CVE-2019-6486

CVE-2019-6486 affects Go runtimes prior to 1.10.8 and 1.11.x prior to 1.11.5, due to mishandling of P-521 and P-384 elliptic curves. This can cause CPU-based denial of service and may allow ECDH private key recovery. Public details across connected docs confirm the vulnerability and its Go-versio...

CVE-2020-15960

CVE-2020-15960 refers to an information-disclosure vulnerability in Chromium/Google Chrome prior to 85.0.4183.121. The 15960 issue is an out-of-bounds read in the storage component, exploitable via a crafted HTML page. The Debian/Arch/Gentoo entries corroborate the fix was to upgrade to 85.0.4183...

CVE-2020-15968

CVE-2020-15968 is a use-after-free in Blink (Chromium) prior to 86.0.4240.75, contributing to arbitrary code execution via a crafted page. The connected Arch Linux advisory (ASA-202010-1) specifies this as a remote issue in chromium before 86.0.4240.75-1 and notes the fix as upstream in 86.0.4240...

CVE-2020-15989

CVE-2020-15989 affects the PDFium component in Chromium/Google Chrome, where uninitialized data could allow a crafted PDF file to disclose potentially sensitive information from process memory. This vulnerability is tied to the Chromium baseline before 86.0.4240.75 (reported in multiple advisorie...

CVE-2020-15991

CVE-2020-15991: Use-after-free in the password manager of Chromium/Google Chrome before 86.0.4240.75 allows a remote attacker who can render HTML in the renderer to potentially escape the sandbox. The Debian/Fedora/Arch security advisories and FreeBSD/vuxml entries confirm this vulnerability and ...

CVE-2020-22019

CVE-2020-22019 : FFmpeg 4.2 contains a buffer overflow in the convolution_y_10bit path (libavfilter/vf_vmafmotion.c) that could allow a remote attacker to cause a Denial of Service. Connected documents confirm this exact trigger in FFmpeg 4.2 and note multiple advisories that fix or mitigate the ...

CVE-2020-25595

CVE-2020-25595 is a Xen PCI passthrough vulnerability disclosed across multiple advisories. The issue arises from PCI passthrough code that improperly uses register data; MSI handling paths operate on values read back from hardware registers that may be unsanitized. Impact is described as a poten...

CVE-2020-6559

CVE-2020-6559 is a Use-After-Free in Chrome/Chromium’s Presentation API (heap corruption) that could be exploited remotely via a crafted HTML page. Affected products are Google Chrome/Chromium prior to version 85.0.4183.83. Mitigation from the connected documents shows upgrading to 85.0.4183.83 o...

CVE-2021-26675

CVE-2021-26675 affects ConnMan’s DNS proxy (dnsproxy) prior to version 1.39. It is a stack-based buffer overflow that could allow a network-adjacent attacker to execute arbitrary code, as described across multiple sources (Arch Linux ASA, openSUSE update, Debian DSA/DLA, Gentoo GLSA). The issue i...

CVE-2021-41990

CVE-2021-41990 affects the gmp plugin in strongSwan up to version 5.9.4, where processing a crafted certificate with an RSASSA-PSS signature can trigger a remote integer overflow. The issue can be exploited by an initiator sending an unrelated self-signed CA certificate, but remote code execution...

CVE-2022-0554

CVE-2022-0554 is referenced in connected Astra Linux security bulletin as a Vim vulnerability: “Out-of-range Pointer Offset” in the GitHub Vim/vim repository, affecting Vim prior to 8.2. The Astra bulletin repeats the description but provides no additional technical details (affected versions, ex...

CVE-2022-30293

CVE-2022-30293 affects WebKitGTK (through 2.36.0) and WPE WebKit, with a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer. The vulnerability could allow arbitrary code execution and/or crash when processing crafted web content. Public advisories confirm the issue is add...

CVE-2022-3646

CVE-2022-3646 is a Linux kernel vulnerability affecting the nilfs_attach_log_writer function in fs/nilfs2/segment.c (BPF component). The issue enables a memory leak and may be exploitable remotely. A patch is recommended to fix this issue (VDB-211961).

CVE-2024-26665

CVE-2024-26665 : Linux kernel vulnerability in tunnel PMTU error handling. When ICMPv6 error is built from a non-linear skb, there is an out-of-bounds/read issue due to using csum_partial. The fix replaces csum_partial with skb_checksum to correctly handle non-linear SKBs during IPv6 PMTU error c...

CVE-2024-35867

CVE-2024-35867 pertains to the Linux kernel SMB client. The vulnerability arises from a potential use-after-free in cifs_stats_proc_show(), mitigated by skipping sessions that are tearing down (status SES_EXITING) to prevent UAF. The fix resolves a local-attack scenario with high impact on confid...

CVE-2014-9750

CVE-2014-9750 concerns ntpd with Autokey authentication. The root cause is an error in ntp_crypto.c where a packet extension field’s length value is not properly validated, allowing a remote attacker to either leak sensitive information from ntpd’s process memory or crash the daemon via a malform...

CVE-2015-7977

CVE-2015-7977 : ntpd/nptdsp (NTP) vulnerability where processing of the ntpdc reslist command could cause a NULL pointer dereference and crash ntpd. This is triggered by large restriction lists. Affects ntpd/ntpdc in NTP 4.2.x leading up to 4.2.8p6 and 4.3.x prior to 4.3.90. Remediation: upgrade ...

CVE-2016-5829

CVE-2016-5829 is a Linux kernel vulnerability in the hiddev driver (hiddev_ioctl_usage in drivers/hid/usbhid/hiddev.c) that allows a local user to trigger heap-based buffer overflows by sending crafted ioctls (HIDIOCGUSAGES or HIDIOCSUSAGES). Affected kernels are up to 4.6.3 (through 4.6.3). The ...

CVE-2017-10078

CVE-2017-10078 affects Oracle Java SE 8u131 (Scripting) and can be exploited over network with multiple protocols, enabling high-impact confidentiality and integrity violations and data access. The vulnerability can be triggered by sandboxed Web Start/Applet use or via APIs without sandboxing. Th...

CVE-2017-5376

CVE-2017-5376 is a use-after-free in XSL processing of XSLT documents. Connected IBM advisories tie this CVE to Mozilla Firefox components shipped in IBM Storwize V7000 Unified and IBM SONAS; affected products include Thunderbird and Firefox binaries reported in the CVE. The IBM bulletins specify...

CVE-2017-7376

CVE-2017-7376 is described in the connected IBM bulletin as a buffer overflow in libxml2 that allows remote code execution by exploiting an incorrect limit for port values when handling redirects. The provided documents confirm the existence of this vulnerability and its impact on libxml2, but do...

CVE-2018-12393

CVE-2018-12393 concerns 32‑bit Firefox builds (not 64‑bit) where an integer overflow during scripts-to-UTF-16 conversion can allocate a too-small buffer, causing an out-of-bounds write. Affected products include Firefox < 63, Firefox ESR < 60.3, and Thunderbird

CVE-2018-14359

CVE-2018-14359 affects Mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16. A buffer overflow caused by processing base64 data is the underlying issue. Multiple advisories (Debian, Mageia, Gentoo, Fedora, CNVD, etc.) describe potential for arbitrary code execution or related impacts when process...

CVE-2018-20511

The CVE-2018-20511 vulnerability affects Linux kernel older than 4.18.11, where ipddp_ioctl in drivers/net/appletalk/ipddp.c allows local users with CAP_NET_ADMIN to read the ipddp_route and next fields via SIOCFINDIPDDPRT, leading to kernel address disclosure (information leakage). Unity/Linux a...

CVE-2018-20549

CVE-2018-20549 concerns libcaca's caca_file_read, describing an Illegal WRITE memory access in libcaca 0.99.beta19. The connected docs confirm this exact CVE is part of multiple libcaca vulnerabilities and show that fixes were released across several distributions (e.g., SUSE SU-2019:2745-1/2, op...

CVE-2018-5095

CVE-2018-5095 is an integer overflow in the Skia library during edge-builder memory allocation on systems with 8 GB+ RAM, causing uninitialized memory usage and a potentially exploitable crash. Public disclosures show affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Fir...

CVE-2019-11008

CVE-2019-11008 affects GraphicsMagick 1.4 snapshot-20190322 Q8, with a heap-based buffer overflow in theWriteXWDImage function (coders/xwd.c). Exploitation via a crafted XWD image can cause the application to crash (denial of service) and possibly other impacts. Public advisories across multiple ...

CVE-2020-15974

CVE-2020-15974 is an integer overflow in Blink affecting Chromium/Google Chrome prior to 86.0.4240.75, potentially enabling arbitrary code execution or site‑isolation bypass as described in the linked Debian advisory. Debian notes a broader patch set and fixes in 87.0.4280.88-0.4~deb10u1 for Chro...

CVE-2020-16003

CVE-2020-16003 is a Chrome vulnerability: Use after free in the printing component. The connected data confirms Chrome/Chromium fixed this issue in the Chrome update cycle (reported as a use-after-free in printing), but the specific exploit details or affected versions beyond the prior 86.0.4240....

CVE-2020-35573

The CVE-2020-35573 issue is in PostSRSd: srs2.c before 1.10 allows remote attackers to trigger a denial of service (CPU consumption) via a long timestamp tag in an SRS address. Public advisories show multiple vendors releasing patches/upgrades (PostSRSd 1.11+ with fixes such as dropping privilege...

CVE-2020-6542

CVE-2020-6542 affects ANGLE within Google Chrome prior to 84.0.4147.125. A use-after-free in ANGLE could allow remote attackers to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Debian/GLSA and other advisories confirm the same issue and indicate r...

CVE-2020-8631

CVE-2020-8631 affects cloud-init up to version 19.4, where the random password is generated using rand_str in cloudinit/util.py that calls random.choice (Mersenne Twister). This weak RNG can allow a local attacker to predict the generated password; CVE-2020-8632 reports a short default password l...

CVE-2021-20245

ImageMagick vulnerability CVE-2021-20245 affects the webp coder (coders/webp.c). A crafted input file processed by ImageMagick may trigger undefined behavior via division by zero, with availability impact. Public details consistently reference this flaw and its presence across multiple advisories...

CVE-2021-28712

The CVE-2021-28712 entry concerns Xen PV backends running in unprivileged driver domains. The root cause is that malicious driver domains can overwhelm guest interrupts by sending high-frequency events, causing Denial of Service. Three backends are affected: blkfront patch 1 (CVE-2021-28711), net...

CVE-2021-35266

NTFS-3G vulnerability CVE-2021-35266 affects versions

CVE-2021-38502

Thunderbird is affected by CVE-2021-38502 where STARTTLS requirements for SMTP were ignored, enabling a MITM to downgrade to an unencrypted connection or hijack an authenticated session and potentially obtain credentials if unprotected methods are configured. Multiple connected advisories confirm...

CVE-2021-39255

NTFS-3G vulnerable: crafted NTFS images can trigger an out-of-bounds read due to an invalid attribute in ntfs_attr_find_in_attrdef in NTFS-3G versions prior to 2021.8.22. Affected product: ntfs-3g. Impact: information disclosure/possible crash from out-of-bounds read (local impact per CVE). Remed...

CVE-2022-24809

CVE-2022-2489 (CVE-2022-24809) affects net-snmp prior to 5.9.2, where a malformed OID in a GET-NEXT to nsVacmAccessTable can cause a NULL pointer dereference. The issue is addressed by the 5.9.2 patch. Provided references show multiple advisories (Debian, Red Hat, AlmaLinux) confirming the vulner...

CVE-2022-3885

CVE-2022-3885 is a Use-after-free in V8 affecting Google Chrome prior to 107.0.5304.106 that could allow remote heap corruption via a crafted HTML page. The issue is confirmed in multiple trusted sources (Chromium/Chrome advisories and Astra Linux bulletin) and is tracked in Debian as fixed in Ch...

CVE-2022-39190

CVE-2022-39190 affects the Linux kernel nf_tables_api.c and enables a local denial-of-service by binding to an already bound netfilter chain. The issue is described as present in Linux kernel versions up to 5.19.5 (before 5.19.6). A patch addressing this vulnerability is included in 5.19.6 (Chang...

CVE-2023-2724

CVE-2023-2724 is a Chromium/Google Chrome type-confusion vulnerability in V8 prior to 113.0.5672.126. The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with impact described as high (confidentiality, integrity, and availability). Remediation provid...

CVE-2015-4819

CVE-2015-4819: An unspecified vulnerability in Oracle MySQL Server affecting 5.5.44 and earlier and 5.6.25 and earlier, located in the Client programs component. It has complete impact on confidentiality, integrity, and availability. The IBM Guardium bulletin (CVE reference list) documents this C...

CVE-2016-0702

CVE-2016-0702 (OpenSSL) is a local side-channel vulnerability where the MOD_EXP_CTIME_COPY_FROM_PREBUF path during modular exponentiation does not properly account for cache-bank access times on Intel Sandy Bridge, enabling an attacker sharing a CPU core to recover RSA keys via a crafted app. Aff...

CVE-2016-5423

CVE-2016-5423 affects PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4. The vulnerability arises from how CASE expressions in a test value subexpression or the inlining of an SQL function used for a CASE expression involving mixed type...

CVE-2017-16541

CVE-2017-16541 concerns Tor Browser before 7.0.9 for macOS/Linux, where crafted web content abusing Firefox file:// handling could reveal the client’s IP address, i.e., a partial anonymity bypass. Several connected advisories (e.g., CESA-2018:3403, DSA-4327-1) cite Mozilla Firefox/Thunderbird upd...

CVE-2017-3456

CVE-2017-3456 is a MySQL Server (Server: DML) vulnerability affecting 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue, described as easily exploitable, allows a high-privilege attacker with network access via multiple protocols to cause a hang or a complete denial of ser...

CVE-2018-1000878

The CVE-2018-1000878 entry concerns libarchive’s RAR decoder. A Use After Free in archive_read_support_format_rar.c can crash the process or enable denial-of-service when opening a specially crafted RAR file; exploitation appears to require user interaction (opening the archive). Affected upstrea...

CVE-2018-10846

CVE-2018-10846 describes a cache-based side-channel in GnuTLS that can enable plaintext recovery in cross-VM settings. An attacker could combine a Just in Time Prime+probe attack with a Lucky-13 attack by sending crafted packets to exploit this vulnerability. Remediation in publicly documented ad...

CVE-2018-11039

CVE-2018-11039 affects the Spring Framework, where the HiddenHttpMethodFilter in Spring MVC allows web apps to change the HTTP request method to any method (including TRACE). This can enable an attacker with an existing XSS vulnerability to escalate to an XST (Cross Site Tracing) attack. Affected...

CVE-2018-15822

CVE-2018-15822 affects FFmpeg/libav through 2.8 where flv_write_packet in libavformat/flvenc.c does not check for an empty audio packet, triggering an assertion failure. Multiple connected advisories (Debian DLA-1809, DSA-4449; USN-3967-1; Cloud Foundry/Ubuntu advisories) reference this CVE along...