CVE-2021-21176

CVE-2021-21176 is an issue in Chromium/Google Chrome’s full screen mode where an inadequate implementation allowed a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Affected products include Chrome/Chromium prior to version 89.0.4389.72 across multiple advisories; the root...

CVE-2021-32920

Prosody (XMPP server) before version 0.11.9 is vulnerable to denial of service via an abuse of SSL/TLS renegotiation: a client can flood a connection with renegotiation requests, consuming excessive CPU on the server. Affected component is the SSL/TLS renegotiation handling within Prosody prior t...

CVE-2021-38562

CVE-2021-38562 affects Best Practical Request Tracker (RT) prior to specific fixed releases. A timing-attack vulnerability in lib/RT/REST2/Middleware/Auth.pm can disclose sensitive information. Affected RT versions include 4.2.x before 4.2.17, 4.4.x before 4.4.5, and 5.0.x before 5.0.2. Public ad...

CVE-2022-1516

CVE-2022-1516: A NULL pointer dereference in the Linux kernel’s X.25 protocol stack allows a local attacker to crash the system during session termination via a simulated Ethernet card. Connected sources consistently describe this flaw as a local (LOCAL) impact with no remote vector provided; no ...

CVE-2022-21682

CVE-2022-21682 (Flatpak-builder path traversal) Affects Flatpak and its builder prior to a fix: versions before 1.12.3 and 1.10.6. The vulnerability arises when flatpak-builder applies finish-args at finalization, allowing the build directory to inherit permissions declared in the manifest; with ...

CVE-2022-23038

CVE-2022-23038 affects Linux PV device frontends that use the grant-table interfaces (blkfront, netfront, scsifront) and the gntalloc/xenbus components. The issue is a race in removing or delaying the revocation of granted access to memory pages, which can allow a malicious backend to keep access...

CVE-2023-52683

CVE-2023-52683: Linux kernel ACPI LPIT integer-overflow in lpit_update_residency() (tsc_khz > UINT_MAX/1000) fixed by replacing a u32 multiplication with mul_u32_u32(). The MiracleLinux advisories (AXSA entries) reference this CVE among affected Linux kernel series and note remediation via ker...

CVE-2024-26675

CVE-2024-26675 (Linux kernel) affects the ppp_async path. The issue arises from MRU (Maximum Receive Unit) limits not being enforced for PPP async messages, which can trigger a warning in __alloc_pages via a memory/page allocation path when handling large skb allocations during PPP input. The des...

CVE-2024-35925

The CVE-2024-35925 issue concerns the Linux kernel blk_rq_stat_sum() path. The root cause is a potential division by zero when computing stats, caused by the expression dst->nr_samples + src->nr_samples reaching zero due to overflow. Multiple connected advisories (Unity Linux security updat...

CVE-2024-49894

CVE-2024-49894 : Linux kernel DRM/AMD display degamma translation had an index-out-of-bounds in cm_helper_translate_curve_to_degamma_hw_format when i exceeded TRANSFER_FUNC_POINTS. A bounds check was added to ensure i stays within transfer function points; otherwise the function returns an error....

CVE-2024-49960

CVE-2024-49960 concerns ext4 on the Linux kernel. The issue is a timer use-after-free during failed mounts: the s_err_report timer can remain active while sbi is freed, because ext4_handle_error re-arms the timer before kfree(sbi). The root cause is not canceling the s_err_report timer after ext4...

CVE-2013-2255

OpenStack CVE-2013-2255 affects HTTPSConnections in Keystone (2013) and OpenStack Compute (2013.1), and possibly other OpenStack components. Root cause: server-side SSL certificate validation is not performed, allowing potential impersonation or man-in-the-middle scenarios where untrusted certifi...

CVE-2015-1855

CVE-2015-1855 affects Ruby’s OpenSSL hostname matching: the OpenSSL extension fails to validate hostnames, allowing server spoofing. Affected: Ruby/OpenSSL before 2.0.0 patchlevel 645; 2.1.x before 2.1.6; 2.2.x before 2.2.2. Root cause: permissive hostname matching (wildcards, IDNA, case, non‑ASC...

CVE-2017-1000363

CVE-2017-1000363: Linux kernel lp driver bounds-check flaw in lp.c allows a local attacker with write access to kernel command line arguments to overflow parport_nr and execute arbitrary code. Root cause: missing bounds check in arg handling. Public disclosures include Debian security advisories ...

CVE-2017-10176

CVE-2017-10176 affects Oracle Java SE/SE Embedded/JRockit (OpenJDK/OpenJDK components) with affected releases including Java SE 7u141 and 8u131, SE Embedded 8u131, JRockit R28.3.14. The vulnerability enables an unauthenticated network attacker to access or take data via multiple protocols and can...

CVE-2017-17094

CVE-2017-17094 affects WordPress core: wp-includes/feed.php in WordPress

CVE-2017-7613

CVE-2017-7613 affects Elfutils 0.168. The vulnerability arises from memory allocation failure in elflint.c when opening a crafted ELF file, leading to denial of service via memory exhaustion. Affected product: Elfutils (version 0.168). Root cause: insufficient validation of number of sections/seg...

CVE-2017-7819

CVE-2017-7819 is a use-after-free in the design mode image resizing path that can crash the process if referenced objects have been freed. The vulnerability affects Thunderbird < 52.4 and, per the cited records, Firefox < 56 and Firefox ESR

CVE-2017-9935

In LibTIFF, CVE-2017-9935 affects the t2p_write_pdf function in tiff2pdf.c (LibTIFF 4.0.8 and earlier). The vulnerability is a heap-based buffer overflow that can cause out-of-bounds reads, invalid frees, memory corruption, or double frees, potentially enabling arbitrary code execution. Multiple ...

CVE-2018-1000164

Summary of CVE-2018-1000164 (Gunicorn) : Gunicorn 19.4.5 contains a CWE-113 vulnerability in the process_headers function (gunicorn/http/wsgi.py) that can cause HTTP header splitting to lead to arbitrary HTTP headers being returned by the server. The issue is fixed in version 19.5.0. Documents in...

CVE-2018-13099

CVE-2018-13099 concerns the Linux kernel fs/f2fs/inline.c up to version 4.4, where a denial of service can occur via an out-of-bounds memory access and BUG when a modified f2fs image contains an inline inode with an invalid reserved blkaddr. The connected Nessus advisories (Unity Linux) describe ...

CVE-2018-16749

CVE-2018-16749: In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage (coders/png.c) allows a crafted file to trigger a denial of service (WriteBlob assertion failure and app exit). Affected versions are before the fixed release. Remediation: update ImageMagick to a version...

CVE-2018-5102

CVE-2018-5102 is a use-after-free in HTML media element handling with media streams, affecting Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-8788

CVE-2018-8788 affects FreeRDP prior to 2.0.0-rc4, with an out-of-bounds write of up to 4 bytes in nsc_rle_decode() that can cause memory corruption and potentially remote code execution. Several advisories confirm the issue and list updates/patches (e.g., freerdp updates in CentOS/Red Hat/Mageia/...

CVE-2019-16792

CVE-2019-16792 affects Waitress up to version 1.3.1, where sending two Content-Length headers can cause a request to be treated as having no body and the body of the request becoming a new request in HTTP pipelining. The issue is caused by header folding of a double Content-Length and an inabilit...

CVE-2019-5760

CVE-2019-5760 affects Google Chrome’s WebRTC implementation. Insufficient pointer validation could lead to heap corruption via a crafted HTML page, enabling remote exploitation. The fix is available in Chrome updates from 72.0.3626.81 onward.

CVE-2019-9210

CVE-2019-9210 affects the AdvanceCOMP recompression utilities. The flaw is in pngex.cc, inside advpng’s png_compress, where an invalid PNG size can trigger an integer overflow and lead to an attempted memcpy into a too-small buffer, with a heap-based buffer over-read also reported. A patched vers...

CVE-2020-10684

A flaw exists in Ansible Engine affecting versions 2.7.x prior to 2.7.17, 2.8.x prior to 2.8.9, and 2.9.x prior to 2.9.6. The vulnerability occurs when ansible_facts is used as a subkey of itself and promoted to a variable while the inject feature is enabled; this causes the ansible_facts data to...

CVE-2020-11049

CVE-2020-11049 : In FreeRDP, there is an out-of-bounds read of client memory that is then passed on to the protocol parser. This vulnerability affects FreeRDP releases prior to the patch and has been explicitly fixed in version 2.0.0. The available documents describe the issue as an OOB read in t...

CVE-2020-11759

CVE-2020-11759 affects the OpenEXR open-source image library. The issue arises from integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, allowing an attacker to write to an out-of-bounds pointer in affected builds prior to 2.4.1. The OpenEXR pro...

CVE-2020-15995

CVE-2020-15995 is a vulnerability in Chromium/Google Chrome’s V8 engine, where an out-of-bounds write in V8 prior to 87.0.4280.141 could enable a remote attacker to potentially achieve heap corruption via a crafted HTML page. The issue was fixed by upgrading to Chromium version 87.0.4280.141 (or ...

CVE-2020-16006

Chromium vulnerability CVE-2020-16006 concerns an inappropriate implementation in V8 prior to version 86.0.4240.183, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected software is the Chromium browser (V8 engine component). Impact is remote code ex...

CVE-2020-28040

CVE-2020-28040 affects WordPress before 5.5.2, where CSRF can change a theme’s background image. Public sources in connected documents confirm this issue and that WordPress 5.5.2 (security/maintenance release) addresses it. Affected product: WordPress; root cause: CSRF vulnerability enabling back...

CVE-2020-4067

In coturn, version 4.5.1.3 and earlier contains a vulnerability where the STUN/TURN response buffer is not initialized properly, allowing an attacker to leak information between distinct client connections by querying padding bytes. This is a consequence of an uninitialized memory region in the r...

CVE-2020-6517

CVE-2020-6517 : The connected documents confirm a heap buffer overflow in Chrome’s history handling, exploited via a crafted HTML page, affecting Chrome prior to 84.0.4147.89. The issue is listed among Chrome’s 2020 security fixes and was addressed in the Chrome 84 stable update (84.0.4147.89) fo...

CVE-2020-6546

CVE-2020-6546 affects Google Chrome on Windows/macOS/Linux via an Inappropriate implementation in the installer. The root cause is an flawed installer flow that can be abused by a local attacker to escalate privileges through a crafted filesystem, as detailed in multiple advisories. The impact is...

CVE-2020-6558

CVE-2020-6558 affects Google Chrome on iOS (iOS WebView) prior to 85.0.4183.83. The vulnerability is due to insufficient policy enforcement in iOSWeb that allowed a remote attacker to bypass navigation restrictions with a crafted HTML page. It was fixed in the Chrome 85 stable release (85.0.4183....

CVE-2021-21167

CVE-2021-21167 affects Google Chrome prior to 89.0.4389.72, with a use-after-free in the bookmarks component that can lead to heap corruption via a crafted HTML page. Affected software is the Chromium-based browser (Chrome); root cause is a use-after-free condition in bookmarks. Impact stated: re...

CVE-2021-21187

CVE-2021-21187 is a Chromium/Google Chrome URL formatting vulnerability caused by insufficient data validation in the URL formatting code. It allows a remote attacker to perform domain spoofing via IDN homographs when a crafted domain name is used, with impact described as spoofing and potential ...

CVE-2021-21203

CVE-2021-21203: In Blink/WebKit of Google Chrome, use-after-free in Blink could allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected: Chrome prior to 90.0.4430.72. Remediation: update to Chrome 90.0.4430.72 or newer. Notes: connected sources corroborate the same de...

CVE-2021-39242

HAProxy contains a vulnerability (CVE-2021-39242) affecting 2.2 prior to 2.2.16, 2.3 prior to 2.3.13, and 2.4 prior to 2.4.3 where mismatch between Host and authority can allow an attacker-controlled HTTP Host header. Reports indicate this could enable manipulation of requests and potential impac...

CVE-2021-39259

CVE-2021-39259 affects NTFS-3G: a crafted NTFS image can trigger an out-of-bounds access due to an unsanitized attribute length in ntfs_inode_lookup_by_name (NTFS-3G

CVE-2022-0204

CVE-2022-0204 is a heap overflow vulnerability in BlueZ (Bluetooth stack) affecting versions prior to 5.63. Multiple connected advisories confirm impact via a local-network attack that can cause a target application to halt/crash, resulting in Denial of Service. Remediation is to upgrade BlueZ to...

CVE-2022-1328

CVE-2022-1328 is a buffer overflow in Mutt’s uudecoder that affects all versions from 0.94.13 up to 2.2.3, enabling a read past the end of an input line. Connected advisories (Astra Linux, AlmaLinux, Debian LTS, Amazon ALAS) confirm the issue and document fixes/upgrades; however, exploitation sta...

CVE-2022-32886

CVE-2022-32886 is a WebKitGTK/WebKit2GTK vulnerability described as a buffer overflow when processing maliciously crafted web content, potentially enabling arbitrary code execution. Connected advisories confirm concrete fixes across distros: Debian security advisories (DSA-5240-1, DSA-5241-1) fix...

CVE-2022-48655

CVE-2022-48655 in the Linux kernel: vulnerability in the SCMI firmware path (arm_scmi) where reset domains descriptors could be accessed by index, risking out-of-bounds due to SCMI driver misbehavior. The root cause is lack of an internal consistency check before domain descriptor accesses. The f...

CVE-2023-4902

CVE-2023-4902 affects Google Chrome and Chromium. The issue is an inappropriate implementation in Input that lets a remote attacker spoof security UI via a crafted HTML page. Root cause: flawed handling in the Input module prior to version 117.0.5938.62. Impact: spoofed UI could mislead users; ex...

CVE-2024-49882

CVE-2024-49882 : In the Linux kernel’s ext4 code, a double free/UAF issue was fixed in ext4_ext_try_to_merge_up() where path[1].p_bh could be freed twice if not NULL after release. The problem manifested as a warning “brelse a buffer twice” during writeback when ext4 extents were merged and buffe...

CVE-2015-7701

CVE-2015-7701 involves a memory leak in ntpd’s CRYPTO_ASSOC when autokey is enabled. Affected: ntpd in NTP 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77. Impact: potential denial of service due to memory exhaustion. Remediation: upgrade to fixed ntp releases (e.g., 4.2.8p4+ or 4.3.77+); or disable...

CVE-2016-5300

Expat CVE-2016-5300 is a denial-of-service vulnerability in the Expat XML parser caused by insufficient entropy used for hash initialization. The issue allows context-dependent attackers to cause CPU exhaustion via crafted identifiers in XML documents. Connected material confirms this as an Expat...