CVE-2023-5474

CVE-2023-5474 corresponds to a heap buffer overflow in PDF handling in Google Chrome/Chromium before 118.0.5993.70. A remote attacker could exploit this by convincing a user to perform specific interactions with a crafted PDF, potentially causing heap corruption. Public advisories reference Chrom...

CVE-2024-35866

CVE-2024-35866: Linux kernel SMB CIFS client use-after-free in cifs_dump_full_key() addressed by skipping sessions tearing down (status == SES_EXITING) to prevent UAF. Connected docs confirm this fix and list multiple downstream advisories (e.g., ALAS2KERNEL, ALAS2023, Debian DLA-4193-1) referenc...

CVE-2024-35867

CVE-2024-35867 pertains to the Linux kernel SMB client. The vulnerability arises from a potential use-after-free in cifs_stats_proc_show(), mitigated by skipping sessions that are tearing down (status SES_EXITING) to prevent UAF. The fix resolves a local-attack scenario with high impact on confid...

CVE-2025-37738

CVE-2025-37738 details from Connected docs show a Linux kernel ext4 vulnerability: ext4_xattr_inode_dec_ref_all may read past the end while processing xattrs, leading to a slab-use-after-free as reported by KASAN. The fix makes ext4_xattr handling ignore xattrs entries beyond the end, preventing ...

CVE-2016-3074

CVE-2016-3074 is a heap-based buffer overflow in GD Graphics Library (libgd/libgd2) caused by a signedness error when processing crafted compressed gd2 data. The vulnerability can lead to a crash or potentially remote code execution. Affected software centers on libgd2/gd2 components (GD library,...

CVE-2017-5462

The CVE-2017-5462 issue is a DRBG generation flaw in the NSS library where the internal state V does not correctly carry bits over. This vulnerability affects Mozilla products including Thunderbird (<52.1), Firefox ESR (<52.1), Firefox (

CVE-2018-14353

CVE-2018-14353 is an integer underflow in the function imap_quote_string in imap/util.c , affecting Mutt < 1.10.1 and NeoMutt

CVE-2018-17100

LibTIFF 4.0.9 contains an int32 overflow in multiply_ms within tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly other impact when processing crafted image files. This CVE (CVE-2018-17100) has been acknowledged in multiple advisories (Debian DSA-4670, Red Hat/CentOS adviso...

CVE-2019-17362

CVE-2019-17362 affects LibTomCrypt up to version 1.18.2. The vulnerability resides in der_decode_utf8_string (der_decode_utf8_string.c), which fails to detect certain invalid UTF-8 sequences, enabling context-dependent attackers to cause a denial of service via an out-of-bounds read and crash, or...

CVE-2020-12673

CVE-2020-12673 affects Dovecot prior to 2.3.11.3. An out-of-bounds read in the NTLM authentication handling can crash the auth service when processing a specially formatted NTLM request. Public advisories and package updates confirm the fix is included in Dovecot 2.3.11.3 (and related security up...

CVE-2020-14365

CVE-2020-14365 affects the Ansible Engine (ansible-engine 2.8.x before 2.8.15; 2.9.x before 2.9.13). When using the dnf module, GPG signatures are ignored during installation if disable_gpg_check is False, allowing potentially malicious packages to be installed and their installation scripts to e...

CVE-2020-27745

CVE-2020-27745 is a Slurm RPC Buffer Overflow in the PMIx MPI plugin. Connected advisories confirm the issue affects Slurm (Slurm-llnl) and dataset entries reference Ubuntu/Debian mitigations. Debian DLA-2886-1 fixes this CVE (and others) by upgrading slurm-llnl to 16.05.9-1+deb9u5; Ubuntu USN-47...

CVE-2020-27830

CVE-2020-27830 is a Linux Kernel vulnerability where spk_ttyio_receive_buf2() can dereference spk_ttyio_synth when it is NULL, causing a NULL-pointer dereference crash. The connected Nessus advisories (Unity Linux UTSA-2026-001485, UTSA-2026-004226, UTSA-2026-003925) reference this CVE as part of...

CVE-2020-28037

CVE-2020-28037 affects WordPress prior to 5.5.2. The vulnerability lies in is_blog_installed in wp-includes/functions.php, which can misclassify a new installation and allow an attacker to perform a fresh install, potentially leading to remote code execution and DoS on the old installation. Affec...

CVE-2021-0308

CVE-2021-0308: In ReadLogicalParts of basicmbr.cc there is a missing bounds check causing an out-of-bounds write. This could enable local escalation of privilege with no additional execution privileges and no user interaction. Affected products listed include Android versions 8.1–11 (Android-8.1,...

CVE-2022-31799

Bottle before 0.12.20 mishandles errors during early request binding, exposing a vulnerability that can disclose sensitive information. Public advisories confirm affected software: python-bottle up to 0.12.19/0.12.20. Debian security notes (DSA and DLA) describe the issue and recommend upgrading ...

CVE-2023-1872

CVE-2023-1872 is a use-after-free in the Linux kernel io_uring subsystem caused by the io_file_get_fixed path not validating ctx->uring_lock, enabling a race with fixed files unregistration. This can lead to local privilege escalation and possible denial of service. Affected component is the k...

CVE-2023-4906

Chromium/Google Chrome Autofill vulnerability CVE-2023-4906: Insufficient policy enforcement in Autofill allows bypass via a crafted HTML page. Descriptions in connected docs confirm affected components (Chromium/Chrome/ChromeOS), root cause, and low severity. Public fixes exist: Debian/Debian se...

CVE-2024-35930

CVE-2024-35930 concerns the Linux kernel SCSI lpfc driver. It fixes a memory leak in lpfc_rcv_padisc() where a failed return from lpfc_sli4_resume_rpi() could leave an elsiocb unreleased and its resources leaked. The remediation is to check the return value of lpfc_sli4_resume_rpi() and, on failu...

CVE-2015-2643

CVE-2015-2643 affects Oracle MySQL Server before versions 5.5.44 and 5.6.44 (the report lists 5.5.43 and earlier, 5.6.24 and earlier). The vulnerability is in the Server: Optimizer component and is described as unspecified, enabling remote authenticated users to cause a denial of service. Public ...

CVE-2016-1839

CVE-2016-1839 involves libxml2 where the xmlDictAddString function in dict.c can cause a heap-based buffer over-read, leading to a denial of service. The issue affects libxml2 up to version 2.9.4 (as used in Apple iOS, macOS, tvOS, watchOS). A later linked entry (CVE-2017-9050) confirms this was ...

CVE-2016-3616

The CVE-2016-3616 issue affects the cjpeg utility in libjpeg/libjpeg-turbo, caused by a NULL pointer dereference in libjpeg that can lead to denial of service and potentially arbitrary code execution via a crafted JPEG. Multiple connected advisories confirm affected contexts (Debian, Red Hat, Cen...

CVE-2016-5421

CVE-2016-5421 is a use-after-free in libcurl up to version 7.50.0 that can affect which connection is used or cause unspecified impact via unknown vectors. Public notes in ALAS-2016-730 (curl) indicate the issue affects curl/libcurl before 7.50.1 and that patches upgrade to 7.50.1 or newer; remed...

CVE-2017-1000476

CVE-2017-1000476 is a denial-of-service vulnerability in ImageMagick where the CPU can be exhausted by crafted DDS files. It affects ImageMagick 7.0.7-12 Q16 due to a flaw in ReadDDSInfo in coders/dds.c. The initial description notes the impact as a denial of service with CVSS metrics indicating ...

CVE-2017-3312

CVE-2017-3312 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Affected are versions 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The vulnerability description notes it is difficult to exploit and requires a low-privilege attacker with logon...

CVE-2017-3539

CVE-2017-3539 (OpenJDK/JRE): A vulnerability in the Security component prevented jar integrity verification from enforcing a restricted algorithm set, allowing an attacker to modify content in a Jar file using weak signing keys or hashes. Affected: OpenJDK/OpenJDK Runtime/JDK with Java SE Securit...

CVE-2018-14368

Wireshark's Bazaar protocol dissector (CVE-2018-14368) could enter an infinite loop in Wireshark versions 2.6.0–2.6.1, 2.4.0–2.4.7, and 2.2.0–2.2.15 due to how items were handled when they were too long. The root cause is described as improper handling of overly long items, and the issue was fixe...

CVE-2018-14369

Wireshark HTTP/2 dissector CVE-2018-14369 affects Wireshark 2.6.0–2.6.1, 2.4.0–2.4.7, and 2.2.0–2.2.15, where the HTTP2 dissector could crash. Root cause: missing validation of header data before header decompression. Fix implemented in epan/dissectors/packet-http2.c by adding a check for header ...

CVE-2018-15572

CVE-2018-15572: Linux kernel

CVE-2018-19625

CVE-2018-19625 affects Wireshark 2.6.0–2.6.4 and 2.4.0–2.4.10. The dissection engine could crash due to a heap-based buffer over-read in epan/tvbuff_composite.c, which was addressed by preventing the over-read. According to the connected material, this is a defect in the dissection engine, with n...

CVE-2019-14271

CVE-2019-14271 affects Docker 19.03.x (before 19.03.1) where, when glibc is linked, code injection can occur as the nsswitch facility dynamically loads a library inside a chroot containing the container contents. This is a container-escape risk with network-attack vector observed in the descripti...

CVE-2019-9898

PuTTY before 0.71 is affected by CVE-2019-9898 (potential recycling of random numbers in cryptography). Debian/OpenSUSE/Fedora advisories show an upstream 0.71 release fixed CVE-2019-9898 among others; remediation is upgrading PuTTY to 0.71 or newer. Impact includes cryptographic randomness reuse...

CVE-2020-11018

CVE-2020-11018 affects FreeRDP when running versions

CVE-2020-12863

The CVE-2020-12863 issue is an out-of-bounds read in SANE Backends prior to 1.0.30, enabling a local-network attacker connected to the same host to read sensitive data (e.g., ASLR offsets). Multiple connected advisories confirm the same root cause and note fixes in subsequent sane-backends releas...

CVE-2020-13164

Wireshark vulnerable component: NFS dissector (packet-nfs.c) can crash due to excessive recursion in the NFS graph traversal. Affected versions include Wireshark 3.2.0–3.2.3, 3.0.0–3.0.10, and 2.6.0–2.6.16. The root cause is unbounded recursion when encountering cycles in the directory graph on a...

CVE-2020-27750

CVE-2020-27750 affects ImageMagick between MagickCore components colorspace-private.h and quantum.h. A crafted file processed by ImageMagick could trigger undefined behavior due to values outside the range of unsigned char and possible division by zero, with the impact primarily on availability. ...

CVE-2020-27842

CVE-2020-27842 affects the OpenJPEG2 library, specifically the t2 encoder. A crafted input to OpenJPEG prior to version 2.4.0 can trigger a null pointer dereference, with the highest impact being a denial of service through reduced availability. Connected advisories confirm OpenJPEG vulnerabiliti...

CVE-2021-0561

CVE-2021-0561 is an out-of-bounds write in append_to_verify_fifo_interleaved_() of stream_encoder.c, enabling local information disclosure without extra privileges. The vulnerability is observed in FLAC libraries across multiple distros; no exploit details are provided in the documents. Remediati...

CVE-2021-20176

CVE-2021-20176 is a divide-by-zero flaw in ImageMagick 6.9.11-57 and 7.0.10-57 (gem.c) that can trigger undefined behavior and impact availability when processing crafted images. Connected documents confirm the same root cause and affected code path, with no public details on exploitation beyond ...

CVE-2021-22116

CVE-2021-22116 affects RabbitMQ prior to 3.8.16, exposing a denial-of-service via improper input validation in the AMQP 1.0 client connection endpoint. A remote attacker can send crafted AMQP messages to a RabbitMQ server with the AMQP 1.0 plugin enabled, potentially crashing the server. Public a...

CVE-2022-3234

CVE-2022-3234 : The Vim/vim project contains a heap-based buffer overflow in the code paths handling inputs for certain files, affected in Vim versions prior to 9.0.0483. The connected sources confirm this as a Vim vulnerability with the described heap overflow, but they do not provide specific e...

CVE-2023-1810

CVE-2023-1810 corresponds to a heap buffer overflow in Visuals of Google Chrome/Chromium before 112.0.5615.49. The issue allows a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Severity is High (CVSS v3.1 base score 8.8). A...

CVE-2023-4904

CVE-2023-4904 affects Google Chrome and Chromium-based derivatives, due to insufficient policy enforcement in the Downloads module. The issue allowed a remote attacker to bypass enterprise policy restrictions via a crafted download, enabling policy circumvention without requiring local privileges...

CVE-2024-26779

CVE-2024-26779 affects the Linux kernel wifi/mac80211 subsystem. A race condition occurs when enabling fast-xmit before the station is uploaded to the driver, potentially passing an not-yet-uploaded STA via drv_tx to the driver and causing crashes due to uninitialized drv_priv data. The fix adds ...

CVE-2015-1782

CVE-2015-1782 affects libssh2: the kex_agree_methods() function in libssh2 before 1.5.0 can crash a client or cause other unspecified impact when processing crafted length values in SSH_MSG_KEXINIT. Public advisories indicate a fix was released in libssh2 1.5.0 (and backports in various distribut...

CVE-2015-4792

CVE-2015-4792 is an unspecified remote-authenticated vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier that can affect availability via unknown vectors related to Server: Partition. Connected advisories confirm this CVE is among those addressed by MariaDB/MySQL update...

CVE-2015-8767

CVE-2015-8767 affects the Linux kernel SCTP path: net/sctp/sm_sideeffect.c fails to properly synchronize a lock with a socket during heartbeat timeout processing, allowing a local attacker to cause a denial of service (deadlock) via crafted sctp_accept calls. Affected: Linux kernel before 4.3 (pe...

CVE-2016-0787

The CVE-2016-0787 entry concerns libssh2 (before 1.7.0) where the diffie_hellman_sha256 function truncates ephemeral DH secrets to 128 or 256 bits, enabling potential man-in-the-middle decryption/interception of SSH sessions. Root cause: truncated DH secret length. Impact: weakened SSH handshake ...

CVE-2017-15705

The CVE-2017-15705 entry concerns Apache SpamAssassin before 3.4.2, where crafted emails with unclosed HTML tags can trigger scan timeouts and Denial of Service. The root cause is tied to HTML::Parser usage in SpamAssassin: begin/end tag events are followed by an immediate close, causing the miss...

CVE-2017-17862

CVE-2017-17862 affects the Linux kernel up to 4.14.8. The issue stems from kernel/bpf/verifier.c mis-pruning of unreachable code, which could be mishandled by JITs and enable a local denial-of-service by unprivileged users. Connected advisories and patches indicate this was addressed via kernel f...