CVE-2018-14353

CVE-2018-14353 is an integer underflow in the function imap_quote_string in imap/util.c , affecting Mutt < 1.10.1 and NeoMutt

CVE-2018-14369

Wireshark HTTP/2 dissector CVE-2018-14369 affects Wireshark 2.6.0–2.6.1, 2.4.0–2.4.7, and 2.2.0–2.2.15, where the HTTP2 dissector could crash. Root cause: missing validation of header data before header decompression. Fix implemented in epan/dissectors/packet-http2.c by adding a check for header ...

CVE-2019-12921

GraphicsMagick (before 1.3.32) is affected by CVE-2019-12921 where the text filename component could read arbitrary files via TranslateTextEx in SVG processing. OpenSUSE and Debian advisories explicitly reference CVE-2019-12921 alongside CVE-2020-10938, with patches to fix the issues (e.g., updat...

CVE-2019-17362

CVE-2019-17362 affects LibTomCrypt up to version 1.18.2. The vulnerability resides in der_decode_utf8_string (der_decode_utf8_string.c), which fails to detect certain invalid UTF-8 sequences, enabling context-dependent attackers to cause a denial of service via an out-of-bounds read and crash, or...

CVE-2019-9898

PuTTY before 0.71 is affected by CVE-2019-9898 (potential recycling of random numbers in cryptography). Debian/OpenSUSE/Fedora advisories show an upstream 0.71 release fixed CVE-2019-9898 among others; remediation is upgrading PuTTY to 0.71 or newer. Impact includes cryptographic randomness reuse...

CVE-2020-25653

CVE-2020-25653 describes a race-condition in spice-vdagentd that can let an unprivileged local guest user hijack the active agent via new UNIX socket connections, risking DoS or host data leakage. Affected: spice-vdagentd/spice-vdagent (v0.20 and earlier). Connected advisories/vendor notes consis...

CVE-2020-6555

CVE-2020-6555 affects Google Chrome/Chromium WebGL. The vulnerability is an out-of-bounds read in WebGL that could allow a remote attacker to read potentially sensitive data from a process memory via a crafted page, prior to Chrome version 84.0.4147.125. Affected products include Chrome/Chromium ...

CVE-2020-8167

The CVE-2020-8167 issue is a CSRF vulnerability in Rails UJS (Rails UJS) affecting Rails up to 6.0.3. If an attacker can control the href of a link or the action of a form, they can cause the CSRF token to be sent to a cross‑origin URL, potentially leaking tokens. Remediation: upgrade Rails to Ra...

CVE-2021-21204

CVE-2021-21204 is a use-after-free in Blink/WebKit reported for Google Chrome on macOS before 90.0.4430.72, allowing remote heap corruption via a crafted HTML page. The issue is confirmed across multiple vendor advisories (Debian, Fedora, Alpine, Astra Linux) and is addressed by updating to Chrom...

CVE-2022-20369

CVE-2022-20369 : In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out-of-bounds write due to improper input validation, leading to local escalation of privileges with System execution privileges needed. User interaction is not required. Connected Astra Linux bulletin reiterates this de...

CVE-2022-21797

CVE-2022-21797 affects joblib: versions 0 up to 1.1.x are vulnerable to arbitrary code execution via the pre_dispatch flag in Parallel(), caused by an eval() statement. Severity is high/critical per sources; impact is arbitrary code execution. Remediation: upgrade to joblib 1.2.0 or later (e.g., ...

CVE-2022-3099

CVE-2022-3099 (vim/vim) affects Vim. The issue is a use-after-free in do_cmdline triggered when an invalid line number on the for loop is ignored, potentially causing a crash or memory corruption. Public advisories confirm the vulnerability in Vim prior to version 9.0.0360 and indicate a fix in 9...

CVE-2022-41849

CVE-2022-41849 affects the Linux kernel, specifically drivers/video/fbdev/smscufx.c, where a race between ufx_ops_open and ufx_usb_disconnect can cause a use-after-free if a nearby attacker unplugs a USB device during open(). The vulnerability is locally exploitable with physical access and has a...

CVE-2023-3180

CVE-2023-3180 affects the QEMU virtio-crypto implementation. The vulnerability arises from not checking src_len vs dst_len in virtio_crypto_sym_op_helper, enabling a heap buffer overflow during encryption/decryption requests via virtio_crypto_handle_sym_req. Public references (Debian, CNVD, CNAs)...

CVE-2015-1782

CVE-2015-1782 affects libssh2: the kex_agree_methods() function in libssh2 before 1.5.0 can crash a client or cause other unspecified impact when processing crafted length values in SSH_MSG_KEXINIT. Public advisories indicate a fix was released in libssh2 1.5.0 (and backports in various distribut...

CVE-2017-14867

CVE-2017-14867 affects Git and is caused by unsafe Perl scripts used to support subcommands (notably cvsserver). Vulnerable builds include Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2. The flaw allows an attacker to execute arbitrar...

CVE-2017-15705

The CVE-2017-15705 entry concerns Apache SpamAssassin before 3.4.2, where crafted emails with unclosed HTML tags can trigger scan timeouts and Denial of Service. The root cause is tied to HTML::Parser usage in SpamAssassin: begin/end tag events are followed by an immediate close, causing the miss...

CVE-2017-3312

CVE-2017-3312 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Affected are versions 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The vulnerability description notes it is difficult to exploit and requires a low-privilege attacker with logon...

CVE-2017-3453

CVE-2017-3453 affects the MySQL Server component (Server: Optimizer). Affected are Oracle MySQL versions 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability allows a low-privilege attacker with network access to cause a hang or frequent crash (complete DOS) of MySQL ...

CVE-2018-1000180

CVE-2018-1000180 affects Bouncy Castle BC 1.54–1.59 (and BC-FJA 1.0.0/1.0.1) with a flaw in the Low-level RSA key pair generator interface that may produce RSA key pairs with fewer Miller–Rabin primality tests than expected. IBM vulnerability bulletins associate this CVE with IBM products (e.g., ...

CVE-2018-14341

CVE-2018-14341 affects Wireshark’s DICOM dissector. The vulnerability allows a large or infinite loop in the dissector for Wireshark versions 2.6.0–2.6.1, 2.4.0–2.4.7, and 2.2.0–2.2.15. The root cause is an offset overflow in the DICOM parsing path, and the issue was addressed in the code path ep...

CVE-2018-15572

CVE-2018-15572: Linux kernel

CVE-2018-19362

CVE-2018-19362: A vulnerability in Jackson Databind (FasterXML) affects 2.x prior to 2.9.8, due to failure to block the jboss-common-core class in polymorphic deserialization. The IBM doc lists an unknown impact/attack vector with a base score of 5.3 and notes the issue as an unspecified deserial...

CVE-2018-19623

Wireshark CVE-2018-19623 affects the LBMPDM dissector in versions 2.6.0–2.6.4 and 2.4.0–2.4.10. The flaw allows a remote attacker to write arbitrary data to memory locations before the packet-scoped memory, causing a crash. Root cause: the LBMPDM dissector did not disallow certain negative values...

CVE-2018-19625

CVE-2018-19625 affects Wireshark 2.6.0–2.6.4 and 2.4.0–2.4.10. The dissection engine could crash due to a heap-based buffer over-read in epan/tvbuff_composite.c, which was addressed by preventing the over-read. According to the connected material, this is a defect in the dissection engine, with n...

CVE-2018-19966

The CVE-2019-19578 entries describe a Xen hypervisor vulnerability up through 4.12.x (affecting x86 PV guests) caused by an incorrect fix for CVE-2017-15595 in the handling of linear pagetables. This allows a malicious or buggy PV guest to trigger a denial of service (host crash) and may enable p...

CVE-2018-5785

OpenJPEG 2.3.0 is affected by CVE-2018-5785 due to an integer overflow caused by an out-of-bounds left shift in opj_j2k_setup_encoder (openjp2/j2k.c). This vulnerability can allow a remote attacker to cause a denial of service via a crafted BMP file. Multiple vendor advisories (Debian DSA-4405, A...

CVE-2020-11018

CVE-2020-11018 affects FreeRDP when running versions

CVE-2020-12625

CVE-2020-12625 concerns Roundcube Webmail up to version 1.4.3, with a cross-site scripting (XSS) vulnerability in rcube_washtml.php that allows JavaScript in HTML message CDATA to be executed. Public advisories (e.g., Ubuntu USN-5182-1, Debian DSA-4674-1, openSUSE openSUSE-2020-1516) confirm the ...

CVE-2020-14399

CVE-2020-14399 affects LibVNCServer before 0.9.13. The issue is that Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c, enabling potential memory handling problems. Many OpenVAS/Nessus advisories reference this CVE among multiple LibVNCServer issues; the confirmed...

CVE-2020-15859

CVE-2020-15859 affects QEMU 4.2.0, where a guest OS user can trigger a use-after-free in hw/net/e1000e_core.c by crafting an e1000e packet whose data address targets the MMIO address. Public details show potential for denial of service and, in some advisories, the possibility of arbitrary code ex...

CVE-2020-15962

Chromium/Google Chrome before 85.0.4183.121 is affected by a serial policy validation insufficiency that could allow a remote attacker to cause out-of-bounds memory access via a crafted HTML page. The issue is documented as CVE-2020-15962 and is addressed by upgrading to Chromium 85.0.4183.121+ (...

CVE-2020-15980

CVE-2020-15980: In Chromium/Chrome, insufficient policy enforcement in the Intents component allows a local attacker to bypass navigation restrictions via crafted Intents. Impact is described as local code execution/privilege by affected components; Debian/Arch/FreeBSD advisories indicate fixes i...

CVE-2020-16004

CVE-2020-16004 affects Google Chrome/Chromium before 86.0.4240.183. The issue is a use-after-free in the user interface, leading to potential heap corruption exploitable by a remote attacker via a crafted HTML page. Multiple connected advisories confirm the same CVE and the vulnerability’s impact...

CVE-2020-1765

CVE-2020-1765 affects OTRS Open Source Ticket Request System. An improper control of parameters allows spoofing of the From fields in AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. Public advisories describe affected product lines: OTRS Community Edition 5...

CVE-2020-27675

CVE-2020-27675 describes a race condition in the Xen event-channel handling code (drivers/xen/events/events_base.c) that permits removal of an event channel during event handling, causing a use-after-free or NULL dereference and potentially a dom0 crash. The issue is present in the Linux kernel u...

CVE-2020-27745

CVE-2020-27745 is a Slurm RPC Buffer Overflow in the PMIx MPI plugin. Connected advisories confirm the issue affects Slurm (Slurm-llnl) and dataset entries reference Ubuntu/Debian mitigations. Debian DLA-2886-1 fixes this CVE (and others) by upgrading slurm-llnl to 16.05.9-1+deb9u5; Ubuntu USN-47...

CVE-2021-0561

CVE-2021-0561 is an out-of-bounds write in append_to_verify_fifo_interleaved_() of stream_encoder.c, enabling local information disclosure without extra privileges. The vulnerability is observed in FLAC libraries across multiple distros; no exploit details are provided in the documents. Remediati...

CVE-2021-21207

CVE-2021-21207 is a use-after-free in IndexedDB in Google Chrome prior to 90.0.4430.72. The vulnerability could allow an attacker who convinces a user to install a malicious Chrome Extension to potentially perform a sandbox escape via a crafted extension. Affected component is the IndexedDB imple...

CVE-2021-22116

CVE-2021-22116 affects RabbitMQ prior to 3.8.16, exposing a denial-of-service via improper input validation in the AMQP 1.0 client connection endpoint. A remote attacker can send crafted AMQP messages to a RabbitMQ server with the AMQP 1.0 plugin enabled, potentially crashing the server. Public a...

CVE-2021-3410

CVE-2021-3410 concerns libcaca v0.99.beta19 with a buffer overflow in caca_resize (libcaca/caca/canvas.c) that may lead to local code execution. Public sources indicate the issue affects libcaca and patches are released (e.g., Debian LTS advisory DLA-2584-1 and Gentoo GLSA-202402-19) recommending...

CVE-2021-3933

OpenEXR CVE-2021-3933: an integer overflow can occur when processing crafted images on platforms where size_t

CVE-2021-4069

CVE-2021-4069 affects Vim with a Use-After-Free vulnerability. Public advisories (CBL-Mariner entry) note vim versions less than 8.2.4081-1 are affected; upgrading to 8.2.4081-1 or newer mitigates the issue. Other notices reiterate vim use-after-free variants. No exploit details are provided in t...

CVE-2022-0368

CVE-2022-0368 affects the Vim/ Vim project, with an out-of-bounds read in vim/vim prior to 8.2. The entry lists a mix of impact indicators (C/H/I/A high/partial) and a CVSS 3.1 base score of 7.8 (LOCAL, HIGH) indicating local access and user interaction is required. The documents do not provide a...

CVE-2022-3705

CVE-2022-3705 affects vim. The vulnerability is in the function qf_update_buffer (file quickfix.c) of the autocmd Handler, causing a use-after-free. It may be triggered remotely. A fix is available in vim 9.0.0805; patch name: d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. Evidence of impact and remed...

CVE-2023-4350

CVE-2023-4350 is an issue in Chromium-based Chrome on Android involving an inappropriate implementation in Fullscreen that could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The vulnerability originates from the Fullscreen implementation and affects Android buil...

CVE-2023-4906

Chromium/Google Chrome Autofill vulnerability CVE-2023-4906: Insufficient policy enforcement in Autofill allows bypass via a crafted HTML page. Descriptions in connected docs confirm affected components (Chromium/Chrome/ChromeOS), root cause, and low severity. Public fixes exist: Debian/Debian se...

CVE-2024-26679

CVE-2024-26679 : Linux kernel vulnerability where inet_recv_error() reads sk->sk_family without holding the socket lock, enabling a mutation from IPv6 to IPv4 via IPV6_ADDRFORM and potentially triggering a KCSAN warning. Documented fixes exist in kernel commits (see references to stable/commit...

CVE-2024-3096

CVE-2024-3096 affects PHP runtimes (8.1.x, 8.2.x, and 8.3.x) where password_verify() may incorrectly return true for a password starting with a null byte when tested against a password_hash() value. Connected advisories confirm the issue across multiple distributions and package sets, noting the ...

CVE-2024-36883

CVE-2024-36883 is a Linux kernel vulnerability in the networking code, specifically a out-of-bounds access in the function path associated with pernet ops. The root cause is a sequence where net_alloc_generic reads max_gen_ptrs twice (before and after a potential race) while net_alloc runs withou...