CVE-2020-15103

CVE-2020-15103 affects FreeRDP with versions

CVE-2016-3698

CVE-2016-3698 affects libndp prior to 1.6 used by NetworkManager; vulnerable code path validates the origin of Neighbor Discovery Protocol messages and can enable an attacker on a non‑local network to advertise a node as a router, enabling MITM or disrupting connectivity. Multiple vendors/distros...

CVE-2016-4578

CVE-2016-4578 affects the Linux kernel’s ALSA timer subsystem (snd_timer_user_ccallback and snd_timer_user_tinterrupt). The provided sources confirm a local information leak: if the snd_timer interfaces are used, uninitialized r1 data can be read from kernel stack memory, enabling a local attacke...

CVE-2017-18257

CVE-2017-18257 affects the Linux kernel: the __get_data_block function in fs/f2fs/data.c (before 4.11) can be triggered by crafted open and fallocate calls via an FS_IOC_FIEMAP ioctl, causing local denial of service (integer overflow and loop). Public advisories from Unity Linux, Ubuntu USN-3696-...

CVE-2017-7608

Technical details about CVE-2017-7608 are not publicly provided in the supplied Connected documents. The initial description notes a heap-based read in ebl_object_note_type_name but no further details or remediation in these sources.

CVE-2018-1000077

RubyGems: CVE-2018-1000077 is an Improper Input Validation issue in the gemspec homepage attribute that allowed a malicious gem to set an invalid homepage URL. Affected are RubyGems in Ruby 2.2/2.3/2.4/2.5 series prior to trunk revision 62422; it was fixed in RubyGems 2.7.6. Upgrading to RubyGems...

CVE-2018-12362

CVE-2018-12362 is an integer overflow in the SSSE3 scaler used during graphics operations, affecting Thunderbird and Firefox variants prior to specific versions (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox

CVE-2018-14339

CVE-2018-14339 affects Wireshark and Tshark, where the MMSE dissector could enter an infinite loop. The issue was caused by missing offset/length validation and was fixed in epan/proto.c. Affected versions include Wireshark 2.2.x up to 2.2.15, 2.4.x up to 2.4.7, and 2.6.x up to 2.6.1. The fix imp...

CVE-2018-16471

CVE-2018-16471 (Rack XSS) Affected: Rack up to versions before 2.0.6 and 1.6.11. Issue: crafted requests can affect Rack::Request.scheme return value, enabling cross-site scripting if the value is not escaped by the app. Impact: potential XSS in apps that rely on Rack::Request.scheme without esca...

CVE-2018-19870

CVE-2018-19870 affects Qt before 5.11.3, where a malformed GIF image triggers a NULL pointer dereference in QGifHandler, causing a segmentation fault. This vulnerability is documented in multiple advisories (including Qt 5.x before 5.11.3 and related security notices). The connected sources confi...

CVE-2018-5388

CVE-2018-5388 affects strongSwan up to version 5.6.2 (before 5.6.3). The stroke plugin did not verify the message length when reading from its control socket, allowing a buffer underflow that can cause resource exhaustion and denial of service. Impact is a DoS during socket reads; exploitation de...

CVE-2019-8075

CVE-2019-8075 affects Google Chrome/Chromium (Flash component). Root cause: insufficient data validation in Flash leading to Same Origin Policy bypass and potential information disclosure. In Chrome/Chromium, fixes appeared in the 87.x series: Chrome 87.0.4280.66+ (and later) to address the vulne...

CVE-2020-11039

Summary (CVE-2020-11039) In FreeRDP, versions up to and including 2.0.0 with USB redirection enabled can suffer an integer-overflow in length checks that allows (nearly) arbitrary memory read/write when interacting with a manipulated server. This was fixed in version 2.1.0. Public advisories and ...

CVE-2020-13904

CVE-2020-13904 affects FFmpeg up to 4.2.3 (and 2.8) due to a use-after-free in M3U8 processing: parse_playlist in libavformat/hls.c frees a pointer, which is later accessed in av_probe_input_format3 (libavformat/format.c). This can enable remote code execution via crafted media content, with seve...

CVE-2020-15169

CVE-2020-15169 affects Rails Action View translation helpers. Vulnerability arises when user-controlled default for a missing translation key named html or ending in _html is treated as HTML-safe, allowing XSS. Affected are Action View versions prior to 5.2.4.4 and 6.0.3.3; patch versions 5.2.4.4...

CVE-2020-15890

CVE-2020-15890 affects LuaJIT up to 2.1.0-beta3, causing an out-of-bounds read due to mishandling of __gc handler frame traversal. Public details in Debian/Ubuntu advisories confirm the issue and provide fixes for supported releases. Debian LTS dla-4283 fixes luajit in Debian 11 (bullseye) with v...

CVE-2020-28038

CVE-2020-28038 affects WordPress prior to 5.5.2, where stored XSS via post slugs is possible. The connected Nessus/Fedora entries confirm WordPress 5.5.2/5.5.3 maintenance releases addressing CVE-2020-28038 and related fixes, with WordPress 5.5.2 patching the stored XSS in post slugs. The vulnera...

CVE-2021-21201

CVE-2021-21201: Use-after-free in permissions of Google Chrome prior to 90.0.4430.72 can allow a remote attacker with renderer access to escape the sandbox via a crafted HTML page. Connected advisories (e.g., ASA-202104-2/ASA-202104-5) reiterate sandbox-escape and related issues across Chromium c...

CVE-2021-33289

NTFS-3G prior to version 2021.8.22 is vulnerable to a heap buffer overflow when processing a specially crafted MFT section in an NTFS image, allowing potential code execution. Connected advisories from Astra Linux, Debian (DSA-4971-1, DLA-2819-1), Alpine (CVE-2021-33289) and others confirm the is...

CVE-2021-35269

NTFS-3G vulnerability CVE-2021-35269 affects ntfs-3g of versions prior to 2021.8.22. A specially crafted NTFS attribute from the MFT may trigger a heap buffer overflow in ntfs_attr_setup_flag, allowing code execution and privilege escalation. Public advisories (Alpine Linux and Debian/Marian refe...

CVE-2021-39252

NTFS-3G is affected by CVE-2021-39252: an out-of-bounds read in ntfs_ie_lookup for NTFS-3G versions prior to 2021.8.22. Several advisories and security trackers map this CVE to ntfs-3g in multiple distributions. Remediation: upgrade ntfs-3g to 2021.8.22 or later (e.g., 2021.8.22-1 or newer) as in...

CVE-2021-4010

CVE-2021-4010 affects xorg-x11-server (X.Org X server) with an out-of-bounds access in the SProcScreenSaverSuspend function in versions before 21.1.2 and before 1.20.14. This vulnerability could impact confidentiality, integrity, and availability. The issue is mitigated by upgrading to the fixed ...

CVE-2022-48627

CVE-2022-48627 (Linux kernel) describes a memory overlap bug in vt buffer character deletion caused by an overlapping copy when using scr_memcpyw, which may lead to data corruption or leakage if destination overlaps source. The issue is mitigated by replacing scr_memcpyw with scr_memmovew; severa...

CVE-2023-4907

CVE-2023-4907 affects Google Chrome on Android (pre-117.0.5938.62). The issue stems from an inappropriate implementation in the Intents module, enabling a remote attacker to obfuscate security UI via a crafted HTML page. The vulnerability is categorized with a low severity and was disclosed as pa...

CVE-2024-1151

CVE-2024-1151 is described in connected sources as a Linux kernel vulnerability affecting the Open vSwitch (OVS) sub‑component. The flaw occurs when a recursive operation calls into the same code block without validating stack depth, allowing a stack overflow that can crash the kernel or cause re...

CVE-2015-0408

CVE-2015-0408 is an OpenJDK/OpenJDK 5.0/6u85/7u72/8u25 remote vulnerability reported in multiple advisories and security lists. The linked documents confirm it is an unspecified vulnerability associated with RMI in Java SE, contributing to high-severity impact ( Confidentiality, Integrity, Availa...

CVE-2018-12363

CVE-2018-12363 is a use-after-free vulnerability in Firefox/Thunderbird caused by mutation events moving DOM nodes between documents. The old document may be freed while a stale pointer remains, potentially enabling a crash. Public references show affected products include Thunderbird versions ol...

CVE-2018-14600

CVE-2018-14600 affects libX11: XListExtensions in ListExt.c interprets a value as signed instead of unsigned, causing an out-of-bounds write (up to 128 bytes) that can lead to DoS or remote code execution. The connected advisories confirm this as a fixed libX11 issue across distros and related Xo...

CVE-2018-5332

CVE-2018-5332 affects the Linux kernel up to version 3.2, where rds_message_alloc_sgs() does not validate a value used during DMA page allocation, causing a heap-based out-of-bounds write in net/rds/rdma.c (via rds_rdma_extra_size). Exploitation would rely on local access to trigger DMA-related a...

CVE-2019-5718

Wireshark prior to 2.6.6 (and 2.4.x series) is affected by CVE-2019-5718 in the RTSE ASN.1 dissector functions. The root cause is a missing length check in get_t61_string, which could allow a crash when processing malformed packets or traces. The issue affects Wireshark 2.6.0–2.6.5 and 2.4.0–2.4....

CVE-2020-11653

CVE-2020-11653 affects Varnish Cache prior to 6.0.6 LTS, 6.1.x prior to 6.2.3, and 6.3.x prior to 6.3.2. When a TLS termination proxy uses PROXY v2, an assertion failure can occur, causing the varnishd daemon to restart and leading to performance loss. Connected advisories (Debian/Ubuntu/Rocky) r...

CVE-2020-25626

CVE-2020-25626 affects Django REST Framework (DRF) with versions prior to 3.12.0 and prior to 3.11.2. The flaw is an improper escape of certain user-controlled strings in the browseable API viewer, allowing injection of script tags (XSS). Impact is limited to cases where attackers can influence t...

CVE-2020-27762

Summary: CVE-2020-27762 is a flaw in ImageMagick (coders/hdr.c) where processing a crafted image can trigger undefined behavior due to values outside the range of unsigned char, with impact likely to service availability. Affected: ImageMagick versions before 7.0.8-68 (per the public description ...

CVE-2020-35505

Summary: CVE-2020-35505 affects the QEMU am53c974 SCSI host bus adapter emulation, prior to version 6.0.0. Root cause: a NULL pointer dereference while processing the Information Transfer command. Impact: a privileged guest can crash the host QEMU process, causing a denial of service and primaril...

CVE-2020-6537

CVE-2020-6537 involves a type confusion in V8 used by Google Chrome/Chromium, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected: Chromium/Google Chrome browsers prior to version 84.0.4147.105. Root cause: V8 type confusion leading to code ex...

CVE-2022-0865

CVE-2022-0865 affects libtiff 4.3.0 where a reachable assertion in tiffcp can crash the program and cause denial of service when processing crafted TIFF files. The initial documents confirm the issue in libtiff and note that a fix is available for source builds via commit 5e180045. Connected sour...

CVE-2024-24857

Summary (CVE-2024-24857) : A race condition in the Linux kernel’s net/bluetooth driver function conn_info_{min,max}age_set() may cause an integrity overflow, potentially causing Bluetooth connection abnormalities or DoS. Public sources place this as a kernel issue affecting the Bluetooth subsyste...

CVE-2024-2496

Mode C: This CVE is active in libvirt. A NULL pointer dereference in udevConnectListAllInterfaces() can occur when detaching a host interface while listing interfaces with virConnectListAllInterfaces, potentially crashing the libvirt daemon (DoS). Connected advisories confirm affected packages an...

CVE-2024-26664

CVE-2024-26664 : The Linux kernel hwmon: coretemp fix addresses an out-of-bounds memory access. The bug arises when pdata->cpu_map[] is set before the out-of-bounds check, potentially triggering on systems with more than 128 cores per package. Connected sources corroborate the vulnerability an...

CVE-2017-10193

CVE-2017-10193 affects the Java SE and Java SE Embedded components (OpenJDK) with affected Java SE versions 6u151, 7u141, 8u131 and Java SE Embedded 8u131. The vulnerability enables a network-accessible attacker to compromise Java SE/Embedded when running untrusted code in sandboxed client deploy...

CVE-2018-8789

CVE-2018-8789 affects FreeRDP prior to 2.0.0-rc4, where multiple out-of-bounds reads in the NTLM authentication module can cause a Denial of Service (segfault). The vulnerability is documented across multiple advisories and Nessus plugins as part of a family of FreeRDP issues fixed in the 2.0.0-r...

CVE-2019-12976

ImageMagick 7.0.8-34 is affected by CVE-2019-12976 due to a memory leak in ReadPCLImage (coders/pcl.c). The description specifies a memory leak in ReadPCLImage, implying potential memory exhaustion under some inputs. The connected documents do not provide a patch version or remediation steps, and...

CVE-2020-0499

The CVE-2020-0499 entry concerns FLAC:bitreader_read_rice_signed_block where a heap buffer overflow can cause an out-of-bounds read, enabling remote information disclosure in Android-11. Exploitation reportedly requires user interaction; impact is information disclosure with low/medium severity d...

CVE-2020-12674

CVE-2020-12674 affects Dovecot before 2.3.11.3. The flaw arises in the Remote Passphrase Authentication (RPA) handling, where a zero-length input is mishandled, causing the authentication service to crash. This is listed alongside CVE-2020-12100 and CVE-2020-12673 in multiple advisories. Remediat...

CVE-2020-13765

CVE-2020-13765 affects QEMU 4.0 and 4.1.0, where rom_copy() in hw/core/loader.c does not validate the relationship between two addresses, enabling an out-of-bounds memory copy and potentially code execution. Public advisories (e.g., Oracle Linux ELSA entries and MiracleLinux AXSA-2021-1371) indic...

CVE-2020-15305

CVE-2020-15305 affects OpenEXR up to version 2.5.1, where malformed input could trigger a use-after-free in DeepScanLineInputFile() (IlmImf/ImfDeepScanLineInputFile.cpp). The root cause is invalid input handling in DeepScanLineInputFile construction. Impact is a potential crash or memory corrupti...

CVE-2020-24654

KDE Ark (ark) before version 20.08.1 is vulnerable to a local privilege/fs access issue: a crafted TAR archive containing symlinks can cause files to be written outside the extraction directory, demonstrated by a write to a user’s home directory. Root cause is inadequate sanitization of extractio...

CVE-2020-26421

CVE-2020-26421 affects Wireshark; USB HID protocol dissector (and possibly other dissectors) in Wireshark 3.4.0 and 3.2.0–3.2.8 crashes, enabling denial of service via crafted captures or packet injection. Connected sources confirm the issue and document verifications/updates: Debian LTS fixed Wi...

CVE-2021-21183

CVE-2021-21183: In Google Chrome/Chromium before 89.0.4389.72, an inappropriate implementation in the Performance APIs allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is part of a broader set of Chromium-related vulnerabilities fixed in late 2021; Debian adv...

CVE-2021-21188

CVE-2021-21188 is a Chrome/Blink use-after-free vulnerability in Blink/WebKit leading to potential heap corruption. Connected documents confirm the issue exists in Google Chrome prior to version 89.0.4389.72 and is exploitable via a crafted HTML page, with remote code execution as a possible impa...