CVE-2019-13504

Exiv2 CVE-2019-13504 is an out-of-bounds read in Exiv2::MrwImage::readMetadata (mrwimage.cpp) present in Exiv2 up to version 0.27.2. Connected sources indicate vulnerable Exiv2 readers handle MRW metadata and that the issue can affect installations using Exiv2 prior to fixes. Debian and Alpine ad...

CVE-2019-18179

CVE-2019-18179 affects Open Ticket Request System (OTRS). An attacker authenticated as an agent can enumerate tickets assigned to other agents, including in queues where they lack permissions. Affected products/versions: OTRS 7.0.x (up to 7.0.12); Community Edition 5.0.x (up to 5.0.38); 6.0.x (up...

CVE-2019-5767

CVE-2019-5767 affects Google Chrome on Android (WebAPKs). The issue is caused by insufficient protection of the permission UI in WebAPKs, allowing an attacker who persuades a user to install a malicious APK to access privacy/security sensitive web APIs. Affected: Chrome on Android with WebAPK per...

CVE-2019-9371

CVE-2019-9371 affects libvpx and is characterized by a resource-exhaustion denial of service due to improper input validation. The issue is linked to multiple package advisories and security bulletins across distributions (e.g., Debian DSA-4578-1, AlmaLinux libvpx security update, Fedora package ...

CVE-2020-15959

CVE-2020-15959 affects Google Chrome/Chromium browsers up to versions prior to 85.0.4183.102, where insufficient policy enforcement in networking could allow an attacker, via social engineering to persuade a user to enable logging, to obtain potentially sensitive information from a process’s memo...

CVE-2020-1740

CVE-2020-1740 is about Ansible Engine Vault editing: on the same host, ansible-vault edit can expose old/new secrets due to mkstemp/two-step write. Connected documents consistently confirm this vulnerability across multiple distributions (Astra Linux, Debian, Fedora/Red Hat, Alpine, Amazon Linux)...

CVE-2020-27757

CVE-2020-27757 : In ImageMagick, a floating-point calculation in ScaleAnyToQuantum() (MagickCore/quantum-private.h) can overflow the range of unsigned long long, causing undefined behavior when processing crafted input files. Affected: ImageMagick versions prior to 7.0.8-68. Root cause: floating-...

CVE-2021-21189

CVE-2021-21189 is a policy-enforcement vulnerability in the Chromium/Chromium-based browser payments component, allowing navigation/policy bypass via a crafted HTML page in versions prior to 89.0.4389.72. Public documents confirm the issue affects Chromium’s payments logic and that upstream fixes...

CVE-2021-21192

CVE-2021-21192 refers to a heap buffer overflow in the Chrome tab groups implementation, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Google Chrome (tab groups feature). Vulnerable component: tab groups code path handling HTML-driven...

CVE-2021-3477

CVE-2021-3477 affects OpenEXR; a flaw in deep tile sample size calculations in versions before 3.0.0-beta can be triggered by processing a crafted file, causing an integer overflow and an out-of-bounds read. The description notes impact to availability. The provided connected documents confirm th...

CVE-2021-39260

CVE-2021-39260 affects NTFS-3G with an out-of-bounds access in ntfs_inode_sync_standard_information when processing a crafted NTFS image. The description indicates NTFS-3G versions prior to 2021.8.22 are vulnerable. Connected advisories reference remediation by upgrading to 2021.8.22 or newer (e....

CVE-2022-0696

CVE-2022-0696 is a NULL pointer dereference in Vim. Affected software is vim/vim prior to 8.2.4428. The connected docs confirm this CVE among Vim-related flaws and show patches in Debian/Ubuntu advisories (e.g., DLA-3204-1) and an Ubuntu/Debian security bulletin lineage. Remediation is to update ...

CVE-2023-2721

CVE-2023-2721 involves a use-after-free in Navigation in Google Chrome (Chromium) prior to version 113.0.5672.126, enabling potential heap corruption via a crafted HTML page. Affected software is Google Chrome/Chromium; root cause is a memory misreference in Navigation leading to use-after-free. ...

CVE-2017-10198

CVE-2017-10198 affects Oracle Java SE, Java SE Embedded, and JRockit. Vulnerability in the Security component (and related areas) allows unauthenticated network-based access to compromise affected Java runtimes (Java SE 6u151, 7u141, 8u131; Embedded 8u131; JRockit R28.3.14). Exploitation is possi...

CVE-2017-6891

CVE-2017-6891 affects libtasn1 (GnuTLS libtasn1) with two errors in asn1_find_node() in lib/parser_aux.c of version 4.10 that can be triggered by processing a specially crafted assignments file (e.g., via asn1Coding). This can cause a stack-based buffer overflow and allow arbitrary code execution...

CVE-2017-9461

CVE-2017-9461 affects Samba smbd with a denial-of-service vulnerability caused by mis-handling dangling symlinks, leading to an infinite fd_open_atomic loop and high CPU/memory use. Affected versions are Samba before 4.4.10 and 4.5.x before 4.5.6. Remediation per sources is to upgrade to fixed re...

CVE-2018-18227

CVE-2018-18227 affects Wireshark where the MS-WSP protocol dissector could crash. Affected ranges are Wireshark 2.6.0–2.6.3 and 2.4.0–2.4.9. Root cause: NULL return values not handled in epan/dissectors/packet-mswsp.c; remediation is upstream patch to properly handle NULLs. In practice, the vulne...

CVE-2018-5089

CVE-2018-5089 is a memory-safety vulnerability affecting Mozilla products: Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5968

CVE-2018-5968 concerns FasterXML jackson-databind deserialization. The entry notes unauthenticated remote code execution via two gadgets that bypass a blacklist, stemming from an incomplete fix for CVE-2017-7525 and CVE-2017-17485. Connected sources specify affected jackson-databind versions and ...

CVE-2018-8087

The CVE-2018-8087 issue affects the Linux kernel driver code in mac80211_hwsim.c (hwsim_new_radio_nl). It describes a memory leak that can be triggered by an out-of-array error, allowing local users to cause denial of service through memory consumption. The vulnerability is reported for the kerne...

CVE-2019-16770

Puma (Ruby/Rack server) is vulnerable to a denial-of-service via greedily kept-alive connections that monopolize the reactor. Initial CVE-2019-16770 affects Puma versions before 3.12.2 and 4.3.1; the advisory notes these versions are patched in 3.12.2 and 4.3.1. Connected sources show subsequent ...

CVE-2019-1788

CVE-2019-1788 is an out-of-bounds write in ClamAV's OLE2 file scanning path. Affected product/version: ClamAV up to and including 0.101.1 . Root cause: improper input/validation handling for OLE2 files, allowing a remote attacker to send malformed files and trigger a crash, leading to a denial of...

CVE-2020-11019

CVE-2020-11019 in FreeRDP

CVE-2020-15972

CVE-2020-15972 is a use-after-free in the audio path of Chromium/Google Chrome prior to 86.0.4240.75. The issue could allow a remote attacker to exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution or other impacts as described in the Debian/Arch adviso...

CVE-2020-6554

CVE-2020-6554 is a use-after-free in Chrome extensions that could enable a sandbox escape via a crafted extension in Chrome versions before 84.0.4147.125. Public connected documents confirm Chromium/Chrome advisories and Debian advisory references to this vulnerability and related fixes; one Debi...

CVE-2021-4159

CVE-2021-4159 is described in connected documents as a Linux kernel EBPF verifier flaw that could allow a local attacker to leak internal kernel memory by causing uninitialized or sensitive data to be exposed to userspace when handling internal data structures during eBPF code insertion. The issu...

CVE-2022-20422

CVE-2022-20422 is a race-condition memory corruption issue in armv8_deprecated.c (emulation_proc_handler) of the Linux kernel used by Android. It allows local privilege escalation without extra privileges or user interaction, via memory corruption. Connected documents corroborate the same descrip...

CVE-2022-32085

CVE-2022-32085 affects MariaDB Server releases from v10.2 through v10.7, due to a segmentation fault in Item_func_in::cleanup/Item::cleanup_processor. Multiple connected advisories cite this CVE as affecting MariaDB in those ranges and flag the issue as a crash condition. Available connected docu...

CVE-2022-3256

CVE-2022-3256 affects vim/vim, with exploitation observed in versions prior to 9.0.0530 (Use After Free). Advisories across Linux distros (ALAS/ALAS2, Cloud Foundry, Debian LTS, etc.) indicate that an upgraded Vim version resolves the issue; upgrade to a non-vulnerable release (e.g., 9.0.0530 or ...

CVE-2013-4560

lighttpd vulnerable before 1.4.33 due to a use-after-free in FAMMonitorDirectory handling, enabling remote DoS (segfault/crash). Multiple connected sources corroborate the issue and reference mitigation via upgrading to 1.4.34 or newer. No explicit in-the-wild exploit details are provided in the ...

CVE-2015-5345

CVE-2015-5345 affects the Tomcat Mapper component: redirects are processed before security constraints/Filters, enabling a remote attacker to determine the existence of a directory via a URL that lacks a trailing slash. Affected upstream versions are Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8...

CVE-2016-3074

CVE-2016-3074 is a heap-based buffer overflow in GD Graphics Library (libgd/libgd2) caused by a signedness error when processing crafted compressed gd2 data. The vulnerability can lead to a crash or potentially remote code execution. Affected software centers on libgd2/gd2 components (GD library,...

CVE-2017-1000083

CVE-2017-1000083 affects GNOME Evince before 3.24.1. It allows command execution via .cbt files that are TAR archives containing a filename starting with a -- option, demonstrated by a --checkpoint-action=exec=bash at the start of the filename. The issue is triggered when opening CBT archives in ...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...

CVE-2018-12364

The CVE-2018-12364 entry affects Thunderbird and was mitigated in various distributions through Thunderbird 52.9.1 and related security advisories. The connected documents confirm concrete details: NPAPI plugins (e.g., Flash) can bypass CORS by issuing a same-origin POST that redirects (307) to t...

CVE-2018-18226

CVE-2018-18226 affects Wireshark 2.6.0–2.6.3, where the Steam IHS Discovery dissector could leak memory due to a memory-management issue in epan/dissectors/packet-steam-ihs-discovery.c, enabling memory exhaustion and potential DoS. Mitigation: upgrade to Wireshark 2.6.4 or newer (upstream fix). P...

CVE-2018-4180

CVE-2018-4180 and CVE-2018-4181 affect CUPS in macOS High Sierra up to 10.13.4, addressed by macOS 10.13.5 Security Update. The issues (documented in connected advisories) are local in nature: 4180 allows local privilege escalation via insecure environment variable handling, and 4181 allows a loc...

CVE-2019-3811

CVE-2019-3811 affects sssd: if a user has no home directory, sssd returns '/' instead of '', potentially allowing access beyond the user’s home dir. Affected are all versions prior to 2.1. Public advisories (e.g., Debian LTS DLA-3436-1) indicate a patch is available in newer sssd packages; remedi...

CVE-2019-5719

Wireshark vulnerable component: ISAKMP dissector. CVE-2019-5719 (and related CVEs in the bundle) affect Wireshark 2.6.0–2.6.5 and 2.4.0–2.4.11, where the ISAKMP dissector could crash due to not properly handling a missing decryption data block (root cause: missing decryption data). Impact per sou...

CVE-2020-18442

Vulnerability summary (CVE-2020-18442) : In zziplib 0.13.69, a mishandled return value in zzip_file_read can cause an infinite loop in unzzip_cat_file, allowing a remote attacker to trigger a denial of service. Affected component: zziplib (library for reading ZIP archives). Impact: denial of serv...

CVE-2020-27813

CVE-2020-27813 is a denial-of-service vulnerability in Gorilla WebSocket (golang-websocket) where an integer overflow in the length of received WebSocket frames could crash the HTTP server. Public advisories (Debian DLA-3420, Ubuntu USN-6208-1, Debian/DLA references) confirm the affected package ...

CVE-2020-6551

CVE-2020-6551 is a use-after-free in WebXR for Google Chrome, before version 84.0.4147.125, enabling a remote attacker to potentially corrupt the heap via a crafted HTML page. Affected product: Google Chrome (WebXR component). Root cause: use-after-free condition in WebXR handling. Impact: remote...

CVE-2020-8955

WeeChat is affected by CVE-2020-8955 via the irc_mode_channel_update path in plugins/irc/irc-mode.c. A crafted IRC message 324 (channel mode) can trigger a heap-based out-of-bounds write, causing a denial of service (application crash) and, per advisories, possibly arbitrary code execution. Upstr...

CVE-2021-21209

CVE-2021-21209 concerns the Google Chrome storage API: an inappropriate implementation allowed a remote attacker to leak cross-origin data via a crafted HTML page in Chrome versions prior to 90.0.4430.72. The issue is documented across multiple advisories, noting it as an information-disclosure v...

CVE-2021-30984

CVE-2021-30984 is a race condition in WebKit-based engines (WebKitGTK/WebKit) that could allow processing malicious web content to execute arbitrary code. Apple advisory notes fixes in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Connected docs also referenc...

CVE-2022-23833

The CVE affects Django: MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could cause an infinite loop while parsing uploaded files. There is no exploitation detail provided; the impact is a potential denial of service ...

CVE-2023-21255

CVE-2023-21255 is a memory corruption vulnerability in the Linux kernel binder.c caused by a use-after-free. It leads to local privilege escalation with no extra privileges or user interaction required (CVSS 3.1 base 7.8). Affected component: binder.c in the kernel; impact is described as local e...

CVE-2023-3090

CVE-2023-3090 is a Linux kernel vulnerability affecting the ipvlan driver. It causes a heap out-of-bounds write due to missing skb->cb initialization, and is exploitable when CONFIG_IPVLAN is enabled. The issue enables local privilege escalation as described in multiple sources (e.g., Astra Li...

CVE-2023-4900

CVE-2023-4900 affects Google Chrome/Chromium family (Android Chrome prior to 117.0.5938.62) where an inappropriate implementation in Custom Tabs allows a remote attacker to obfuscate a permission prompt via a crafted HTML page. Connected advisories indicate this is one of multiple Chromium issues...

CVE-2023-6351

CVE-2023-6351 describes a use-after-free in libavif used by Google Chrome before 119.0.6045.199, allowing a remote attacker to cause heap corruption via a crafted AVIF file. Affected product/component: Google Chrome/Chromium with libavif. Root cause: use-after-free in libavif leading to possible ...