10003 matches found
CVE-2019-16792
CVE-2019-16792 affects Waitress up to version 1.3.1, where sending two Content-Length headers can cause a request to be treated as having no body and the body of the request becoming a new request in HTTP pipelining. The issue is caused by header folding of a double Content-Length and an inabilit...
CVE-2019-19318
The CVE-2019-19318 issue affects Linux kernel 5.3.11. Root cause: mounting a crafted btrfs image twice can trigger a use-after-free in rwsem_down_write_slowpath because rwsem_can_spin_on_owner’s rwsem_owner_flags returns an already freed pointer. Documented impact per sources indicates an availab...
CVE-2020-15985
Technical details about CVE-2020-15985 are not publicly provided in the supplied documents. Monitor for updates in connected advisories and CVE trackers as additional details may emerge.
CVE-2020-16000
CVE-2020-16000 refers to an Inappropriate implementation in Blink in Google Chrome before 86.0.4240.111, enabling remote exploitation via a crafted HTML page that could lead to heap corruption. Affected component: Blink in Chrome; root cause: inappropriate implementation in Blink; impact: potenti...
CVE-2020-25599
CVE-2020-25599 affects Xen up to 4.14.x, with race conditions in evtchn_reset() potentially allowing x86 PV guests to escalate to host privileges, cause host/guest crashes, or DoS. All Xen 4.5+ are vulnerable; 4.4 and earlier are not. Several vendor advisories indicate patches were released to fi...
CVE-2020-27845
CVE-2020-27845 : In OpenJPEG, the flaw in src/lib/openjp2/pi.c (pre-2.4.0) allows an attacker-provided, untrusted input to trigger an out-of-bounds read during conversion/encoding, with impact to availability. Affected: OpenJPEG versions before 2.4.0. Remediation: upgrade to 2.4.0 or newer (per m...
CVE-2020-4032
CVE-2020-4032 affects FreeRDP prior to 2.1.2, where an integer casting vulnerability occurs in update_recv_secondary_order. All clients with +glyph-cache or /relax-order-checks are affected. The issue is fixed in version 2.1.2. The connected sources consistently describe this as a vulnerability i...
CVE-2020-6435
CVE-2020-6435 describes a policy enforcement error in extensions that affects Google Chrome/Chromium prior to 81.0.4044.92. The issue, rooted in insufficient policy enforcement within the extensions component, could allow a remote attacker who has achieved renderer access to bypass navigation res...
CVE-2021-21116
CVE-2021-21116: Heap buffer overflow in the audio component of Chromium-based browsers (Chrome/Chromium) before 87.0.4280.141. A remote attacker could exploit heap corruption via a crafted HTML page. Remediation: update to 87.0.4280.141 or later.
CVE-2021-21167
CVE-2021-21167 affects Google Chrome prior to 89.0.4389.72, with a use-after-free in the bookmarks component that can lead to heap corruption via a crafted HTML page. Affected software is the Chromium-based browser (Chrome); root cause is a use-after-free condition in bookmarks. Impact stated: re...
CVE-2021-3478
CVE-2021-3478 affects OpenEXR’s scanline input file handling. A crafted file processed by OpenEXR can cause excessive memory usage, with the greatest impact on availability. Multiple connected sources corroborate a memory-denial threat vector in OpenEXR before 3.0.0-beta. Debian LTS advisories sh...
CVE-2021-39256
CVE-2021-39256 describes a heap-based buffer overflow in ntfs_inode_lookup_by_name within NTFS-3G. The issue affects NTFS-3G prior to version 2021.8.22 when processing a crafted NTFS image, potentially enabling exploitation via local interaction. Connected advisories confirm this vulnerability in...
CVE-2022-1328
CVE-2022-1328 is a buffer overflow in Mutt’s uudecoder that affects all versions from 0.94.13 up to 2.2.3, enabling a read past the end of an input line. Connected advisories (Astra Linux, AlmaLinux, Debian LTS, Amazon ALAS) confirm the issue and document fixes/upgrades; however, exploitation sta...
CVE-2022-23520
The CVE concerns ruby-rails-html-sanitizer used by Rails apps. Affected when developers override Rails::Html::Sanitizer’s allowed tags to include both "select" and "style" elements, enabling an XSS payload. Root cause is an incomplete fix of CVE-2022-32209; the issue is fixed in version 1.4.4. Im...
CVE-2022-46344
CVE-2022-46344 affects X.Org X11-server (XIChangeProperty). The description in the CVE entry notes an out-of-bounds memory access in the XIChangeProperty handler, enabling potential local privilege elevation on privileged X servers and remote code execution for ssh X forwarding sessions. Connecte...
CVE-2024-35805
CVE-2024-35805 affects the Linux kernel in the dm snapshot code path. The issue was a lockup when exiting a snapshot with many exceptions, resolved by adding a cond_resched in the loop that frees the exceptions in dm_exception_table_exit. The root cause is a lockup during exit of large dm-snapsho...
CVE-2024-35905
CVE-2024-35905 is a Linux kernel issue where a patch re-introduced protection against negative stack-access sizes in BPF code. The fix guards against out-of-bounds accesses in check_stack_range_initialized() when an access size can overflow its signed int representation. The vulnerability was mit...
CVE-2024-36020
The CVE-2024-36020 issue in the Linux kernel relates to the i40e driver: a VF pointer could be used uninitialized due to interchangeability of variables (v vs vf) introduced by a regression. A fix was implemented to remove redundant v, and to iterate using a single VF pointer across the affected ...
CVE-2005-1268
CVE-2005-1268 is an off-by-one overflow in Apache mod_ssl CRL verification callback when using a CRL, enabling a remote attacker to cause an Apache child process crash (DoS). Several advisories note this vulnerability and document patches/upstream fixes in Apache httpd releases; e.g., Red Hat/Cen...
CVE-2014-1510
CVE-2014-1510 is a WebIDL-related remote code execution in Mozilla Firefox family (Firefox, Thunderbird, SeaMonkey) where an IDL fragment can trigger window.open with chrome privileges. Affected products and versions are Mozilla Firefox (pre-28.0 and ESR 24.x before 24.4 for some branches), Thund...
CVE-2014-1943
CVE-2014-1943 affects the file(1) utility and its libmagic component. A crafted indirect offset value in the file(1) magic can cause context-dependent attackers to trigger infinite recursion, CPU exhaustion, and a crash, i.e., denial of service. The vulnerability is described as applicable to fil...
CVE-2015-1239
CVE-2015-1239 is a vulnerability in OpenJPEG (used by PDFium in Google Chrome) where a double free in j2k_read_ppm_v3 can cause a remote-denial of service (process crash) via a crafted PDF. Affected software is OpenJPEG prior to r2997; impact is crash/DoS with no confidentiality or integrity loss...
CVE-2015-5307
CVE-2015-5307 affects the Linux kernel KVM subsystem (through 4.2.6) and Xen (4.3.x–4.6.x). An attacker who has local access in a guest can trigger many #AC exceptions (Alignment Check), potentially causing a host panic/hang. Root cause involves svm.c/vmx.c handling of alignment-related events. P...
CVE-2017-5383
CVE-2017-5383 describes spoofing via specific Unicode glyphs used to alter the location bar content. The initial entry notes impact on Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox
CVE-2017-6834
CVE-2017-6834 is a heap-based buffer overflow in ulaw2linear_buf of Audio File Library (audiofile) 0.3.6 and earlier, allowing a crafted file to crash targeted applications (DoS). Public advisories indicate multiple vendors/distros patched this family (e.g., 0.3.6-4 and newer). Affected pages als...
CVE-2018-12361
CVE-2018-12361 is an integer overflow in the SwizzleData code during buffer-size calculation that can lead to a potentially exploitable crash when inputs aren’t sanitized. Affected products include Mozilla Thunderbird before 60 and Firefox family before 61 (Firefox ESR before 60.1). Public remedi...
CVE-2018-12389
CVE-2018-12389 relates to memory safety bugs in Mozilla Firefox ESR 60.x affecting Firefox ESR < 60.3 and Thunderbird
CVE-2018-12395
CVE-2018-12395 describes a WebExtension domain restrictions bypass via rewriting Host header using the webRequest API. Affected Firefox ESR < 60.3 and Firefox
CVE-2018-7225
CVE-2018-7225 in LibVNCServer : rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, allowing access to uninitialized and potentially sensitive data via crafted VNC packets. This affects LibVNCServer up to version 0.9.11. Multiple downstream advisories document fixes i...
CVE-2019-16779
In CVE-2019-16779, RubyGem excon before 0.71.0 contains a race condition on persistent connections where an interrupted connection can leave data on the socket, causing subsequent requests to return content from the previous response. This affects ruby-excon packages across multiple distributions...
CVE-2019-19039
CVE-2019-19039 is a Linux kernel vulnerability affecting btrfs: the function __btrfs_free_extent in fs/btrfs/extent-tree.c may trigger a path in btrfs_print_leaf during an ENOENT case, enabling a local attacker to obtain potentially sensitive information about register values via dmesg. The descr...
CVE-2019-20171
CVE-2019-20171 affects GPAC versions 0.5.2 and 0.9.0-development-20191109, with memory leaks identified in metx_New (isomedia/box_code_base.c) and abst_Read (isomedia/box_code_adobe.c). This vulnerability is evidenced in multiple sources (NVD entry and Debian/MAGEIA advisories) and is part of a b...
CVE-2020-16043
CVE-2020-16043 affects Chromium-based browsers (e.g., Chrome) before version 87.0.4280.141 . The issue is an insufficient data validation in networking that could allow a remote attacker to bypass discretionary access control via malicious network traffic. Impact per sources: remote code/impact r...
CVE-2020-6445
CVE-2020-6445 discusses an insufficient policy enforcement vulnerability in the trusted types component of the Chromium/Chrome browser before version 81.0.4044.92, enabling a remote attacker to bypass Content Security Policy via a crafted HTML page. Public references in Debian/Arch/Fedora advisor...
CVE-2020-6520
CVE-2020-6520: A heap buffer overflow in Skia used by Google Chrome prior to version 84.0.4147.89 allowed remote exploitation via a crafted HTML page (heap corruption). Multiple connected sources confirm the issue resides in Skia used by Chrome/Chromium and the fix was delivered via Chrome/Chromi...
CVE-2020-6563
CVE-2020-6563 affects Google Chrome on Android and is caused by insufficient policy enforcement in the intent-handling component, enabling a remote attacker to read potentially sensitive data from disk via a crafted HTML page. Affected: Chrome on Android versions prior to 85.0.4183.83. Impact: in...
CVE-2020-6576
CVE-2020-6576 is a vulnerability in the Chromium browser involving a use-after-free in the offscreen canvas component. The issue could allow a remote attacker to corrupt the heap via a crafted HTML page, potentially enabling arbitrary code execution. The most concrete remediation in the provided ...
CVE-2021-21106
The CVE-2021-21106 issue affects Chromium-based browsers (e.g., Google Chrome up to 87.0.4280.141 and related Chromium builds) and is caused by a use-after-free in the autofill component. This vulnerability could allow a remote attacker who has compromised the renderer process to escape the sandb...
CVE-2021-21165
CVE-2021-21165: Data indicates a heap/object lifecycle issue in Chrome/Chromium audio paths before 89.0.4389.72, enabling potential remote arbitrary code execution. The Astra/Audit/Debian entries confirm an audio component flaw in Chromium with the same version bound. Affected product: Chromium b...
CVE-2021-21210
Affected software: Google Chrome (before version 90.0.4430.72). The CVE describes an Inappropriate implementation in Network that could allow a remote attacker to potentially access local UDP ports via a crafted HTML page. Impact statements in the connected documents indicate a remote attacker co...
CVE-2021-3803
CVE-2021-3803 is linked to nth-check’s Inefficient Regular Expression Complexity. IBM security bulletin for IBM watsonx Orchestrate Developer Edition (1.4.0–1.14.0) lists this CVE and states the remediation is to upgrade to Release 1.15.0. The core issue is the nth-check regex complexity; no expl...
CVE-2022-2058
CVE-2022-2058 affects libtiff 4.4.0 (tiffcrop) with a Divide By Zero error that can cause a denial of service via a crafted TIFF file. The issue originates in tiffcrop and is addressed by a fix available in commit f3a5e010 for users compiling libtiff from source. Exploitation details or in-the-wi...
CVE-2022-3201
CVE-2022-3201 affects Google Chrome/DevTools on ChromeOS with insufficient input validation in DevTools prior to 105.0.5195.125, enabling a crafted HTML page via a user-instigated malicious extension to bypass navigation restrictions. The issue is tied to Chrome/Chromium DevTools input handling a...
CVE-2023-2460
CVE-2023-2460 is a Chromium/Chrome family issue: insufficient validation of untrusted input in Extensions could let a user-installed malicious extension bypass file access checks via a crafted HTML page. The vulnerability affects Google Chrome (and Chromium-based builds) up to version 113.0.5672....
CVE-2023-5997
The CVE-2023-5997 entry corresponds to a Use-After-Free in the Garbage Collection of Google Chrome/Chromium prior to 119.0.6045.159, enabling a remote attacker to potentially corrupt the heap through a crafted HTML page. Affected software includes Chromium-based browsers (Chrome) with fixes shipp...
CVE-2024-35925
The CVE-2024-35925 issue concerns the Linux kernel blk_rq_stat_sum() path. The root cause is a potential division by zero when computing stats, caused by the expression dst->nr_samples + src->nr_samples reaching zero due to overflow. Multiple connected advisories (Unity Linux security updat...
CVE-2024-49950
CVE-2024-49950 affects the Linux kernel Bluetooth L2CAP implementation (l2cap_connect), with a slab-use-after-free/KASAN issue reported in l2cap_connect.constprop.0. Connected advisories (Unity Linux UTSA-2026-005148, Azure Linux CVE advisory, MiracleLinux AXSA:2025-10392) confirm the fix has bee...
CVE-2014-4943
CVE-2014-4943 affects the Linux kernel up to 3.15.6, specifically the PPPoL2TP feature in net/l2tp/l2tp_ppp.c. The vulnerability arises from data-structure differences between an l2tp socket and an inet socket, enabling local privilege escalation. Public details in connected sources include PoC/e...
CVE-2015-4335
CVE-2015-4335: Redis EVAL Lua sandbox escape . The vulnerability affects Redis up to 2.8.21 and 3.x up to 3.0.2, where remote attackers could abuse the EVAL Lua command to execute arbitrary Lua bytecode, potentially escaping the sandbox and running code with Redis process privileges. Debian’s adv...