CVE-2022-33740

Summary: The CVE-2022-33740 issue concerns the Linux Block and Network PV device frontends leaking data to the backend. The root cause described in the sources is that memory regions are not zeroed before sharing with the backend, and the grant-table granularity (4K pages) means data from differe...

CVE-2023-3212

CVE-2023-3212 affects the Linux kernel gfs2 file system. A NULL pointer dereference occurs on corrupt gfs2 filesystems when the evict path references the journal descriptor structure after it has been freed, enabling a local privileged user to trigger a kernel panic. Affected: Linux kernel with g...

CVE-2023-5476

CVE-2023-5476: Use-after-free in Blink History of Google Chrome leading to potential heap corruption via a crafted HTML page. Affected: Chrome prior to 118.0.5993.70. Impact: remote attacker could exploit heap corruption (high severity in CVSS). Remediation: update to Chrome 118.0.5993.70 or newe...

CVE-2023-5725

CVE-2023-5725 is a documented vulnerability affecting Firefox (before 119), Firefox ESR (before 115.4), and Thunderbird (before 115.4.1). A malicious installed WebExtension could open arbitrary URLs, which under certain conditions could enable collection of sensitive user data. The connected docu...

CVE-2007-2138

CVE-2007-2138 affects PostgreSQL up to fixed versions (7.3.19, 7.4.x up to 7.4.17, 8.0.x up to 8.0.13, 8.1.x up to 8.1.9, 8.2.x up to 8.2.4). The vulnerability arises from untrusted search path settings during calls to a SECURITY DEFINER function, allowing remote authenticated users to gain the p...

CVE-2017-10074

CVE-2017-10074 affects OpenJDK/OpenJDK Hotspot in Java SE and Java SE Embedded. Affected: Java SE 6u151, 7u141, 8u131; Java SE Embedded 8u131. Root cause per advisories: Hotspot range-checking overflow in OpenJDK leading to possible arbitrary-code execution under a sandbox-compiled Java applet/ru...

CVE-2017-3544

CVE-2017-3544 is a content spoofing vulnerability in the Networking component of Oracle/OpenJDK’s Java SE/Java SE Embedded/JRockit, specifically an SMTP newline-injection issue in the SMTP client. The connected documents establish that a remote attacker could exploit this via SMTP to manipulate S...

CVE-2017-3641

CVE-2017-3641 details (normal mode) : A vulnerability in the MySQL Server component (subcomponent: Server: DML) affecting MariaDB/MySQL Server. Affected versions include 5.5.56 and earlier, 5.6.36 and earlier, and 5.7.18 and earlier. The issue is described as exploitable by a high-privilege attac...

CVE-2017-5375

CVE-2017-5375 affects Mozilla Thunderbird, Firefox ESR, and Firefox prior to certain version thresholds. The issue is a JIT code allocation vulnerability that can bypass ASLR and DEP, enabling memory corruption. Public exploit activity exists (ASM.JS JIT-Spray PoCs) for multiple Firefox versions ...

CVE-2018-1000075

CVE-2018-1000075 affects RubyGems: a negative-size condition in the ruby gem package tar header can cause an infinite loop. Affected ranges include RubyGems in the 2.2, 2.3, 2.4, and 2.5 series (e.g., 2.2.9 and earlier; 2.3.6 and earlier; 2.4.3 and earlier; 2.5.0 and earlier) up to trunk revision...

CVE-2018-13988

CVE-2018-13988 affects Poppler up to version 0.62, describing an out-of-bounds read due to an incorrect memory access not mapped in the process’s memory space, demonstrable via pdfunite. The vulnerability can lead to memory corruption and denial of service when a user opens a specially crafted PD...

CVE-2018-2634

CVE-2018-2634 affects the OpenJDK/JGSS component: the JGSS subsystem ignores javax.security.auth.useSubjectCredsOnly and always uses global credentials, potentially allowing an untrusted Java application to access credentials. Affected products in connected docs include OpenJDK/OpenJDK builds acr...

CVE-2018-2795

CVE-2018-2795 is confirmed in multiple openjdk advisories. Public details in connected documents show OpenJDK/OpenJDK7/OpenJDK8 (and related Oracle/OpenJDK components) affected by deserialization and related issues in Security/JAXP/JMX, potentially enabling denial of service or sandbox-related im...

CVE-2018-5150

CVE-2018-5150 concerns memory safety bugs in Firefox 59/ESR 52.7 and Thunderbird 52.7, with potential memory corruption that could allow arbitrary code execution. Affected products include Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR

CVE-2018-5188

CVE-2018-5188 involves memory safety bugs in Firefox 60/ESR 60 and Thunderbird

CVE-2019-5823

CVE-2019-5823 corresponds to a forced navigation from a service worker vulnerability in Chromium/Google Chrome, allowing navigation restriction bypass via a crafted HTML page. Affected products include Chromium/Chrome before version 74.0.3729.108. The issue is described as an access restriction b...

CVE-2020-10108

CVE-2020-10108 affects Twisted Web up to 19.10.0, causing an HTTP request splitting vulnerability when two Content-Length headers are present; if the second Content-Length is zero, the request body can be interpreted as a pipelined request. Connected advisories confirm this issue across multiple ...

CVE-2020-12244

PowerDNS Recursor 4.1.0–4.3.0 contains an NXDOMAIN validation issue in SyncRes::processAnswer, where records in the NXDOMAIN response without an SOA are not properly validated, allowing a bypass of DNSSEC validation. Affects multiple distributions; fixes exist upstream in 4.2.x/4.3.x series and d...

CVE-2021-45480

Mode C: CVE-2021-45480 affects the Linux kernel up to 5.15.10 (before 5.15.11). Root cause: memory leak in __rds_conn_create() in net/rds/connection.c under certain conditions. Impact: potential memory leak; CVE details state a leak rather than remote code execution. Public references note mitiga...

CVE-2022-0351

CVE-2022-0351 affects vim/vim prior to 8.2. In a command, a condition with many parentheses can cause a crash due to a missing recursion limit. This is documented in Debian/Ubuntu advisories and vendor bulletins (e.g., Cloud Foundry USN and Debian DLA). Impact is crash and potential memory effect...

CVE-2022-29970

CVE-2022-29970 affects the Ruby web framework Sinatra (before 2.2.0). The issue is a path traversal vulnerability where expanded paths are not validated against the public_dir when serving static files, potentially allowing an attacker to view arbitrary files via crafted URLs containing dot-dot s...

CVE-2023-5850

The CVE-2023-5850 issue affects Google Chrome/Chromium prior to version 119.0.6045.105, caused by an Incorrect security UI in the Downloads feature that can allow domain spoofing through a crafted domain name. The vulnerability is described as a medium-severity Chromium security issue and is addr...

CVE-2014-7810

Summary: CVE-2014-7810 affects the EL implementation in Apache Tomcat. The vulnerability arises when the EL evaluator may evaluate against an interface that is accessible via an inaccessible class, allowing bypass of SecurityManager protections in a web application. Affected products/versions (pe...

CVE-2016-6797

CVE-2016-6797 stems from Apache Tomcat’s ResourceLinkFactory not restricting web app access to global JNDI resources, allowing a web application to access any global JNDI resource regardless of explicit ResourceLink. Affects Tomcat 6.x/7.x/8.x/9.x releases listed in the entry (various 6.0–9.0 lin...

CVE-2017-1000376

CVE-2017-1000376 affects libffi. The vulnerability enables an executable stack that can be exploited to trigger arbitrary code execution on 32-bit x86 systems prior to libffi 3.1; upstream is believed to have fixed the issue in version 3.1. Other references indicate that libffi 3.1.x mitigates th...

CVE-2017-10384

CVE-2017-10384 affects the MySQL Server component (Server: DDL) of Oracle MySQL. Affected versions include 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.19 and earlier. An attacker with network access via multiple protocols and low privileges can cause a hang or a complete denial of service in ...

CVE-2018-12359

CVE-2018-12359 is a buffer overflow in rendering canvas content when dynamically adjusting the height/width, potentially causing a crash. Affected: Thunderbird and Firefox variants (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox

CVE-2019-7663

LibTIFF 4.0.10 contains CVE-2019-7663 (Invalid Address dereference in TIFFWriteDirectoryTagTransferfunction affecting cpSeparateBufToContigBuf in tiffcp.c), leading to remote denial of service when processing crafted TIFF files. Multiple connected advisories confirm the issue and list CVE-2019-76...

CVE-2020-17489

CVE-2020-17489 affects GNOME Shell (gnome-shell) up to 3.36.4. The issue: when logging out of an account, the login dialog password box may reappear with the password visible if the user previously chose the option to show the password in cleartext at login, exposing the password briefly (otherwi...

CVE-2020-3350

CVE-2020-3350 concerns ClamAV (and is referenced in the Cisco/AMP context in the initial doc). A vulnerability allowed a malicious user to trick clamscan, clamdscan or clamonacc into deleting or moving a different file than intended when using the --move or --remove options. The underlying issue ...

CVE-2021-20247

The CVE-2021-20247 issue affects isync/mbsync before v1.3.5 and v1.4.1. The root cause is that validations of mailbox names returned by IMAP LIST/LSUB do not occur, allowing a malicious or compromised IMAP server to craft mailbox names with .. components to access data outside the intended mailbo...

CVE-2021-21171

CVE-2021-21171 is a Chrome/Chromium UI security issue where the TabStrip and Navigation UI could spoof the Omnibox via a crafted HTML page. Affected product: Chromium before version 89.0.4389.72. Root cause: incorrect security UI handling in TabStrip/Navigation leading to content spoofing. Impact...

CVE-2021-28544

CVE-2021-28544 affects Apache Subversion (subversion) by leaking the copyfrom path in path-based authz protected copy operations. Affected components include httpd and svnserve services; root cause is disclosure of the original node’s copyfrom path, not its contents. Exploitation details are not ...

CVE-2021-35268

The CVE-2021-35268 issue affects NTFS-3G. A heap buffer overflow occurs in ntfs_inode_real_open when a specially crafted NTFS inode is loaded, enabling potential code execution and privilege escalation. This vulnerability affects NTFS-3G versions older than 2021.8.22. Public advisories and vendor...

CVE-2021-39257

CVE-2021-39257 affects NTFS-3G, where a crafted NTFS image with an unallocated bitmap can trigger an endless recursive call chain starting at ntfs_attr_pwrite, causing stack consumption. Documented impact is a stack exhaustion condition in NTFS-3G

CVE-2022-40307

CVE-2022-40307 is a Linux kernel issue in drivers/firmware/efi/capsule-loader.c that creates a race condition with a resulting use-after-free . Connections show multiple references: Debian’s LTS advisory for linux-5.10 includes CVE-2022-40307 among the listed fixes, indicating affected kernel ser...

CVE-2023-24805

CVE-2023-24805 affects cups-filters: the Backend Error Handler (beh) can be used to create a network-accessible printer, with cmdline unsanitized in beh.c leading to system(cmdline) and remote code execution. Root cause is missing input sanitisation when using beh, allowing arbitrary commands to ...

CVE-2023-6377

CVE-2023-6377 affects xorg-x11-server (XKB button actions) with out-of-bounds memory reads/writes. The flaw can enable local privilege escalation or remote code execution in scenarios involving X11 forwarding. Affected components cited across multiple advisories include xorg-server and related X1...

CVE-2023-6478

CVE-2023-6478 affects the X.Org X server (xorg-server). A flaw in handling RRChangeOutputProperty and RRChangeProviderProperty can trigger an integer overflow, potentially leading to disclosure of sensitive information. Connected advisories (e.g., Red Hat/AlmaLinux errata) corroborate the vulnera...

CVE-2024-52533

GLib (GNOME GLib) is affected by CVE-2024-52533 due to an off-by-one error in gio/gsocks4aproxy.c, where SOCKS4_CONN_MSG_LEN does not account for a trailing NUL, causing a buffer overflow in versions before 2.82.1. The issue stems from an insufficient buffer size in SOCKS4_CONN_MSG_LEN. A fix has...

CVE-2017-5460

CVE-2017-5460 is a use-after-free in Firefox/Thunderbird frame selection. Public docs confirm it affects Firefox/Firefox ESR (before 53) and Thunderbird (older branches) with a potentially exploitable crash and, in some advisories, possible arbitrary code execution. Root cause: use-after-free dur...

CVE-2018-12366

CVE-2018-12366 describes an out-of-bounds read during QCMS color profile transformations caused by an invalid grid size. The vulnerability could leak private data in output. Affected products/versions include Thunderbird (and Firefox components) before specific fixed releases: Debian/CentOS advis...

CVE-2018-12377

CVE-2018-12377 is a use-after-free vulnerability that can occur when refresh driver timers are refreshed during shutdown, potentially causing a crash when the timer is deleted while still in use. The issue affects Thunderbird versions prior to 60.2.1 (and related Firefox/ESR components). The docu...

CVE-2018-12386

Summary: CVE-2018-12386 is a type-confusion vulnerability in Mozilla Firefox/Firefox ESR related to JavaScript register allocation, which can lead to an arbitrary read/write and remote code execution in the sandboxed content process. Affected versions: Firefox ESR before 60.2.2 and Firefox before...

CVE-2018-18710

CVE-2018-18710 affects the Linux kernel up to 4.19, in the CDROM driver: cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c. A cast from unsigned long to int can bypass bounds checking, enabling a local attacker to read kernel memory (information disclosure). The issue is analogous to CVE-2018-1094...

CVE-2018-19475

CVE-2018-19475 affects Artifex Ghostscript prior to 9.26. The root cause is that psi/zdevice2.c fails to check available stack space when the device remains the same, allowing remote attackers to bypass intended access restrictions. The issue is reported as a remote-access/bypass vulnerability in...

CVE-2018-19624

CVE-2018-19624 affects Wireshark/dissector PVFS: the PVFS dissector in Wireshark versions 2.6.0–2.6.4 and 2.4.0–2.4.10 could crash due to a NULL pointer dereference. The issue was addressed by modifying epan/dissectors/packet-pvfs2.c to prevent the dereference. Connected sources confirm multiple ...

CVE-2019-13504

Exiv2 CVE-2019-13504 is an out-of-bounds read in Exiv2::MrwImage::readMetadata (mrwimage.cpp) present in Exiv2 up to version 0.27.2. Connected sources indicate vulnerable Exiv2 readers handle MRW metadata and that the issue can affect installations using Exiv2 prior to fixes. Debian and Alpine ad...

CVE-2019-18179

CVE-2019-18179 affects Open Ticket Request System (OTRS). An attacker authenticated as an agent can enumerate tickets assigned to other agents, including in queues where they lack permissions. Affected products/versions: OTRS 7.0.x (up to 7.0.12); Community Edition 5.0.x (up to 5.0.38); 6.0.x (up...

CVE-2019-6690

CVE-2019-6690 affects python-gnupg 0.4.3. A context-dependent flaw lets an attacker, if they control the GnuPG passphrase and the ciphertext is trusted, cause decryption of ciphertext other than intended (CWE-20: Improper Input Validation). Impact described in sources includes manipulation of enc...