CVE-2023-4350

CVE-2023-4350 is an issue in Chromium-based Chrome on Android involving an inappropriate implementation in Fullscreen that could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The vulnerability originates from the Fullscreen implementation and affects Android buil...

CVE-2023-4906

Chromium/Google Chrome Autofill vulnerability CVE-2023-4906: Insufficient policy enforcement in Autofill allows bypass via a crafted HTML page. Descriptions in connected docs confirm affected components (Chromium/Chrome/ChromeOS), root cause, and low severity. Public fixes exist: Debian/Debian se...

CVE-2024-26679

CVE-2024-26679 : Linux kernel vulnerability where inet_recv_error() reads sk->sk_family without holding the socket lock, enabling a mutation from IPv6 to IPv4 via IPV6_ADDRFORM and potentially triggering a KCSAN warning. Documented fixes exist in kernel commits (see references to stable/commit...

CVE-2024-36883

CVE-2024-36883 is a Linux kernel vulnerability in the networking code, specifically a out-of-bounds access in the function path associated with pernet ops. The root cause is a sequence where net_alloc_generic reads max_gen_ptrs twice (before and after a potential race) while net_alloc runs withou...

CVE-2011-3045

CVE-2011-3045 describes an integer signedness error in libpng’s png_inflate (pngrutil.c) affecting libpng before 1.4.10beta01. The vulnerability, cited as used in Google Chrome before 17.0.963.83 and other products, can cause a denial of service (application crash) or potentially allow arbitrary ...

CVE-2016-3627

CVE-2016-9596, related to libxml2 used in Red Hat JBoss Core Services, allows a denial of service via crafted XML when in recovery mode. This vulnerability exists because of an incorrect fix for CVE-2016-3627 and results in stack consumption. The issue is specifically described as a DoS (stack gr...

CVE-2018-10844

CVE-2018-10844 affects GnuTLS HMAC-SHA-256 and is described in multiple sources (IBM advisories and third‑party feeds) as a Lucky Thirteen–style timing attack enabling distinguishing and plaintext‑recovery via crafted packets. Affected products include IBM Power Hardware Management Console and IB...

CVE-2018-20546

CVE-2018-20546 is a READ memory access bug in libcaca 0.99.beta19 (function get_rgba_default in caca/dither.c) that affects multiple bpp configurations. Connected sources indicate fixes were released in later libcaca updates (e.g., libcaca 0.99-0.59.beta20 and related SUSE/openSUSE/FreeBSD adviso...

CVE-2018-4181

Summary: CVE-2018-4181 affects CUPS in macOS High Sierra prior to 10.13.5. The issue enables a local attacker to read arbitrary files as root due to an access-control/sandbox-related weakness in CUPS. The related connected documents describe this as a local privilege escalation with root-read cap...

CVE-2020-0256

CVE-2020-0256 is a vulnerability in the gdisk GPT disk utility. The issue is an out-of-bounds write in LoadPartitionTable of gpt.cc, caused by a missing bounds check, which could enable local escalation of privilege when inserting a malicious USB device. Affected software across multiple distribu...

CVE-2020-27750

CVE-2020-27750 affects ImageMagick between MagickCore components colorspace-private.h and quantum.h. A crafted file processed by ImageMagick could trigger undefined behavior due to values outside the range of unsigned char and possible division by zero, with the impact primarily on availability. ...

CVE-2020-9430

CVE-2020-9430 affects Wireshark’s WiMax DLMAP dissector, crashing versions 3.2.0–3.2.1, 3.0.0–3.0.8, and 2.6.0–2.6.14. Root cause: length field validation flaw in dissector code (plugins/epan/wimax/msg_dlmap.c). Fix: added validation of the length field. Public references describe attacker-trigge...

CVE-2022-23094

Summary (CVE-2022-23094) Libreswan versions 4.2–4.5 are affected by a denial-of-service issue triggered by a malformed IKEv1 packet, caused by pluto/ikev1.c assuming a state object exists. This can lead to a NULL pointer dereference and daemon crash. The issue is fixed in version 4.6. Impact and ...

CVE-2022-27378

CVE-2022-27378 affects MariaDB Server, specifically the Create_tmp_table::finalize routine, with exploitation leading to a Denial of Service via specially crafted SQL statements. Available connected documents corroborate the issue across multiple MariaDB versions (notably v10.7 and below) and des...

CVE-2023-1810

CVE-2023-1810 corresponds to a heap buffer overflow in Visuals of Google Chrome/Chromium before 112.0.5615.49. The issue allows a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Severity is High (CVSS v3.1 base score 8.8). A...

CVE-2023-4352

CVE-2023-4352 is a Type Confusion in V8 affecting Google Chrome and other Chromium-based browsers prior to 116.0.5845.96, enabling potential heap corruption via a crafted HTML page. The CVE is rated High (8.8) with network attack vector, low complexity, requiring user interaction, and impacts to ...

CVE-2023-52597

CVE-2023-52597 affects the Linux kernel KVM for s390. The vulnerability arises in kvm_arch_vcpu_ioctl_set_fpu(), which can set the FLOATING-POINT CONTROL (FPC) register of a guest and, due to a test of validity, may corrupt the host process’s fpc if an interrupt occurs during the test. The patch ...

CVE-2023-5474

CVE-2023-5474 corresponds to a heap buffer overflow in PDF handling in Google Chrome/Chromium before 118.0.5993.70. A remote attacker could exploit this by convincing a user to perform specific interactions with a crafted PDF, potentially causing heap corruption. Public advisories reference Chrom...

CVE-2024-26641

CVE-2024-26641 concerns the Linux kernel. The vulnerability arises in ip6_tunnel, where __ip6_tnl_rcv() could access uninitialized data due to not pulling the inner header early enough. The fix, as noted in multiple advisories (e.g., Astra Linux security bulletins), is to call pskb_inet_may_pull(...

CVE-2024-35853

CVE-2024-35853 affects the Linux kernel mlxsw spectrum_acl_tcam rehash path. The vulnerability arises from memory leaks during the rehash operation when migrating filters between regions. The current migration logic uses two chunks (vchunk->chunk and vchunk->chunk2) and can incorrectly assu...

CVE-2015-2643

CVE-2015-2643 affects Oracle MySQL Server before versions 5.5.44 and 5.6.44 (the report lists 5.5.43 and earlier, 5.6.24 and earlier). The vulnerability is in the Server: Optimizer component and is described as unspecified, enabling remote authenticated users to cause a denial of service. Public ...

CVE-2015-3167

Summary: CVE-2015-3167 affects PostgreSQL contrib/pgcrypto; when an incorrect key is used, it returns different error messages, enabling possible key exposure via brute force. The issue affects multiple branches and versions prior to fixed releases. Root cause: inconsistent error responses in pgc...

CVE-2017-5386

CVE-2017-5386 : WebExtension scripts can use the data: protocol to affect pages loaded by other web extensions, enabling potential data disclosure or privilege escalation. Public disclosures show the issue affects Mozilla Firefox releases including ESR builds and Firefox versions prior to 51.0.1 ...

CVE-2018-10194

Ghostscript vulnerability CVE-2018-10194 resides in the pdfwrite code path (gdevpdts.c) where a stack-based out-of-bounds write in pdf_set_text_matrix can be triggered by a crafted PDF. Affected product is Ghostscript; historical references show the issue affecting Ghostscript up to version 9.22,...

CVE-2018-12383

CVE-2018-12383 describes an information disclosure in Thunderbird (and Firefox components) where, if a user saved passwords before migrating to the new password format (pre-Firefox 58) and later set a master password, an unencrypted copy of those passwords could remain accessible because the lega...

CVE-2018-14340

CVE-2018-14340 affects Wireshark dissectors that support zlib decompression across Wireshark versions 2.2.0–2.2.15, 2.4.0–2.4.7, and 2.6.0–2.6.1. Root cause: negative lengths in the zlib decompression path could cause a buffer over-read and crash. Mitigation identified in the connected documents ...

CVE-2018-14352

CVE-2018-14352 affects Mutt up to 1.10.0 and NeoMutt up to 2018-07-16. The imap_quote_string function in imap/util.c does not leave room for quote characters, causing a stack-based buffer overflow. Mageia and Fedora advisories indicate this could allow arbitrary code execution; patches exist: Mut...

CVE-2018-14678

CVE-2018-14678 affects the Linux kernel up to 4.17.11 (and Xen up to 4.11.x). The xen_failsafe_callback entry in arch/x86/entry/entry_64.S does not properly preserve RBX, enabling local attackers to trigger uninitialized memory usage, causing a denial of service; 64-bit x86 PV Linux guests may cr...

CVE-2018-20847

CVE-2018-20847 is an overflow vulnerability in OpenJPEG fixed by upgrading to OpenJPEG 2.4.0+. The issue arises from an improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in opj_get_encoding_parameters within openjp2/pi.c up to OpenJPEG 2.3.0, enabling an integer overflow. Public advisories fr...

CVE-2018-5104

CVE-2018-5104 is a use-after-free in font-face manipulation that can trigger a crash when a font face is freed while still in use. Affected products include Mozilla Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2020-12673

CVE-2020-12673 affects Dovecot prior to 2.3.11.3. An out-of-bounds read in the NTLM authentication handling can crash the auth service when processing a specially formatted NTLM request. Public advisories and package updates confirm the fix is included in Dovecot 2.3.11.3 (and related security up...

CVE-2020-15166

CVE-2020-15166 affects ZeroMQ (libzmq) up to 4.3.3. The vulnerability arises when a remote, unauthenticated client connects to a CURVE/ZAP-protected endpoint before the handshake completes, allowing a denial-of-service where legitimate clients cannot exchange messages, though handshakes complete....

CVE-2020-1753

Affected software: Ansible Engine via Astra Linux advisory references the same CVE-2020-1753 issue affecting Ansible 2.7.x before 2.7.17, 2.8.x before 2.8.11, and 2.9.x before 2.9.7 when using the k8s module to manage Kubernetes. Vulnerability details: Sensitive parameters (passwords/tokens) are ...

CVE-2020-27759

ImageMagick CVE-2020-27759: In IntensityCompare() (MagickCore/quantize.c) a double value could be cast to int, returning a value outside the int range when processing crafted input; Red Hat marks the issue as Low severity and reports no specific impact beyond potential availability impact. Affect...

CVE-2020-27830

CVE-2020-27830 is a Linux Kernel vulnerability where spk_ttyio_receive_buf2() can dereference spk_ttyio_synth when it is NULL, causing a NULL-pointer dereference crash. The connected Nessus advisories (Unity Linux UTSA-2026-001485, UTSA-2026-004226, UTSA-2026-003925) reference this CVE as part of...

CVE-2021-20176

CVE-2021-20176 is a divide-by-zero flaw in ImageMagick 6.9.11-57 and 7.0.10-57 (gem.c) that can trigger undefined behavior and impact availability when processing crafted images. Connected documents confirm the same root cause and affected code path, with no public details on exploitation beyond ...

CVE-2021-26910

Firejail is affected by CVE-2021-26910 due to a TOCTOU race between a stat operation and an OverlayFS mount, enabling a local attacker to bypass sandbox restrictions and potentially escalate privileges. Affected versions are prior to 0.9.64.4; remediation is upgrading to 0.9.64.4 or applying vend...

CVE-2021-30951

CVE-2021-30951 is a WebKit-family use-after-free vulnerability that may be triggered by processing malicious web content. Affected components include WebKit (Safari/WebKit on Apple platforms) and WebKitGTK/WebKit2GTK variants. The root cause is described as a memory-management issue leading to po...

CVE-2021-31542

Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1 are affected by CVE-2021-31542. MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with crafted file names due to insufficient basename/path sanitation. The issue is addressed by stricter bas...

CVE-2021-3760

The CVE-2021-3760 entry describes a use-after-free in the Linux kernel’s NFC (NCI) driver stack. The vulnerability could allow a local attacker to cause memory corruption or a crash, potentially enabling privilege escalation and affecting confidentiality, integrity, or availability. Public detail...

CVE-2022-2056

CVE-2022-2056 is a Divide By Zero vulnerability in tiffcrop of libtiff 4.4.0 that allows DoS via a crafted TIFF file. A fix is available (commit f3a5e010). Connected advisories cite libtiff DoS mitigations across multiple distros (ALAS2-2023-2263/ALSA-2023:0302/ALSM:0095, Debian DSA-5333-1, DLA-3...

CVE-2022-2132

CVE-2022-2132 is a DoS vulnerability in DPDK caused by a permissive input validation that allows a remote attacker to trigger a denial of service by sending a crafted Vhost header. The issue affects the DPDK component handling Vhost descriptors, where processing of the Vhost header can exhaust mb...

CVE-2022-3889

CVE-2022-3889 : Type Confusion in V8 affecting Google Chrome/Chromium prior to 107.0.5304.106, leading to potential heap corruption via a crafted HTML page. Root cause: type confusion in V8. Impact: remote attacker could exploit to compromise memory; Chromium security rating: High. Affected produ...

CVE-2023-36664

CVE-2023-36664 affects Artifex Ghostscript up to version 10.01.2. The issue is a mishandling of permission validation for pipe devices (prefixes %pipe% or the | character), which could allow arbitrary command execution when processing crafted documents. Public advisories confirm the vulnerability...

CVE-2023-5473

CVE-2023-5473 affects Google Chrome/Chromium Cast: Use-after-free in Cast prior to 118.0.5993.70 allows a renderer-compromised remote attacker to potentially cause heap corruption via a crafted HTML page (Chromium severity: Low). Public disclosures and advisories in connected documents confirm th...

CVE-2024-26671

CVE-2024-26671 describes a Linux kernel IO hang caused by blk-mq wakeup/race where __add_wait_queue() can be reordered with blk_mq_get_driver_tag() on tag failure, leading __sbitmap_queue_wake_up() to miss the waiter and not wake up, while blk_mq_mark_tag_wait() cannot obtain a driver tag. The fi...

CVE-2024-26846

CVE-2024-26846 affects the Linux kernel’s nvme-fc unloading path. A race between nvme_delete_ctrl and ida_destroy could double-free IDs, causing module unload hangs. The fix adds synchronization to ensure nvme_delete_ctrl code runs before leaving nvme_fc_exit_module and flushes the nvme_delete_wq...

CVE-2015-3636

CVE-2015-3636 affects the Linux kernel up to 4.0.2, in the ping_unhash path of net/ipv4/ping.c. The issue arises because a certain list data structure is not initialized during an unhash operation, enabling a local user with ping socket access to crash the system or potentially gain privileges by...

CVE-2016-0787

The CVE-2016-0787 entry concerns libssh2 (before 1.7.0) where the diffie_hellman_sha256 function truncates ephemeral DH secrets to 128 or 256 bits, enabling potential man-in-the-middle decryption/interception of SSH sessions. Root cause: truncated DH secret length. Impact: weakened SSH handshake ...

CVE-2017-3238

CVE-2017-3238 affects the MySQL Server component (Server: Optimizer). Affected MariaDB/MySQL versions include 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The vulnerability is exploitable over the network via multiple protocols, with a low-privileged attacker able to cause a ha...