10003 matches found
CVE-2021-21186
CVE-2021-21186 refers to a policy-enforcement error in the QR scanning component of the Chromium/Chrome stack on iOS, allowing a user who is coaxed into scanning a crafted QR code to bypass navigation restrictions. Affected product: Google Chrome (iOS) with Chromium QR scan integration prior to 8...
CVE-2021-26676
ConnMan gdhcp flaw (CVE-2021-26676) causes a stack information leak via an uninitialized variable in the gdhcp component, affecting ConnMan versions prior to 1.39. Network-adjacent attackers could leverage the leak to facilitate further exploitation related to bugs in gdhcp. Public advisories (Op...
CVE-2021-45078
CVE-2021-45078 affects GNU Binutils (binutils) with a heap-based buffer overflow in the stab handling path (stab_xcoff_builtin_type / finish_stab in stabs.c). The issue is present in Binutils up to version 2.37; exploitation can cause a denial of service and potentially other impact as demonstrat...
CVE-2022-0135
CVE-2022-0135 affects the VirGL virtual OpenGL renderer (virglrenderer). A crafted virgil resource can trigger an out-of-bounds write via the VIRTGPU_EXECBUFFER ioctl, leading to denial of service or possible code execution in the guest. Connected advisories confirm the issue and note that patche...
CVE-2022-48655
CVE-2022-48655 in the Linux kernel: vulnerability in the SCMI firmware path (arm_scmi) where reset domains descriptors could be accessed by index, risking out-of-bounds due to SCMI driver misbehavior. The root cause is lack of an internal consistency check before domain descriptor accesses. The f...
CVE-2023-3420
CVE-2023-3420 describes a Type Confusion in V8 affecting Google Chrome/Chromium before 114.0.5735.198, allowing a remote attacker to trigger heap corruption via a crafted HTML page. Affected downstream advisories/coordination reference Chromium fixes prior to 114.0.5735.198 (e.g., Debian DSA-5440...
CVE-2023-52623
Technical details about CVE-2023-52623 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.
CVE-2023-5732
CVE-2023-5732 affects Firefox (pre-117 and ESR pre-115.4) and Thunderbird (pre-115.4.1). An attacker could craft a link using bidirectional characters to spoof the displayed address in the address bar. Public details in connected advisories confirm this vulnerability and list affected products; r...
CVE-2023-6112
CVE-2023-6112: Use-after-free in Navigation in Google Chrome/Chromium (
CVE-2024-36960
The CVE-2024-36960 entry maps to a Linux kernel issue in drm/vmwgfx where the length field for drm_event was incorrectly set to the parent structure, causing out-of-bounds reads when drm_read copies events to userspace. The provided documents confirm the root cause and fix: set drm_event length t...
CVE-2013-2255
OpenStack CVE-2013-2255 affects HTTPSConnections in Keystone (2013) and OpenStack Compute (2013.1), and possibly other OpenStack components. Root cause: server-side SSL certificate validation is not performed, allowing potential impersonation or man-in-the-middle scenarios where untrusted certifi...
CVE-2015-0244
CVE-2015-0244 affects PostgreSQL up to 9.0.19, 9.1.x up to 9.1.15, 9.2.x up to 9.2.10, 9.3.x up to 9.3.6, and 9.4.x up to 9.4.1. It arises from improper handling of errors while reading a protocol message, enabling remote attackers to perform SQL injection via crafted binary data in a parameter a...
CVE-2015-0411
CVE-2015-0411 concerns an unspecified remote vulnerability in Oracle MySQL Server versions 5.5.40 and earlier and 5.6.21 and earlier, related to Server: Security: Encryption. The impact is partial confidentiality, integrity, and availability loss via remote access. Connected advisories indicate r...
CVE-2015-5195
CVE-2015-5195 affects ntpd via ntp_openssl.m4; a crafted statistics or filegen configuration command, if not excluded at compile time, can cause a denial of service with a segmentation fault. Affected product is ntpd/NTP; root cause is an issue in configuration handling when commands are processe...
CVE-2015-5364
The CVE-2015-5364 issue affects the Linux kernel prior to 4.0.6, where udp_recvmsg/udpv6_recvmsg fail to handle processor yielding correctly, enabling remote attackers to trigger a denial of service (system hang) via UDP packet flood with incorrect checksums. Related CVE-2015-5366 also concerns U...
CVE-2016-4544
The CVE-2016-4544 issue is in the exif TIFF handling in PHP’s exif.c: the function exif_process_TIFF_in_JPEG does not validate TIFF start data, enabling a remote attacker to trigger an out-of-bounds read and potentially cause a denial of service or other impact. Affected PHP branches and versions...
CVE-2017-17094
CVE-2017-17094 affects WordPress core: wp-includes/feed.php in WordPress
CVE-2017-17785
CVE-2017-17785 affects GIMP 2.8.22 with a heap-based buffer overflow in the FLI import path (plug-ins/file-fli/fli.c, function fli_read_brun). The connected documents confirm the vulnerability in GIMP 2.8.22 and show IOCs and references in multiple advisories. Several advisories (OpenSUSE/SUSE an...
CVE-2018-13099
CVE-2018-13099 concerns the Linux kernel fs/f2fs/inline.c up to version 4.4, where a denial of service can occur via an out-of-bounds memory access and BUG when a modified f2fs image contains an inline inode with an invalid reserved blkaddr. The connected Nessus advisories (Unity Linux) describe ...
CVE-2018-15910
Artifex Ghostscript before 9.24 is affected by a type confusion in the LockDistillerParams parameter that can be triggered by crafted PostScript, potentially crashing the interpreter or enabling code execution. This CVE (CVE-2018-15910) is corroborated across multiple sources (vendor advisories a...
CVE-2018-19477
CVE-2018-19477 relates to Artifex Ghostscript prior to 9.26, where a JBIG2Decode type confusion in psi/zfjbig2.c allows remote attackers to bypass access restrictions by sending specially crafted input. Public disclosures in multiple sources (e.g., Debian/Red Hat advisories, IBM PowerKVM bulletin...
CVE-2019-11356
CVE-2019-11356 affects Cyrus IMAP Server (cyrus-imapd) via the CalDAV feature in httpd. The root cause is a buffer overflow triggered by a long iCalendar property name in CalDAV requests, enabling remote code execution. Impact is high (per CVSS) with potential remote compromise, depending on the ...
CVE-2019-15523
CVE-2019-15523 affects LINBIT csync2 up to version 2.0. The issue stems from not correctly checking the GNUTLS_E_WARNING_ALERT_RECEIVED return value from gnutls_handshake() and failing to call it again as required by the API design, which may lead to improper TLS handling. Publicly documented imp...
CVE-2019-17358
CVE-2019-17358 affects Cacti up to version 1.2.7 via unsafe deserialization in lib/functions.php, allowing an authenticated attacker to influence object data and control actions, with potential PHP memory corruption. Public fixes are shown in openSUSE updates: CVE-2019-17358 is addressed in cacti...
CVE-2019-18849
CVE-2019-18849 affects tnef up to version 1.4.18. The vulnerability is a heap-based buffer over-read involving strdup in handling crafted winmail.dat attachments, which could allow an attacker to write to the victim's .ssh/authorized_keys. Multiple advisories confirm the fix in tnef 1.4.18 across...
CVE-2019-7310
CVE-2019-7310 is a heap-based buffer over-read in Poppler 0.73.0’s XRef::getEntry (XRef.cc) that can be triggered by a crafted PDF document, potentially causing a denial of service (application crash) and possibly other impact (as demonstrated by pdftocairo). Affected products in multiple advisor...
CVE-2020-10109
CVE-2020-10109 affects Twisted Web up to and including 19.10.0. The vulnerability is an HTTP request splitting issue: when a request presents both a Content-Length and a chunked Transfer-Encoding header, the Content-Length takes precedence, causing the remainder of the body to be treated as a sep...
CVE-2020-10684
Ansible Engine vulnerable scope: versions 2.7.x before 2.7.17, 2.8.x before 2.8.11, and 2.9.x before 2.9.7 allow an attacker to alter ansible_facts when inject is enabled, potentially leading to privilege escalation or code injection. Connected advisories confirm the same underlying issue and pro...
CVE-2020-15995
CVE-2020-15995 is a vulnerability in Chromium/Google Chrome’s V8 engine, where an out-of-bounds write in V8 prior to 87.0.4280.141 could enable a remote attacker to potentially achieve heap corruption via a crafted HTML page. The issue was fixed by upgrading to Chromium version 87.0.4280.141 (or ...
CVE-2020-16002
CVE-2020-16002 is a use-after-free in PDFium leveraged via crafted PDFs in Google Chrome (before 86.0.4240.111). The vulnerability affects Chrome’s PDF rendering path (PDFium) and could allow a remote attacker to trigger heap corruption, with the potential for arbitrary impact as described in the...
CVE-2020-27746
CVE-2020-27746 affects Slurm before 19.05.8 and 20.x before 20.02.6, where a race condition in reading /proc X11 magic cookies via xauth can expose sensitive information to an unauthorized actor. The issue is tied to a race in the read path of /proc, enabling potential leakage of X authentication...
CVE-2021-21112
CVE-2021-21112 is a use-after-free in the Blink component of the Chromium-based Chrome stack (before 87.0.4280.141). The vulnerability allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Impact: partial confidentiality/integrity/availability degradation as des...
CVE-2021-21179
CVE-2021-21179 affects Google Chrome/Chromium, specifically a use-after-free in the Network Internals component on Linux prior to version 89.0.4389.72, enabling potential heap corruption via a crafted HTML page. A patch is available by upgrading to Chrome/Chromium 89.0.4389.72 or newer (see refer...
CVE-2021-21182
CVE-2021-21182 affects Google Chrome/Chromium navigations: insufficient policy enforcement in navigations allows a renderer-compromised remote attacker to bypass navigation restrictions via a crafted HTML page, for Chrome/Chromium fixes before/at 89.0.4389.72. Connected advisories (Debian Arch/DS...
CVE-2021-33038
CVE-2021-33038 affects HyperKitty prior to 1.3.5: when importing a private mailing-list archive via management/commands/hyperkitty_import.py, archives are publicly visible during the import, potentially exposing sensitive information. Documented in multiple advisories; affected software is HyperK...
CVE-2021-38562
CVE-2021-38562 affects Best Practical Request Tracker (RT) prior to specific fixed releases. A timing-attack vulnerability in lib/RT/REST2/Middleware/Auth.pm can disclose sensitive information. Affected RT versions include 4.2.x before 4.2.17, 4.4.x before 4.4.5, and 5.0.x before 5.0.2. Public ad...
CVE-2021-4011
The CVE CVE-2021-4011 affects xorg-x11-server prior to versions 21.1.2 and 1.20.14, due to an out-of-bounds access in SwapCreateRegister. This vulnerability can impact data confidentiality, integrity, and system availability. Remediation: upgrade to xorg-x11-server 21.1.2 or 1.20.14 (and later) p...
CVE-2022-30550
CVE-2022-30550 affects Dovecot 2.2 and 2.3 before 2.3.20. When two passdb entries share the same driver and args, incorrect username_filter and mechanism settings can be applied to passdb definitions, leading to an unintended security configuration and potential privilege escalation in certain se...
CVE-2022-46342
CVE-2022-46342 affects the X.Org X11 server (xorg-x11-server). The issue is a use-after-free in the XvdiSelectVideoNotify handler, which can lead to local privilege elevation on privileged X servers (and, per some advisories, potential remote code execution via X forwarding). Multiple advisories ...
CVE-2022-46877
CVE-2022-46877 describes a fullscreen notification bypass in Firefox prior to version 108, where the fullscreen notification could be delayed or suppressed, potentially allowing user confusion or spoofing. Affected product: Firefox (
CVE-2023-3214
CVE-2023-3214 covers a use-after-free in Chrome/Chromium’s Autofill payments path prior to 114.0.5735.133. The vulnerability could enable heap corruption via a crafted HTML page, with high/critical impact (remote code execution possible, per the public advisories). Affected products include Googl...
CVE-2023-35824
CVE-2023-35824 is a Linux kernel use-after-free in the dm1105_remove path (drivers/media/pci/dm1105/dm1105.c), fixed by Linux kernel 6.3.2 (ChangeLog-6.3.2). The Astra Linux bulletin and related sources confirm the same issue affecting kernel before 6.3.2 and cite the same function/file, indicati...
CVE-2023-51780
CVE-2023-51780: Linux kernel before 6.6.8 contains a use-after-free in do_vcc_ioctl (net/atm/ioctl.c) caused by a vcc_recvmsg race, enabling local exploitation. Affected: Linux kernel versions prior to 6.6.8. Root cause: race between vcc_recvmsg and do_vcc_ioctl leading to use-after-free. Impact:...
CVE-2024-35854
CVE-2024-35854 : In the Linux kernel, the mlxsw: spectrum_acl_tcam component could trigger a use-after-free during rehash. The root cause is destruction of a region that still has filters when migration can fail (despite non-negative credits), leading to OOB/dereference via use-after-free. The fi...
CVE-2024-35950
CVE-2024-35950 affects the Linux kernel DRM client code. The modes[] array references modes on connectors’ mode lists and was not protected by dev->mode_config.mutex, risking use-after-free or memory reuse. The fix extends the same mutex protection to modes[] to ensure elements aren’t freed or...
CVE-2024-36953
CVE-2024-36953 affects the Linux kernel KVM for arm64 with vgic-v2. The issue: vgic_v2_parse_attr() searches for a vCPU matching the CPUID and may receive a NULL from kvm_get_vcpu_by_id() if the ID is invalid. Unlike the safe GICv3 flow, the code did not verify the returned vCPU object. Affected ...
CVE-2024-47745
The CVE-2024-47745 entry describes a Linux kernel vulnerability where remap_file_pages bypassed W^X enforcement when using personality(READ_IMPLIES_EXEC) followed by a RW remap, due to the remap_file_pages path calling do_mmap() before the LSM security check. A fix adds a security_mmap_file LSM h...
CVE-2025-38000
CVE-2025-38000 affects the Linux kernel HFSC scheduler qlen accounting: when enqueuing the first packet, hfsc_enqueue() previously used child qdisc peek() before updating sch->q.qlen and sch->qstats.backlog, which could trigger a dequeue and leave the HFSC class in an inconsistent state (po...
CVE-2016-4565
CVE-2016-4565 affects the Linux kernel InfiniBand (IB) stack prior to 4.5.3, where certain IB interfaces improperly rely on write() semantics via a uAPI interface. This could allow a local unprivileged user to cause a denial of service (kernel memory write) and potentially other impact/escalation...