CVE-2018-12386

Summary: CVE-2018-12386 is a type-confusion vulnerability in Mozilla Firefox/Firefox ESR related to JavaScript register allocation, which can lead to an arbitrary read/write and remote code execution in the sandboxed content process. Affected versions: Firefox ESR before 60.2.2 and Firefox before...

CVE-2018-18710

CVE-2018-18710 affects the Linux kernel up to 4.19, in the CDROM driver: cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c. A cast from unsigned long to int can bypass bounds checking, enabling a local attacker to read kernel memory (information disclosure). The issue is analogous to CVE-2018-1094...

CVE-2019-5718

Wireshark prior to 2.6.6 (and 2.4.x series) is affected by CVE-2019-5718 in the RTSE ASN.1 dissector functions. The root cause is a missing length check in get_t61_string, which could allow a crash when processing malformed packets or traces. The issue affects Wireshark 2.6.0–2.6.5 and 2.4.0–2.4....

CVE-2019-8075

CVE-2019-8075 affects Google Chrome/Chromium (Flash component). Root cause: insufficient data validation in Flash leading to Same Origin Policy bypass and potential information disclosure. In Chrome/Chromium, fixes appeared in the 87.x series: Chrome 87.0.4280.66+ (and later) to address the vulne...

CVE-2020-12244

PowerDNS Recursor 4.1.0–4.3.0 contains an NXDOMAIN validation issue in SyncRes::processAnswer, where records in the NXDOMAIN response without an SOA are not properly validated, allowing a bypass of DNSSEC validation. Affects multiple distributions; fixes exist upstream in 4.2.x/4.3.x series and d...

CVE-2020-16003

CVE-2020-16003 is a Chrome vulnerability: Use after free in the printing component. The connected data confirms Chrome/Chromium fixed this issue in the Chrome update cycle (reported as a use-after-free in printing), but the specific exploit details or affected versions beyond the prior 86.0.4240....

CVE-2020-8631

CVE-2020-8631 affects cloud-init up to version 19.4, where the random password is generated using rand_str in cloudinit/util.py that calls random.choice (Mersenne Twister). This weak RNG can allow a local attacker to predict the generated password; CVE-2020-8632 reports a short default password l...

CVE-2021-21171

CVE-2021-21171 is a Chrome/Chromium UI security issue where the TabStrip and Navigation UI could spoof the Omnibox via a crafted HTML page. Affected product: Chromium before version 89.0.4389.72. Root cause: incorrect security UI handling in TabStrip/Navigation leading to content spoofing. Impact...

CVE-2021-21189

CVE-2021-21189 is a policy-enforcement vulnerability in the Chromium/Chromium-based browser payments component, allowing navigation/policy bypass via a crafted HTML page in versions prior to 89.0.4389.72. Public documents confirm the issue affects Chromium’s payments logic and that upstream fixes...

CVE-2021-3477

CVE-2021-3477 affects OpenEXR; a flaw in deep tile sample size calculations in versions before 3.0.0-beta can be triggered by processing a crafted file, causing an integer overflow and an out-of-bounds read. The description notes impact to availability. The provided connected documents confirm th...

CVE-2023-24805

CVE-2023-24805 affects cups-filters: the Backend Error Handler (beh) can be used to create a network-accessible printer, with cmdline unsanitized in beh.c leading to system(cmdline) and remote code execution. Root cause is missing input sanitisation when using beh, allowing arbitrary commands to ...

CVE-2023-5850

The CVE-2023-5850 issue affects Google Chrome/Chromium prior to version 119.0.6045.105, caused by an Incorrect security UI in the Downloads feature that can allow domain spoofing through a crafted domain name. The vulnerability is described as a medium-severity Chromium security issue and is addr...

CVE-2024-26645

CVE-2024-26645 : The issue is in the Linux kernel tracing subsystem (tracing_map) where a race can occur when inserting a new element. The root cause is CPU reordering between memcpy(elt->key, key, map->key_size) and entry->val = elt in __tracing_map_insert(), which can cause a later che...

CVE-2024-3096

CVE-2024-3096 affects PHP runtimes (8.1.x, 8.2.x, and 8.3.x) where password_verify() may incorrectly return true for a password starting with a null byte when tested against a password_hash() value. Connected advisories confirm the issue across multiple distributions and package sets, noting the ...

CVE-2013-4560

lighttpd vulnerable before 1.4.33 due to a use-after-free in FAMMonitorDirectory handling, enabling remote DoS (segfault/crash). Multiple connected sources corroborate the issue and reference mitigation via upgrading to 1.4.34 or newer. No explicit in-the-wild exploit details are provided in the ...

CVE-2015-4870

CVE-2015-4870 is an unspecified MySQL Server vulnerability affecting the Parser, enabling remote authenticated DoS. Connected docs show exploitation via the MySQL 5.5.45/older and 5.6.26/older series through the Procedure ANALYSE function (DoS). An exploit demonstrates that MySQL 5.5.45 is vulner...

CVE-2016-4578

CVE-2016-4578 affects the Linux kernel’s ALSA timer subsystem (snd_timer_user_ccallback and snd_timer_user_tinterrupt). The provided sources confirm a local information leak: if the snd_timer interfaces are used, uninitialized r1 data can be read from kernel stack memory, enabling a local attacke...

CVE-2017-1000083

CVE-2017-1000083 affects GNOME Evince before 3.24.1. It allows command execution via .cbt files that are TAR archives containing a filename starting with a -- option, demonstrated by a --checkpoint-action=exec=bash at the start of the filename. The issue is triggered when opening CBT archives in ...

CVE-2017-1000487

Plexus-utils (component: Plexus-utils library) is vulnerable prior to version 3.0.16 due to improper handling of contents inside double-quoted strings, enabling potential command injection. Affected product references indicate compatibility and remediation paths, with fixes available in 3.0.16 or...

CVE-2017-10074

CVE-2017-10074 affects OpenJDK/OpenJDK Hotspot in Java SE and Java SE Embedded. Affected: Java SE 6u151, 7u141, 8u131; Java SE Embedded 8u131. Root cause per advisories: Hotspot range-checking overflow in OpenJDK leading to possible arbitrary-code execution under a sandbox-compiled Java applet/ru...

CVE-2017-10198

CVE-2017-10198 affects Oracle Java SE, Java SE Embedded, and JRockit. Vulnerability in the Security component (and related areas) allows unauthenticated network-based access to compromise affected Java runtimes (Java SE 6u151, 7u141, 8u131; Embedded 8u131; JRockit R28.3.14). Exploitation is possi...

CVE-2018-1000075

CVE-2018-1000075 affects RubyGems: a negative-size condition in the ruby gem package tar header can cause an infinite loop. Affected ranges include RubyGems in the 2.2, 2.3, 2.4, and 2.5 series (e.g., 2.2.9 and earlier; 2.3.6 and earlier; 2.4.3 and earlier; 2.5.0 and earlier) up to trunk revision...

CVE-2018-5089

CVE-2018-5089 is a memory-safety vulnerability affecting Mozilla products: Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2019-5823

CVE-2019-5823 corresponds to a forced navigation from a service worker vulnerability in Chromium/Google Chrome, allowing navigation restriction bypass via a crafted HTML page. Affected products include Chromium/Chrome before version 74.0.3729.108. The issue is described as an access restriction b...

CVE-2019-7663

LibTIFF 4.0.10 contains CVE-2019-7663 (Invalid Address dereference in TIFFWriteDirectoryTagTransferfunction affecting cpSeparateBufToContigBuf in tiffcp.c), leading to remote denial of service when processing crafted TIFF files. Multiple connected advisories confirm the issue and list CVE-2019-76...

CVE-2020-11019

CVE-2020-11019 in FreeRDP

CVE-2020-15959

CVE-2020-15959 affects Google Chrome/Chromium browsers up to versions prior to 85.0.4183.102, where insufficient policy enforcement in networking could allow an attacker, via social engineering to persuade a user to enable logging, to obtain potentially sensitive information from a process’s memo...

CVE-2020-15976

CVE-2020-15976 is a use-after-free in the WebXR component of Chromium/Google Chrome (Android) prior to 86.0.4240.75, potentially enabling heap corruption and arbitrary code execution via a crafted HTML page. Remediation from connected sources includes upgrading to Chromium 86.0.4240.75 or newer (...

CVE-2020-27813

CVE-2020-27813 is a denial-of-service vulnerability in Gorilla WebSocket (golang-websocket) where an integer overflow in the length of received WebSocket frames could crash the HTTP server. Public advisories (Debian DLA-3420, Ubuntu USN-6208-1, Debian/DLA references) confirm the affected package ...

CVE-2020-27845

CVE-2020-27845 : In OpenJPEG, the flaw in src/lib/openjp2/pi.c (pre-2.4.0) allows an attacker-provided, untrusted input to trigger an out-of-bounds read during conversion/encoding, with impact to availability. Affected: OpenJPEG versions before 2.4.0. Remediation: upgrade to 2.4.0 or newer (per m...

CVE-2021-3410

CVE-2021-3410 concerns libcaca v0.99.beta19 with a buffer overflow in caca_resize (libcaca/caca/canvas.c) that may lead to local code execution. Public sources indicate the issue affects libcaca and patches are released (e.g., Debian LTS advisory DLA-2584-1 and Gentoo GLSA-202402-19) recommending...

CVE-2021-39257

CVE-2021-39257 affects NTFS-3G, where a crafted NTFS image with an unallocated bitmap can trigger an endless recursive call chain starting at ntfs_attr_pwrite, causing stack consumption. Documented impact is a stack exhaustion condition in NTFS-3G

CVE-2021-39260

CVE-2021-39260 affects NTFS-3G with an out-of-bounds access in ntfs_inode_sync_standard_information when processing a crafted NTFS image. The description indicates NTFS-3G versions prior to 2021.8.22 are vulnerable. Connected advisories reference remediation by upgrading to 2021.8.22 or newer (e....

CVE-2021-4159

CVE-2021-4159 is described in connected documents as a Linux kernel EBPF verifier flaw that could allow a local attacker to leak internal kernel memory by causing uninitialized or sensitive data to be exposed to userspace when handling internal data structures during eBPF code insertion. The issu...

CVE-2022-21797

CVE-2022-21797 affects joblib: versions 0 up to 1.1.x are vulnerable to arbitrary code execution via the pre_dispatch flag in Parallel(), caused by an eval() statement. Severity is high/critical per sources; impact is arbitrary code execution. Remediation: upgrade to joblib 1.2.0 or later (e.g., ...

CVE-2022-27378

CVE-2022-27378 affects MariaDB Server, specifically the Create_tmp_table::finalize routine, with exploitation leading to a Denial of Service via specially crafted SQL statements. Available connected documents corroborate the issue across multiple MariaDB versions (notably v10.7 and below) and des...

CVE-2024-26733

CVE-2024-26733 (Linux kernel) : A heap-based buffer overflow in arp_req_get() was fixed. The issue occurs when ioctl(SIOCGARP) copies neigh->ha into arpreq.arp_ha.sa_data (14-byte sockaddr) with a 14-byte copy, risking overflow into arp_flags and overwriting arp_netmask if dev->addr_len exc...

CVE-2024-35809

The CVE-2024-35809 entry describes a race in the Linux kernel's PCI runtime power management path: the .runtime_idle() callback in rtsx_pcr PCI driver can still be running when pm_runtime_get_sync() returns, leading to a race with the post-sync code and a potential kernel crash due to an unhandle...

CVE-2024-35847

CVE-2024-35847 affects the Linux kernel irqchip/gic-v3-its path. The vulnerability stems from the error handling in its_vpe_irq_domain_alloc(), where a double free occurs if its_vpe_init() fails after at least one interrupt was allocated. The code frees the area bitmap and vprop_page in its_vpe_i...

CVE-2024-49883

In CVE-2024-49883, the Linux kernel ext4 ext4_ext_insert_extent() is vulnerable to use-after-free when a path is reallocated in ext4_ext_create_new_leaf(), leaving a stale path in ext4_ext_insert_extent() and triggering UAF (KASAN) during map/write paths. The issue is reproduced via a realloc of ...

CVE-2017-6891

CVE-2017-6891 affects libtasn1 (GnuTLS libtasn1) with two errors in asn1_find_node() in lib/parser_aux.c of version 4.10 that can be triggered by processing a specially crafted assignments file (e.g., via asn1Coding). This can cause a stack-based buffer overflow and allow arbitrary code execution...

CVE-2018-18226

CVE-2018-18226 affects Wireshark 2.6.0–2.6.3, where the Steam IHS Discovery dissector could leak memory due to a memory-management issue in epan/dissectors/packet-steam-ihs-discovery.c, enabling memory exhaustion and potential DoS. Mitigation: upgrade to Wireshark 2.6.4 or newer (upstream fix). P...

CVE-2018-8087

The CVE-2018-8087 issue affects the Linux kernel driver code in mac80211_hwsim.c (hwsim_new_radio_nl). It describes a memory leak that can be triggered by an out-of-array error, allowing local users to cause denial of service through memory consumption. The vulnerability is reported for the kerne...

CVE-2019-12921

GraphicsMagick (before 1.3.32) is affected by CVE-2019-12921 where the text filename component could read arbitrary files via TranslateTextEx in SVG processing. OpenSUSE and Debian advisories explicitly reference CVE-2019-12921 alongside CVE-2020-10938, with patches to fix the issues (e.g., updat...

CVE-2019-16770

Puma (Ruby/Rack server) is vulnerable to a denial-of-service via greedily kept-alive connections that monopolize the reactor. Initial CVE-2019-16770 affects Puma versions before 3.12.2 and 4.3.1; the advisory notes these versions are patched in 3.12.2 and 4.3.1. Connected sources show subsequent ...

CVE-2019-18179

CVE-2019-18179 affects Open Ticket Request System (OTRS). An attacker authenticated as an agent can enumerate tickets assigned to other agents, including in queues where they lack permissions. Affected products/versions: OTRS 7.0.x (up to 7.0.12); Community Edition 5.0.x (up to 5.0.38); 6.0.x (up...

CVE-2019-9371

CVE-2019-9371 affects libvpx and is characterized by a resource-exhaustion denial of service due to improper input validation. The issue is linked to multiple package advisories and security bulletins across distributions (e.g., Debian DSA-4578-1, AlmaLinux libvpx security update, Fedora package ...

CVE-2020-3350

CVE-2020-3350 concerns ClamAV (and is referenced in the Cisco/AMP context in the initial doc). A vulnerability allowed a malicious user to trick clamscan, clamdscan or clamonacc into deleting or moving a different file than intended when using the --move or --remove options. The underlying issue ...

CVE-2020-6554

CVE-2020-6554 is a use-after-free in Chrome extensions that could enable a sandbox escape via a crafted extension in Chrome versions before 84.0.4147.125. Public connected documents confirm Chromium/Chrome advisories and Debian advisory references to this vulnerability and related fixes; one Debi...

CVE-2021-21159

CVE-2021-21159 describes a heap buffer overflow in Chrome’s TabStrip prior to 89.0.4389.72. A remote attacker could potentially exploit this heap corruption via a crafted HTML page, leading to arbitrary code execution or crash. Connected advisories confirm Chrom(e/ium) components affected and not...