CVE-2022-0204

CVE-2022-0204 is a heap overflow vulnerability in BlueZ (Bluetooth stack) affecting versions prior to 5.63. Multiple connected advisories confirm impact via a local-network attack that can cause a target application to halt/crash, resulting in Denial of Service. Remediation is to upgrade BlueZ to...

CVE-2022-32886

CVE-2022-32886 is a WebKitGTK/WebKit2GTK vulnerability described as a buffer overflow when processing maliciously crafted web content, potentially enabling arbitrary code execution. Connected advisories confirm concrete fixes across distros: Debian security advisories (DSA-5240-1, DSA-5241-1) fix...

CVE-2023-2911

CVE-2023-2911 affects BIND 9 up to fixed versions in various distros. The issue occurs when the recursive-clients quota is reached with stale-answer-client-timeout 0, potentially causing named to loop and terminate due to a stack overflow. Public details list affected ranges (9.16.33–9.16.41, 9.1...

CVE-2016-9893

CVE-2016-9893 relates to memory safety bugs reported in Thunderbird 45.5, with evidence of memory corruption. Affected products include Firefox <50.1, Firefox ESR <45.6, and Thunderbird

CVE-2017-3464

CVE-2017-3464 affects the Oracle MySQL Server component (Server: DDL). Affected are MySQL server versions 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability allows a low-privilege attacker with network access via multiple protocols to execute unauthorized updates/in...

CVE-2018-14342

CVE-2018-14342 affects Wireshark/BGP dissector: in Wireshark versions 2.6.0–2.6.1, 2.4.0–2.4.7, and 2.2.0–2.2.15, the BGP protocol dissector could loop excessively due to insufficient validation of Path Attribute lengths. The issue was addressed in epan/dissectors/packet-bgp.c by validating Path ...

CVE-2018-8788

CVE-2018-8788 affects FreeRDP prior to 2.0.0-rc4, with an out-of-bounds write of up to 4 bytes in nsc_rle_decode() that can cause memory corruption and potentially remote code execution. Several advisories confirm the issue and list updates/patches (e.g., freerdp updates in CentOS/Red Hat/Mageia/...

CVE-2019-12295

CVE-2019-12295 affects the Wireshark dissection engine across multiple branches (Wireshark 3.0.x up to 3.0.1, 2.6.x up to 2.6.8, and 2.4.x up to 2.4.14). The vulnerability causes the dissector to crash due to excessive recursion when processing layered protocol structures. Root cause: unbounded r...

CVE-2020-11049

CVE-2020-11049 : In FreeRDP, there is an out-of-bounds read of client memory that is then passed on to the protocol parser. This vulnerability affects FreeRDP releases prior to the patch and has been explicitly fixed in version 2.0.0. The available documents describe the issue as an OOB read in t...

CVE-2020-12823

OpenConnect 8.09 contains a buffer overflow in get_cert_name (gnutls.c) triggered by crafted certificate data, leading to denial of service (crash) and potential further impact. Multiple connected advisories confirm the issue and note that OpenConnect 8.10 fixes it (upgrading is recommended). The...

CVE-2020-12863

The CVE-2020-12863 issue is an out-of-bounds read in SANE Backends prior to 1.0.30, enabling a local-network attacker connected to the same host to read sensitive data (e.g., ASLR offsets). Multiple connected advisories confirm the same root cause and note fixes in subsequent sane-backends releas...

CVE-2020-15981

CVE-2020-15981 is an information-disclosure/out-of-bounds-read issue in the audio component of Chromium/Google Chrome prior to 86.0.4240.75. The vulnerability affects Chromium-based browsers and could allow a remote attacker to read potentially sensitive memory content via a crafted HTML page. Pu...

CVE-2020-15982

CVE-2020-15982 affects Chromium/Google Chrome prior to 86.0.4240.75, describing a side-channel information leakage in the cache component that can disclose potentially sensitive data from process memory via a crafted page. Multiple advisories and changelogs confirm the issue and tag it as informa...

CVE-2020-16005

CVE-2020-16005 concerns the ANGLE component of Chromium (Chromium/Chrome) prior to the patch level 86.0.4240.183. The documented root cause is insufficient policy enforcement in ANGLE, which could allow a remote attacker to potentially trigger heap corruption via a crafted HTML page, leading to a...

CVE-2020-22217

CVE-2020-22217 affects c-ares (pre-1.16.1 through 1.17.0). Root cause: buffer overflow in ares_parse_soa_reply.c. Exploitation could impact availability (CVSS shows Availability=High) with no confidentiality/integrity impact stated. Several connected advisories note patches/updates are available ...

CVE-2020-25666

CVE-2020-25666 is a vulnerability in ImageMagick where four instances in HistogramCompare() (MagickCore/histogram.c) allow integer overflow during simple math calculations on RGB values and the color count. The patch switches calculations from int to ssize_t, addressing the overflow. Affected pro...

CVE-2020-27761

CVE-2020-27761 affects ImageMagick: WritePALMImage() in coders/palm.c uses size_t casts that can produce values outside the range of unsigned long, causing undefined behavior on crafted input. The patch changes casts to ssize_t to fix this. Affected versions are prior to ImageMagick 7.0.9-0; Red ...

CVE-2020-27843

CVE-2020-27843 affects OpenJPEG versions before 2.4.0. A specially crafted input to the conversion or encoding path can trigger an out-of-bounds read, with the highest impact on system availability. The connected advisories consistently cite OpenJPEG2 as the vulnerable component and indicate reme...

CVE-2020-28926

CVE-2020-28926 affects ReadyMedia (MiniDLNA) prior to 1.3.0 and enables remote code execution via a malicious UPnP HTTP request using HTTP chunked encoding, triggering a signedness bug that leads to a buffer overflow in memcpy/memmove. Multiple connected advisories confirm the issue and provide f...

CVE-2020-6533

CVE-2020-6533 affects Google Chrome’s V8 engine. The Debian security advisory and Debian tracker describe a Type Confusion in V8 prior to Chrome 84.0.4147.89, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. The issue was addressed in Chrome 84.0.4147.89 (or...

CVE-2020-6558

CVE-2020-6558 affects Google Chrome on iOS (iOS WebView) prior to 85.0.4183.83. The vulnerability is due to insufficient policy enforcement in iOSWeb that allowed a remote attacker to bypass navigation restrictions with a crafted HTML page. It was fixed in the Chrome 85 stable release (85.0.4183....

CVE-2020-6561

CVE-2020-6561 affects Google Chrome (Content Security Policy implementation). The vulnerability arises from an inappropriate CSP implementation that allowed a remote attacker to leak cross-origin data via a crafted HTML page, impacting Chrome versions prior to 85.0.4183.83. According to the conne...

CVE-2020-6570

Technical details for CVE-2020-6570 are not present in the provided connected documents. Information is limited to the initial description. Monitor for updates.

CVE-2021-21184

CVE-2021-21184 relates to Google Chrome/Chromium where an inappropriate implementation in the Performance API allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Chromium/Chrome browser (Performance API component). Root cause: improper implementation in ...

CVE-2021-21213

CVE-2021-21213 affects Google Chrome’s WebMIDI implementation. A use-after-free in WebMIDI prior to 90.0.4430.72 can allow a remote attacker to trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution. Remediation: upgrade Chrome to 90.0.4430.72 or newer (a...

CVE-2021-21221

CVE-2021-21221 corresponds to an information-disclosure flaw in Chrome’s Mojo component. Description across sources states insufficient validation of untrusted input in Mojo before 90.0.4430.72, enabling a remote attacker with a compromised renderer to leak cross-origin data via a crafted HTML pa...

CVE-2021-32918

CVE-2021-32918 affects Prosody prior to 0.11.9. A default-configuration condition allows remote unauthenticated DoS via memory exhaustion when running under Lua 5.2 or Lua 5.3. The vulnerability arises from the way the server handles requests under those Lua versions, with the impact described as...

CVE-2021-37962

CVE-2021-37962 is a use-after-free in Chrome’s Performance Manager before version 94.0.4606.54, enabling a remote attacker who has compromised the renderer to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome (renderer/Performance Manager compone...

CVE-2022-0718

The CVE-2022-0718 issue affects python-oslo.utils/oslo.utils where improper parsing causes passwords containing a double quote to be masked incorrectly in debug logs, exposing the portion after the quote. Impact is credential disclosure of sensitive data in logs (confidentiality impact stated by ...

CVE-2022-1516

CVE-2022-1516: A NULL pointer dereference in the Linux kernel’s X.25 protocol stack allows a local attacker to crash the system during session termination via a simulated Ethernet card. Connected sources consistently describe this flaw as a local (LOCAL) impact with no remote vector provided; no ...

CVE-2022-32088

CVE-2022-32088 affects MariaDB Server versions 10.2–10.7. The issue is a segmentation fault in the execution path of Exec_time_tracker::get_loops and Filesort_tracker::report_use/filesort, which can cause a crash of MariaDB Server. Connected sources confirm the fault path but do not provide a pat...

CVE-2022-41704

CVE-2022-41704 concerns the Apache Batik library (Apache XML Graphics) and allows a remote attacker to run untrusted Java code from an SVG. The issue affects Batik versions prior to 1.16, with a recommended upgrade to 1.16. Connected documents corroborate the vulnerability details across multiple...

CVE-2023-52752

CVE-2023-52752 (Linux kernel) is backed by concrete fix details in connected docs: a use-after-free in the SMB/CIFS client code path (cifs_debug_data_proc_show) when reading /proc/fs/cifs/DebugData during mount/umount. The fix adds a check to skip SMB sessions that are tearing down (ses_status ==...

CVE-2024-49991

The CVE-2024-49991 issue affects the Linux kernel DRM/AMD stack: amdkfd_free_gtt_mem cleared the wrong pointer, causing a use-after-free when amdgpu_bo_unref resets the pointer. The patch passes the correct pointer reference to amdgpu_bo_unref to ensure the original pointer is NULL’d correctly. T...

CVE-2025-37738

CVE-2025-37738 details from Connected docs show a Linux kernel ext4 vulnerability: ext4_xattr_inode_dec_ref_all may read past the end while processing xattrs, leading to a slab-use-after-free as reported by KASAN. The fix makes ext4_xattr handling ignore xattrs entries beyond the end, preventing ...

CVE-2015-5351

CVE-2015-5351 affects Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2. The issue lies in the Manager and Host Manager applications, which establish sessions and send CSRF tokens for arbitrary new requests, allowing remote attackers to bypass CSRF protections by using a...

CVE-2016-0763

CVE-2016-0763 affects Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3. The issue is in ResourceLinkFactory.setGlobalContext: callers are not checked for authorization, allowing remote authenticated users to bypass SecurityManager restrictions and read/write arbitrary a...

CVE-2017-12562

CVE-2017-12562 affects libsndfile, specifically the psf_binheader_writef function in common.c, with a heap-based buffer overflow that can be exploited remotely to crash the application or cause other impacts. Reported as affecting libsndfile up to version 1.0.28 (and related package entries acros...

CVE-2018-1000164

Summary of CVE-2018-1000164 (Gunicorn) : Gunicorn 19.4.5 contains a CWE-113 vulnerability in the process_headers function (gunicorn/http/wsgi.py) that can cause HTTP header splitting to lead to arbitrary HTTP headers being returned by the server. The issue is fixed in version 19.5.0. Documents in...

CVE-2018-12600

ImageMagick 7.0.8-3 Q16 contains ReadDIBImage/WriteDIBImage in coders/dib.c that allow an out-of-bounds write via a crafted image file, leading to memory corruption/DoS. Affected releases and advisories reference CVE-2018-12600. Remediation: update ImageMagick to a patched version as advised by A...

CVE-2018-16749

CVE-2018-16749: In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage (coders/png.c) allows a crafted file to trigger a denial of service (WriteBlob assertion failure and app exit). Affected versions are before the fixed release. Remediation: update ImageMagick to a version...

CVE-2018-5953

CVE-2018-5953 concerns the Linux kernel vulnerability where the function swiotlb_print_info (lib/swiotlb.c) in kernels up to 4.14.14 can leak sensitive address information via a software IO TLB printk in dmesg, exploitable by a local attacker. The connected Nessus entries for Unity Linux 20.x (ke...

CVE-2019-18421

CVE-2019-18421 affects the Xen hypervisor on x86 PV guests. Root cause: restartable PV type changes with recursive pagetable promotions/demotions contain races that can lead to incorrect type counts, enabling a PV guest to gain host privileges. Impact: local privilege escalation to host OS on all...

CVE-2019-7395

ImageMagick vulnerability CVE-2019-7395 affects the PSD coder: a memory leak in WritePSDChannel in coders/psd.c present in versions before 7.0.8-25. Impact is potential resource exhaustion; remediation is to upgrade to ImageMagick 7.0.8-25 or later (or apply vendor-supplied patch). The provided c...

CVE-2019-8308

CVE-2019-8308 affects Flatpak before 1.0.7 and 1.1.x and 1.2.x before 1.2.3, where the /proc is exposed in the apply_extra sandbox, enabling a local attacker to modify a host-side executable. CVSS v3 base score 8.2 (HIGH) with LOCAL attack vector, LOW privileges required, UI required, and impact ...

CVE-2020-15227

The CVE-2020-15227 issue affects Nette PHP framework versions prior to 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16 and 3.0.6. A code injection flaw can be triggered by specially crafted URL parameters, potentially enabling remote code execution. Modes of impact include remote compromise and arbitrary ...

CVE-2020-6538

CVE-2020-6538 affects Google Chrome WebView on Android (inappropriate WebView implementation) allowing cross-origin data leakage via a crafted HTML page. Connected sources indicate the issue was fixed in Chrome/Chromium releases around 84.0.4147.105; Debian’s advisory lists CVE-2020-6538 among up...

CVE-2021-21175

In Google Chrome, CVE-2021-21175 corresponds to an inappropriate implementation in the Site Isolation feature prior to 89.0.4389.72. The issue allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected product: Google Chrome (Site Isolation). Root cause: improper imp...

CVE-2021-21186

CVE-2021-21186 refers to a policy-enforcement error in the QR scanning component of the Chromium/Chrome stack on iOS, allowing a user who is coaxed into scanning a crafted QR code to bypass navigation restrictions. Affected product: Google Chrome (iOS) with Chromium QR scan integration prior to 8...

CVE-2021-26676

ConnMan gdhcp flaw (CVE-2021-26676) causes a stack information leak via an uninitialized variable in the gdhcp component, affecting ConnMan versions prior to 1.39. Network-adjacent attackers could leverage the leak to facilitate further exploitation related to bugs in gdhcp. Public advisories (Op...