CVE-2022-0924

CVE-2022-0924 affects libtiff:Out-of-bounds Read in tiffcp (libtiff 4.3.0) via crafted TIFF file leading to DoS/crash. Root cause involves tiffcp code path; fix available with commit 408976c4. Affected advisories confirm the vulnerability and recommend upgrading libtiff to patched releases to mit...

CVE-2023-2133

CVE-2023-2133 affects Chromium/Google Chrome’s Service Worker API. It describes an out-of-bounds memory access that could enable heap corruption via a crafted HTML page. Impact is high (C/H/I/A) with network attacker vector and user interaction required. The description states a fix for Chromium/...

CVE-2023-52597

CVE-2023-52597 affects the Linux kernel KVM for s390. The vulnerability arises in kvm_arch_vcpu_ioctl_set_fpu(), which can set the FLOATING-POINT CONTROL (FPC) register of a guest and, due to a test of validity, may corrupt the host process’s fpc if an interrupt occurs during the test. The patch ...

CVE-2024-26640

CVE-2024-26640 — Linux kernel TCP rx zerocopy sanity checks (Mode C) Affects: Linux kernel TCP rx zerocopy path. Root cause: can_map_frag() lacked validation when mapping NIC-allocated pages, risking misuse of pages owned by filesystems. The patch adds two checks: (1) the page must not be a compo...

CVE-2014-9709

CVE-2014-9709 is a GD library/GD PHP extension issue in which the GetCode_ function in gd_gif_in.c (GD 2.1.1 and earlier) can cause a buffer over-read and DoS when processing a crafted GIF in imagecreatefromgif(); affects PHP builds before 5.5.21 and 5.6.x before 5.6.5. Public references in Debia...

CVE-2017-18264

The CVE-2017-18264 issue affects phpMyAdmin: libraries/common.inc.php bypasses the AllowNoPassword restriction on certain PHP versions, allowing login of users with no password even when disabled. Affected versions include 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. Root cause cite...

CVE-2017-3317

CVE-2017-3317 affects Oracle MySQL Server (Logging subcomponent). Affected versions are 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The flaw allows a high-privilege user with logon access to cause a hang or crash (DoS) of MySQL Server, with exploitation requiring user interact...

CVE-2018-16471

CVE-2018-16471 (Rack XSS) Affected: Rack up to versions before 2.0.6 and 1.6.11. Issue: crafted requests can affect Rack::Request.scheme return value, enabling cross-site scripting if the value is not escaped by the app. Impact: potential XSS in apps that rely on Rack::Request.scheme without esca...

CVE-2018-18314

CVE-2018-18314 affects Perl before 5.26.3, with a buffer overflow triggered by a crafted regular expression that leads to invalid write operations during compilation. Connected sources corroborate the issue and mention related details, including a root cause in regcomp.c (S_regatom) and potential...

CVE-2018-2588

CVE-2018-2588 affects Oracle Java SE (Java SE, Java SE Embedded, JRockit) LDAP component. Root cause: a vulnerability in the LDAP subcomponent could allow an attacker with network access to read data from affected Java deployments. Affected versions cited include Java SE: 6u171, 7u161, 8u152, 9.0...

CVE-2018-2663

CVE-2018-2663 affects Oracle Java SE family, specifically the Libraries component (and related Java SE deployments) including Java SE/JRockit/Jackson? The connected documents indicate: vulnerable input handling during object deserialization in Libraries, AWT, and JNDI components, which can lead t...

CVE-2019-20043

CVE-2019-20043 affects WordPress core (wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php) in versions 3.7–5.3.0, where authenticated users without publish rights can mark posts as sticky via the REST API, bypassing contributor-like restrictions. The impact is that unauthorized use...

CVE-2019-25037

CVE-2019-25037 involves Unbound prior to 1.9.5, where an assertion failure in the dname_pkt_copy function can cause a denial of service when processing an invalid packet. The vendor disputes this as a vulnerability, and a running Unbound installation is described as not remotely or locally exploi...

CVE-2019-5717

Wireshark 2.6.0–2.6.5 and 2.4.0–2.4.11 had a crash in the P_MUL dissector caused by an invalid Data PDU sequence number of 0. The issue is fixed by rejecting the zero sequence number in epan/dissectors/packet-p_mul.c. Public advisories indicate fixes in later Wireshark packages (e.g., Debian DSA-...

CVE-2019-9433

CVE-2019-9433 is a libvpx vulnerability identified in multiple advisories. The issue is described as an information disclosure caused by improper input validation in libvpx, enabling remote information disclosure without extra execution privileges (user interaction required per the CVE entry). Th...

CVE-2020-15306

CVE-2020-15306 affects OpenEXR up to v2.5.2: invalid chunkCount attributes can cause a heap buffer overflow in getChunkOffsetTableSize() (IlmImf/ImfMisc.cpp). Connected docs confirm the vulnerability in OpenEXR 2.5.2 and prior releases. Impact is a heap-based overflow via crafted EXR files; remed...

CVE-2020-15980

CVE-2020-15980: In Chromium/Chrome, insufficient policy enforcement in the Intents component allows a local attacker to bypass navigation restrictions via crafted Intents. Impact is described as local code execution/privilege by affected components; Debian/Arch/FreeBSD advisories indicate fixes i...

CVE-2020-9402

CVE-2020-9402 affects Django: SQL injection via a tolerance parameter in GIS functions/aggregates when using Oracle. Affected versions are Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4. The root cause is improper escaping allowing crafted tolerance to inject SQL. Remediation...

CVE-2021-33289

NTFS-3G prior to version 2021.8.22 is vulnerable to a heap buffer overflow when processing a specially crafted MFT section in an NTFS image, allowing potential code execution. Connected advisories from Astra Linux, Debian (DSA-4971-1, DLA-2819-1), Alpine (CVE-2021-33289) and others confirm the is...

CVE-2021-41991

Overview: CVE-2021-41991 affects strongSwan prior to 5.9.4, where an in-memory certificate cache can overflow after numerous requests with different certificates. The cache replacement uses a (faulty) random selection, allowing an integer overflow that can lead to a double-dereference and out-of-...

CVE-2022-0361

CVE-2022-0361 is a Vim vulnerability described as a heap-based buffer overflow in the Vim source (vim/vim) prior to 8.2. The initial description and connected docs confirm the issue exists in Vim code paths that could lead to memory corruption. Public materials here do not provide concrete root-c...

CVE-2022-23037

Summary (CVE-2022-23037 context): Astra Linux security advisories describe Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus) using grant-table interfaces in a way vulnerable to race conditions in removing access rights. The result is that a backend may retain access to a...

CVE-2022-2873

CVE-2022-2873 refers to an out-of-bounds memory access in the Linux kernel’s Intel iSMT SMBus 2.0 host controller driver, triggered by I2C_SMBUS_BLOCK_DATA with malicious input. The vulnerability allows a local attacker to crash the system (local denial of service); CVSSv3.1 base score 5.5 (Local...

CVE-2023-1855

CVE-2023-1855 describes a use-after-free in xgene_hwmon_remove (drivers/hwmon/xgene-hwmon.c) of the Linux kernel hardware monitoring driver. The Astra Linux security bulletin mirrors this flaw and notes it could allow a local attacker to crash the system or leak kernel memory due to a race condit...

CVE-2023-38802

CVE-2023-38802 affects FRRouting FRR 7.5.1–9.0 and Pica8 PICOS 4.3.3.2. A remote attacker can cause a denial of service by sending a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation). Underlying cause is improper handling in BGP UPDATE processing. Impact is DoS; CVSS v3.1 ba...

CVE-2024-1151

CVE-2024-1151 is described in connected sources as a Linux kernel vulnerability affecting the Open vSwitch (OVS) sub‑component. The flaw occurs when a recursive operation calls into the same code block without validating stack depth, allowing a stack overflow that can crash the kernel or cause re...

CVE-2002-0392

Affected software: Apache HTTP Server 1.3.x (up to 1.3.24) and 2.0.x (up to 2.0.36). The vulnerability arises from processing chunk-encoded HTTP requests, causing Apache to compute an incorrect size, which can lead to a remote denial of service and, in some reports, potential arbitrary code execu...

CVE-2012-3363

CVE-2012-3363 : Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 mishandles SimpleXMLElement classes, enabling remote attackers to read arbitrary files or make TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request (XXE). This is cause...

CVE-2018-10768

CVE-2018-10768 describes a NULL pointer dereference in Poppler’s AnnotPath::getCoordsLength (Annot.h) affecting Ubuntu’s Poppler 0.24.5. A crafted input can cause a remote denial of service. Multiple connected advisories note that later Poppler versions (e.g., 0.41.0) are not affected. Related do...

CVE-2018-14598

The CVE-2018-14598 issue affects libX11 (XListExtensions in ListExt.c) where a malicious server can craft replies that overflow the first string, causing a NULL pointer to be freed later and triggering a DoS via segmentation fault. The problem is tied to input validation in XListExtensions and re...

CVE-2018-19870

CVE-2018-19870 affects Qt before 5.11.3, where a malformed GIF image triggers a NULL pointer dereference in QGifHandler, causing a segmentation fault. This vulnerability is documented in multiple advisories (including Qt 5.x before 5.11.3 and related security notices). The connected sources confi...

CVE-2018-20847

CVE-2018-20847 is an overflow vulnerability in OpenJPEG fixed by upgrading to OpenJPEG 2.4.0+. The issue arises from an improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in opj_get_encoding_parameters within openjp2/pi.c up to OpenJPEG 2.3.0, enabling an integer overflow. Public advisories fr...

CVE-2019-1000020

CVE-2019-1000020 affects libarchive. The documented issue is an infinite loop in the ISO9660 parser (archive_read_support_format_iso9660.c)—specifically in read_CE()/parse_rockridge()—which can cause DoS when a victim opens a specially crafted ISO9660 file. Affected: libarchive versions from v2.8...

CVE-2019-20919

CVE-2019-20919 is related to the Perl DBI module. The issue affects Perl-DBI before version 1.643, where hv_fetch() checks for NULL but then calls SvOK(profile), causing a NULL pointer dereference. Several advisories (EulerOS, Red Hat, OpenVAS prompts) reference this CVE alongside CVE-2014-10401 ...

CVE-2020-15963

CVE-2020-15963 concerns Google Chrome where insufficient policy enforcement in extensions could allow a user-tempted installation of a malicious extension to sandbox-escape. Affected software: Google Chrome prior to 85.0.4183.121 (extensions component policy enforcement). Root cause: insufficient...

CVE-2021-21172

CVE-2021-21172 corresponds to a policy enforcement error in Chrome's File System API on Windows, allowing a remote attacker to bypass filesystem restrictions via a crafted HTML page. Affected: Google Chrome/Chromium prior to 89.0.4389.72 (File System API component). Root cause: insufficient polic...

CVE-2021-26260

CVE-2021-26260 reports an integer overflow in OpenEXR’s DwaCompressor, causing a heap-buffer overflow in affected builds before 3.0.1. Multiple connected sources confirm the issue (OpenEXR library, DwaCompressor, and related advisories) and note the flaw can crash applications compiled with OpenE...

CVE-2021-3545

CVE-2021-3545 affects QEMU’s virtio vhost-user GPU device (vhost-user-gpu) up to version 6.0. The flaw is in virgl_cmd_get_capset_info() within contrib/vhost-user-gpu/virgl.c and arises from reading uninitialized memory, allowing a malicious guest to leak host memory. Connected sources confirm th...

CVE-2022-46341

CVE-2022-46341 affects the X.Org X server (XIPassiveUngrab) where the handler accesses out-of-bounds memory when invoked with high keycode/button code. The connected advisories confirm this in various distributions (ALM/ALAS), noting local privilege elevation on privileged X server and potential ...

CVE-2023-4907

CVE-2023-4907 affects Google Chrome on Android (pre-117.0.5938.62). The issue stems from an inappropriate implementation in the Intents module, enabling a remote attacker to obfuscate security UI via a crafted HTML page. The vulnerability is categorized with a low severity and was disclosed as pa...

CVE-2023-6478

CVE-2023-6478 affects the X.Org X server (xorg-server). A flaw in handling RRChangeOutputProperty and RRChangeProviderProperty can trigger an integer overflow, potentially leading to disclosure of sensitive information. Connected advisories (e.g., Red Hat/AlmaLinux errata) corroborate the vulnera...

CVE-2024-0567

CVE-2024-0567 – GnuTLS issue affects the certificate chain validation when using cockpit-certificate-ensure, causing a denial-of-service that can be triggered by an unauthenticated remote attacker. Documents refer to GnuTLS in cockpit and describe distributed-trust chain rejection as the root cau...

CVE-2025-38001

The CVE-2025-38001 issue affects the Linux kernel HFSC scheduling path (net_sched) and is triggered by a flawed enqueue path. The root cause is a reentrancy problem in hfsc_enqueue where a class can be inserted twice into the eltree when HFSC_RSC is used, because the code only checks cl->cl_na...

CVE-2013-4235

CVE-2013-4235 refers to a shadow-utils TOCTOU (time-of-check-time-of-use) race condition when copying and removing directory trees. The Connected IBM X-Force bulletin lists this CVE with CWE-367, a base score of 3.7, CVSS vector (AV:L/AC:H/Au:N/C:P/I:P/A:P). The Initial description notes the race...

CVE-2015-7981

CVE-2015-7981 affects libpng in multiple branches: 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17. The issue is an out-of-bounds read in png_convert_to_rfc1123 triggered by crafted tIME chunk data, enabling a remote attacker to disclose sensitive process memory information. The...

CVE-2017-10379

CVE-2017-10379 concerns the MySQL Server client-side component of Oracle MySQL. Affected versions are 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.19 and earlier. The vulnerability can be exploited by a low-privileged attacker with network access via multiple protocols, potentially leading to ...

CVE-2017-5375

CVE-2017-5375 affects Mozilla Thunderbird, Firefox ESR, and Firefox prior to certain version thresholds. The issue is a JIT code allocation vulnerability that can bypass ASLR and DEP, enabling memory corruption. Public exploit activity exists (ASM.JS JIT-Spray PoCs) for multiple Firefox versions ...

CVE-2018-14339

CVE-2018-14339 affects Wireshark and Tshark, where the MMSE dissector could enter an infinite loop. The issue was caused by missing offset/length validation and was fixed in epan/proto.c. Affected versions include Wireshark 2.2.x up to 2.2.15, 2.4.x up to 2.4.7, and 2.6.x up to 2.6.1. The fix imp...

CVE-2018-16056

Wireshark CVE-2018-16056 affects multiple branches of Wireshark where the Bluetooth Attribute Protocol dissector could crash. The issue arises from an input validation gap when handling UUID-specific dissectors; the fix is implemented in epan/dissectors/packet-btatt.c by validating that a dissect...

CVE-2018-19409

Ghostscript advisory CVE-2018-19409 affects Artifex Ghostscript prior to 9.26, where LockSafetyParams is not checked correctly if another device is used. This is part of several post-2018 vulnerabilities in Ghostscript; Red Hat/CentOS and Debian/LTS advisories indicate that fixes were released in...