CVE-2020-15166

CVE-2020-15166 affects ZeroMQ (libzmq) up to 4.3.3. The vulnerability arises when a remote, unauthenticated client connects to a CURVE/ZAP-protected endpoint before the handshake completes, allowing a denial-of-service where legitimate clients cannot exchange messages, though handshakes complete....

CVE-2020-27675

CVE-2020-27675 describes a race condition in the Xen event-channel handling code (drivers/xen/events/events_base.c) that permits removal of an event channel during event handling, causing a use-after-free or NULL dereference and potentially a dom0 crash. The issue is present in the Linux kernel u...

CVE-2021-21174

CVE-2021-21174 is an implementation error in the Referrer policy handling in Chromium/Google Chrome before 89.0.4389.72, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Chromium/Chrome (referrer policy component). Root cause: inappropriate/r...

CVE-2022-1616

CVE-2022-1616 affects Vim/Vim in versions prior to 8.2.4895. The issue is a use-after-free in the function append_command in the vim/vim GitHub repository, which can crash the application, bypass protection mechanisms, modify memory, and potentially enable remote code execution. The advisory note...

CVE-2023-4350

CVE-2023-4350 is an issue in Chromium-based Chrome on Android involving an inappropriate implementation in Fullscreen that could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The vulnerability originates from the Fullscreen implementation and affects Android buil...

CVE-2023-4904

CVE-2023-4904 affects Google Chrome and Chromium-based derivatives, due to insufficient policy enforcement in the Downloads module. The issue allowed a remote attacker to bypass enterprise policy restrictions via a crafted download, enabling policy circumvention without requiring local privileges...

CVE-2024-26779

CVE-2024-26779 affects the Linux kernel wifi/mac80211 subsystem. A race condition occurs when enabling fast-xmit before the station is uploaded to the driver, potentially passing an not-yet-uploaded STA via drv_tx to the driver and causing crashes due to uninitialized drv_priv data. The fix adds ...

CVE-2024-35910

The CVE-2024-35910 issue affects the Linux kernel TCP timer handling for kernel sockets. Root cause: inet_csk_clear_xmit_timers() could be invoked with the socket lock held and uses del_timer(), risking timers running after the netns is freed. Fix: introduced inet_csk_clear_xmit_timers_sync() usi...

CVE-2024-49884

CVE-2024-49884 : Linux kernel ext4 slab-use-after-free in ext4_split_extent_at() during unwritten/extents handling. The issue stems from use-after-free of path data (path) when updating extents after an error (-ENOMEM/-EIO). The connected Astra Linux and kernel notes describe the root cause chain...

CVE-2015-1782

CVE-2015-1782 affects libssh2: the kex_agree_methods() function in libssh2 before 1.5.0 can crash a client or cause other unspecified impact when processing crafted length values in SSH_MSG_KEXINIT. Public advisories indicate a fix was released in libssh2 1.5.0 (and backports in various distribut...

CVE-2016-0787

The CVE-2016-0787 entry concerns libssh2 (before 1.7.0) where the diffie_hellman_sha256 function truncates ephemeral DH secrets to 128 or 256 bits, enabling potential man-in-the-middle decryption/interception of SSH sessions. Root cause: truncated DH secret length. Impact: weakened SSH handshake ...

CVE-2016-4303

CVE-2016-4303 affects iperf/iperf3 and the cJSON-UTF8/UTF-16 parsing path; the vulnerability allows denial of service or arbitrary code execution via a crafted JSON string that triggers a heap-based buffer overflow. The connected docs confirm downstream patches: upstream releases addressed the is...

CVE-2017-14633

CVE-2017-14633 : In Xiph.Org libvorbis 1.3.5, there is an out-of-bounds array read in mapping0_forward() of mapping0.c that may cause a denial of service when processing a crafted audio file with vorbis_analysis(). The issue is fixed upstream in libvorbis 1.3.6. Public advisories across distribut...

CVE-2017-15705

The CVE-2017-15705 entry concerns Apache SpamAssassin before 3.4.2, where crafted emails with unclosed HTML tags can trigger scan timeouts and Denial of Service. The root cause is tied to HTML::Parser usage in SpamAssassin: begin/end tag events are followed by an immediate close, causing the miss...

CVE-2017-3258

CVE-2017-3258 affects the MySQL Server component (Server: DDL). Affected versions are 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. An attacker with network access via multiple protocols can exploit this to cause the MySQL Server to hang or crash (partial/complete DoS). CVSSv3.1...

CVE-2017-5386

CVE-2017-5386 : WebExtension scripts can use the data: protocol to affect pages loaded by other web extensions, enabling potential data disclosure or privilege escalation. Public disclosures show the issue affects Mozilla Firefox releases including ESR builds and Firefox versions prior to 51.0.1 ...

CVE-2017-7376

CVE-2017-7376 is described in the connected IBM bulletin as a buffer overflow in libxml2 that allows remote code execution by exploiting an incorrect limit for port values when handling redirects. The provided documents confirm the existence of this vulnerability and its impact on libxml2, but do...

CVE-2018-10844

CVE-2018-10844 affects GnuTLS HMAC-SHA-256 and is described in multiple sources (IBM advisories and third‑party feeds) as a Lucky Thirteen–style timing attack enabling distinguishing and plaintext‑recovery via crafted packets. Affected products include IBM Power Hardware Management Console and IB...

CVE-2020-15962

Chromium/Google Chrome before 85.0.4183.121 is affected by a serial policy validation insufficiency that could allow a remote attacker to cause out-of-bounds memory access via a crafted HTML page. The issue is documented as CVE-2020-15962 and is addressed by upgrading to Chromium 85.0.4183.121+ (...

CVE-2020-15990

CVE-2020-15990 affects Chromium/Google Chrome: a use-after-free in the autofill component prior to 86.0.4240.75 can allow a remote attacker, via a crafted HTML page loaded in a compromised renderer, to potentially escape the sandbox and execute arbitrary code. Public reports in Debian/Arch/Linux ...

CVE-2020-16004

CVE-2020-16004 affects Google Chrome/Chromium before 86.0.4240.183. The issue is a use-after-free in the user interface, leading to potential heap corruption exploitable by a remote attacker via a crafted HTML page. Multiple connected advisories confirm the same CVE and the vulnerability’s impact...

CVE-2020-16005

CVE-2020-16005 concerns the ANGLE component of Chromium (Chromium/Chrome) prior to the patch level 86.0.4240.183. The documented root cause is insufficient policy enforcement in ANGLE, which could allow a remote attacker to potentially trigger heap corruption via a crafted HTML page, leading to a...

CVE-2020-1753

Affected software: Ansible Engine via Astra Linux advisory references the same CVE-2020-1753 issue affecting Ansible 2.7.x before 2.7.17, 2.8.x before 2.8.11, and 2.9.x before 2.9.7 when using the k8s module to manage Kubernetes. Vulnerability details: Sensitive parameters (passwords/tokens) are ...

CVE-2020-1766

CVE-2020-1766 affects OTRS/Open Source Ticket Request System where improper handling of uploaded images can, in very rare conditions, cause a browser to execute malicious JavaScript from a crafted SVG rendered as an inline JPG. Public advisories in connected documents refer to multiple vendor upd...

CVE-2020-27759

ImageMagick CVE-2020-27759: In IntensityCompare() (MagickCore/quantize.c) a double value could be cast to int, returning a value outside the int range when processing crafted input; Red Hat marks the issue as Low severity and reports no specific impact beyond potential availability impact. Affect...

CVE-2020-4049

CVE-2020-4049 affects WordPress: when uploading a theme, an attacker who has admin privileges can craft the theme folder name to trigger JavaScript execution in /wp-admin on the themes page. It is described as a low-severity self-XSS requiring admin interaction. A patch is available in WordPress ...

CVE-2020-9430

CVE-2020-9430 affects Wireshark’s WiMax DLMAP dissector, crashing versions 3.2.0–3.2.1, 3.0.0–3.0.8, and 2.6.0–2.6.14. Root cause: length field validation flaw in dissector code (plugins/epan/wimax/msg_dlmap.c). Fix: added validation of the length field. Public references describe attacker-trigge...

CVE-2021-23434

The CVE-2021-23434 entry concerns the Node.js object-path package (versions before 0.11.6) with a type confusion vulnerability that can bypass the CVE-2020-15256 fix when path components are arrays. The condition currentPath === 'proto ' fails for currentPath = ['proto '], enabling potential expl...

CVE-2021-44420

CVE-2021-44420 affects Django versions: 2.2 prior to 2.2.25, 3.1 prior to 3.1.14, and 3.2 prior to 3.2.10. The issue allows HTTP requests for URLs with trailing newlines to bypass upstream access control based on URL paths. The practical impact is potential unintended access control bypass in aff...

CVE-2022-2056

CVE-2022-2056 is a Divide By Zero vulnerability in tiffcrop of libtiff 4.4.0 that allows DoS via a crafted TIFF file. A fix is available (commit f3a5e010). Connected advisories cite libtiff DoS mitigations across multiple distros (ALAS2-2023-2263/ALSA-2023:0302/ALSM:0095, Debian DSA-5333-1, DLA-3...

CVE-2022-23517

CVE-2022-23517 affects rails-html-sanitizer: older configurations (versions

CVE-2022-39190

CVE-2022-39190 affects the Linux kernel nf_tables_api.c and enables a local denial-of-service by binding to an already bound netfilter chain. The issue is described as present in Linux kernel versions up to 5.19.5 (before 5.19.6). A patch addressing this vulnerability is included in 5.19.6 (Chang...

CVE-2023-4236

CVE-2023-4236 affects BIND 9 to include versions 9.18.0–9.18.18 and 9.18.11-S1–9.18.18-S1. The issue is a flaw in the DNS-over-TLS networking code that can cause an assertion failure, leading to an unexpected termination of named under heavy DNS-over-TLS query load. The practical consequence is a...

CVE-2024-26663

CVE-2024-26663 — Linux kernel (TIPC) bearer handling : The issue occurs in tipc_nl_bearer_add() when the UDP options attribute is used; it can call tipc_udp_nl_bearer_add() for non-UDP bearers, causing tipc_udp_is_known_peer() to dereference a non-UDP bearer and trigger a general protection fault...

CVE-2024-26704

CVE-2024-26704 affects the Linux kernel ext4 filesystem. The issue was a double-free of blocks in ext4_move_extents: moved_len was only updated when all moves succeeded, causing potential overlap with preallocated extents to be freed twice and triggering a zero-division in mb_update_avg_fragment_...

CVE-2015-5307

CVE-2015-5307 affects the Linux kernel KVM subsystem (through 4.2.6) and Xen (4.3.x–4.6.x). An attacker who has local access in a guest can trigger many #AC exceptions (Alignment Check), potentially causing a host panic/hang. Root cause involves svm.c/vmx.c handling of alignment-related events. P...

CVE-2017-10664

CVE-2017-10664 affects qemu-nbd in QEMU. The issue arises because SIGPIPE is not ignored, allowing remote attackers to trigger a denial of service (daemon crash) by disconnecting during a server-to-client reply. The vulnerability is referenced across multiple advisories and Nessus plugins (e.g., ...

CVE-2017-12153

CVE-2017-12153 refers to a security flaw in the Linux kernel where nl80211_set_rekey_data() in net/wireless/nl80211.c does not validate required Netlink attributes, enabling a local attacker with CAP_NET_ADMIN to trigger a NULL pointer dereference and system crash. The vulnerability is described ...

CVE-2017-5380

CVE-2017-5380 is a use-after-free vulnerability related to SVG content processing. Connected IBM advisories confirm this CVE ID is present and tie it to vulnerabilities in Mozilla Firefox shipped with IBM Storwize V7000 Unified and IBM SONAS. Affected IBM products and versions are IBM Storwize V7...

CVE-2017-7610

CVE-2017-7610 refers to a vulnerability in elfutils 0.168 where the check_group function in elflint.c can be triggered by a crafted ELF file to cause a heap-based buffer over-read and application crash. The initial description states the vulnerability and impact; no connected documents provide ad...

CVE-2018-11360

Wireshark GSM A DTAP dissector (Wireshark

CVE-2018-20097

CVE-2018-20097 affects Exiv2 0.27-RC3, where a crafted input can trigger a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups in tiffimage_int.cpp, leading to remote denial of service. The connected documents confirm the vulnerable component and the DoS impact via crafted image data, wi...

CVE-2018-20546

CVE-2018-20546 is a READ memory access bug in libcaca 0.99.beta19 (function get_rgba_default in caca/dither.c) that affects multiple bpp configurations. Connected sources indicate fixes were released in later libcaca updates (e.g., libcaca 0.99-0.59.beta20 and related SUSE/openSUSE/FreeBSD adviso...

CVE-2018-4181

Summary: CVE-2018-4181 affects CUPS in macOS High Sierra prior to 10.13.5. The issue enables a local attacker to read arbitrary files as root due to an access-control/sandbox-related weakness in CUPS. The related connected documents describe this as a local privilege escalation with root-read cap...

CVE-2019-20840

CVE-2019-20840 concerns LibVNCServer prior to 0.9.13. The issue in libvncserver/ws_decode.c causes a crash from unaligned accesses in hybiReadAndDecode, with multiple advisories and patches documenting the fix in LibVNCServer-0.9.13+ (and related vendor advisories). The practical impact is crash/...

CVE-2020-14399

CVE-2020-14399 affects LibVNCServer before 0.9.13. The issue is that Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c, enabling potential memory handling problems. Many OpenVAS/Nessus advisories reference this CVE among multiple LibVNCServer issues; the confirmed...

CVE-2020-16305

Ghostscript vulnerability CVE-2020-16305: A buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c of Ghostscript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF. Impact is DoS as described; upgrading to Ghostscript 9.51 fixes the issue. The CVE entry expli...

CVE-2020-21365

CVE-2020-21365 affects wkhtmltopdf up to version 0.12.5, enabling a directory traversal that allows reading local files via crafted HTML processed with default settings. Public advisories from Debian, Mageia, and Ubuntu confirm the vulnerability and note fixes/remediations: Debian DLA-3158 and US...

CVE-2020-6556

CVE-2020-6556 describes a heap buffer overflow in the SwiftShader component of Google Chrome/Chromium prior to version 84.0.4147.135, enabling remote exploitation of heap corruption via a crafted HTML page. The issue affects the SwiftShader path in Chrome/Chromium and could lead to arbitrary code...

CVE-2020-8518

CVE-2020-8518 is an RCE in Horde Groupware Webmail Edition 5.2.22 via CSV data import, caused by arbitrary PHP code injection in the Horde_Data component. The vulnerability allows authenticated users to execute code on the server hosting the web application. Affected versions include Horde Groupw...