesses out-of-bounds memory when invoked with high keycode/button code. The connected advisories confirm this in various distributions (ALM/ALAS), noting local privilege elevation on privileged X server and potential ...

CVE-2023-2133

CVE-2023-2133 affects Chromium/Google Chrome’s Service Worker API. It describes an out-of-bounds memory access that could enable heap corruption via a crafted HTML page. Impact is high (C/H/I/A) with network attacker vector and user interaction required. The description states a fix for Chromium/...

CVE-2024-0567

CVE-2024-0567 – GnuTLS issue affects the certificate chain validation when using cockpit-certificate-ensure, causing a denial-of-service that can be triggered by an unauthenticated remote attacker. Documents refer to GnuTLS in cockpit and describe distributed-trust chain rejection as the root cau...

CVE-2012-6702

CVE-2012-6702 affects the Expat XML parser. Root cause: Expat may call srand or be used with a non-zero seed in XML_SetHashSalt, weakening cryptographic protections. Impact: context-dependent attackers could defeat cryptographic protections via srand-based vectors. No explicit fix in the provided...

CVE-2013-4235

CVE-2013-4235 refers to a shadow-utils TOCTOU (time-of-check-time-of-use) race condition when copying and removing directory trees. The Connected IBM X-Force bulletin lists this CVE with CWE-367, a base score of 3.7, CVSS vector (AV:L/AC:H/Au:N/C:P/I:P/A:P). The Initial description notes the race...

CVE-2015-1774

CVE-2015-1774 affects LibreOffice and Apache OpenOffice via the HWP filter. A crafted HWP document can trigger an out-of-bounds write, allowing remote DoS or possible arbitrary code execution. Affected: LibreOffice before 4.3.7 and 4.4.x before 4.4.2; OpenOffice before 4.1.2. Remediation varies b...