CVE-2017-5443

The CVE-2017-5443 entry describes an out-of-bounds write during BinHex decoding that affects Mozilla products: Thunderbird before 52.1, Firefox ESR before 52.1, and Firefox before 53. The impact is memory corruption with potential crashes and possible arbitrary code execution. Upstream fixes are ...

CVE-2018-12387

Mozilla Firefox and Firefox ESR are affected by CVE-2018-12387 due to a memory-safety bug in the JavaScript JIT where Array.prototype.push is inlined with multiple arguments, causing the stack pointer to be off by 8 bytes after bailout. This results in a memory address leak to the caller, enablin...

CVE-2018-12389

CVE-2018-12389 relates to memory safety bugs in Mozilla Firefox ESR 60.x affecting Firefox ESR < 60.3 and Thunderbird

CVE-2018-14351

CVE-2018-14351 affects Mutt before 1.10.1 and NeoMutt before 2018-07-16, where imap/command.c mishandles a long IMAP status mailbox literal count size. This could lead to parsing issues in IMAP responses and is reported with high severity (CVSS v3.1: CRITICAL, base score 9.8). Affected components...

CVE-2018-14680

CVE-2018-14680 affects libmspack (mspack/chmd.c) prior to 0.7alpha. The vulnerability arises because CHM decompression does not reject blank CHM filenames, enabling an input that could lead to a partial impact on availability (per CVSS metrics). The issue is documented as an off-by-one/invalid-da...

CVE-2018-15127

LibVNCServer contains a heap out-of-bounds write vulnerability in the server code of the File Transfer extension, enabling remote code execution. Multiple connected advisories confirm CVE-2018-15127 and note affected versions (LibVNCServer prior to the patched release, e.g., 0.9.12 in some adviso...

CVE-2018-19962

CVE-2018-19962 (Xen) affects the Xen hypervisor on AMD x86, where guest OS users can potentially escalate to host privileges due to small IOMMU mappings being unsafely merged into larger ones. The vulnerability is rooted in how IOMMU mappings are combined, enabling a malicious or local attacker i...

CVE-2018-20153

CVE-2018-20153 affects WordPress versions before 4.9.9 and 5.x before 5.0.1, where contributors could modify new comments made by users with higher privileges, potentially enabling XSS. Mitigations exist in WordPress 4.9.9+ and 5.0.1+, as referenced in Debian security advisories (DSA-4401-1) and ...

CVE-2018-20177

CVE-2018-20177 affects the rdesktop X11/CLI client (up to v1.8.3). The issue is an Integer Overflow in the rdp_in_unistr() path that causes a Heap-Based Buffer Overflow, leading to memory corruption and potential remote code execution. Several connected sources confirm the vulnerability in rdesktop

CVE-2018-5168

CVE-2018-5168 is a vulnerability in Thunderbird and Firefox where an attacker can bypass permission checks by manipulating the baseURI of the theme element, enabling a user interaction-free installation of a theme that could contain offensive images. Affected products and versions per the records...

CVE-2019-12497

CVE-2019-12497 affects Open Ticket Request System (OTRS) 7.0.x up to 7.0.8, Community Edition 6.0.x up to 6.0.19, and Community Edition 5.0.x up to 5.0.36. Description: in the customer/external frontend, personal information of agents (e.g., name and email address) could be disclosed in external ...

CVE-2020-12658

CVE-2020-12658 affects gssproxy (gss-proxy)

CVE-2020-26215

CVE-2020-26215 affects Jupyter Notebook up to version 6.1.4, which is vulnerable to an open redirect via a specially crafted link to a notebook server that redirects the user to a spoofed website. The issue enables phishing-like redirection to arbitrary websites on the public internet. The vulner...

CVE-2020-6496

CVE-2020-6496 : Use-after-free in the payments component of Google Chrome on macOS before 83.0.4103.97 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected: Chrome/macOS; Root cause: use-after-free in payments. Impact: sandbox escape possible; Exploit...

CVE-2020-6565

CVE-2020-6565 affects Google Chrome on iOS (Omnibox/URL bar). Insecure/improper Omnibox handling allowed a remote attacker to spoof the URL bar contents using a crafted HTML page. Root cause: inappropriate Omnibox implementation. Impact: spoofed UI; potential user deception. Remediation: update t...

CVE-2020-6575

The CVE-2020-6575 vulnerability affects Google Chrome’s Mojo component in the renderer path, described as a race condition that could allow a sandbox escape when a crafted HTML page is loaded. The issue requires the renderer process to be compromised to exploit the sandbox escape vector. Exploita...

CVE-2021-21173

CVE-2021-21173 describes a side-channel information leakage in Google Chrome/Chromium’s Network Internals, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected component: Network Internals in Chromium before version 89.0.4389.72. Root cause: side-channel informat...

CVE-2021-39240

CVE-2021-39240 affects HAProxy versions before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. Root cause: the scheme and path portions of a URI are not guaranteed to contain expected characters, allowing authority mismatches and potential information exposure. Connected advisories (Astra Linux,...

CVE-2022-2058

CVE-2022-2058 affects libtiff 4.4.0 (tiffcrop) with a Divide By Zero error that can cause a denial of service via a crafted TIFF file. The issue originates in tiffcrop and is addressed by a fix available in commit f3a5e010 for users compiling libtiff from source. Exploitation details or in-the-wi...

CVE-2022-3235

CVE-2022-3235 affects vim/vim with a Use After Free in versions prior to 9.0.0490. The connected advisories indicate remediation through upgrading Vim to a newer release; multiple sources reference updating to a newer vim package (no explicit fixed version in the Initial Description). If exploiti...

CVE-2023-4902

CVE-2023-4902 affects Google Chrome and Chromium. The issue is an inappropriate implementation in Input that lets a remote attacker spoof security UI via a crafted HTML page. Root cause: flawed handling in the Input module prior to version 117.0.5938.62. Impact: spoofed UI could mislead users; ex...

CVE-2024-35958

CVE-2024-35958 (Linux kernel, net: ena) fixes an incorrect descriptor free behavior in ENA TX queues. There are two queue types: (1) TX packets from the network stack and (2) TX packets redirected/forwarded by XDP. The bug caused ena_free_tx_bufs() to free descriptors assuming the first category,...

CVE-2015-4473

CVE-2015-4473 is a memory-safety vulnerability in Mozilla Firefox’s browser engine (affecting Firefox before 40.0 and ESR 38.x before 38.2) that could allow remote code execution or a denial of service via unspecified vectors. Publicly reported across multiple vendors’ advisories, including IBM p...

CVE-2016-2774

CVE-2016-2774 affects ISC DHCP 4.1.x (before 4.1-ESV-R13), 4.2.x, and 4.3.x before 4.3.4, enabling DoS by opening many TCP sessions. Public advisories (IBM, Debian, Cloud Foundry/Ubuntu, Broadcom) confirm this vulnerability and document fixes: Debian Linux 4.3.1-6+deb8u4; IBM PowerKVM/Power i pat...

CVE-2016-5403

CVE-2016-5403 affects QEMU’s virtio path (virtqueue_pop in hw/virtio/virtio.c). A local guest OS administrator can cause a denial of service via unbounded memory allocation by submitting virtqueue requests without waiting for completion, potentially crashing the QEMU process. Public postings acro...

CVE-2016-9904

CVE-2016-9904 describes a timing-attack vulnerability in JavaScript Map/Set usage that can leak information across websites. Affected products include Firefox versions before 50.1, Firefox ESR before 45.6, and Thunderbird before 45.6. The issue enables an attacker to determine if an atom is used ...

CVE-2017-10176

CVE-2017-10176 affects Oracle Java SE/SE Embedded/JRockit (OpenJDK/OpenJDK components) with affected releases including Java SE 7u141 and 8u131, SE Embedded 8u131, JRockit R28.3.14. The vulnerability enables an unauthenticated network attacker to access or take data via multiple protocols and can...

CVE-2017-16612

CVE-2017-16612 affects libXcursor prior to 1.1.15, with integer overflows that can cause heap buffer overflows when processing malicious cursor files. The issue also potentially involves the related code in cursor/xcursor.c in Wayland up to 1.14.0. The available connected documents specify the vu...

CVE-2017-7798

The CVE-2017-7798 issue is a XUL injection vulnerability in Firefox Developer Tools (style editor) caused by improper sanitization of the web page source. A malicious page could trigger arbitrary code execution via the style editor, affecting Firefox ESR versions <52.3 and Firefox

CVE-2017-7814

This CVE (CVE-2017-7814) affects Mozilla products (Firefox < 56, Firefox ESR < 52.4, Thunderbird

CVE-2018-14624

389-ds-base (LDAP directory server) vulnerable to CVE-2018-14624 in versions 1.3.7.10, 1.3.8.8 and 1.4.0.16 due to improper use of the lock for the error log during log__error_emergency() reopen. An attacker could flood a very large DN, causing slapd to crash (DoS). Connected advisories reference...

CVE-2018-5819

CVE-2018-5819 affects LibRaw prior to 0.19.1, where an issue in parse_sinar_ia() (internal/dcraw_common.cpp) can be exploited to exhaust CPU resources (denial of service). The vulnerability is documented across multiple sources linked to LibRaw versions before 0.19.1, with Debian LTS advisory DLA...

CVE-2018-6798

CVE-2018-6798 affects Perl 5.22–5.26. A crafted locale-dependent regular expression can trigger a heap-based buffer over-read, potentially leading to information disclosure. Public references in Alpine (CVE entry), Fedora advisories, and Cloud Foundry USN/Ubuntu advisories confirm Perl-based impa...

CVE-2018-8013

Apache Batik 1.x before 1.10 is vulnerable to information disclosure via deserializing a subclass of AbstractDocument, where inputStream-derived class name is used to invoke a no-arg constructor. The fix is to validate the class type before newInstance during deserialization; remediation is to up...

CVE-2019-14438

CVE-2019-14438 affects VideoLAN VLC media player 3.0.7.1 and earlier, due to a heap-based buffer over-read in xiph_PackHeaders() within modules/demux/xiph.h, exploitable via crafted .ogg files. Multiple connected advisories confirm the issue and track fixes to VLC 3.0.8 (and related package updat...

CVE-2019-5819

CVE-2019-5819 corresponds to a vulnerability in Chromium/Google Chrome's Developer Tools. The root cause is insufficient data validation in the Developer Tools before version 74.0.3729.108, allowing a local attacker to execute arbitrary code by processing a crafted string copied to the clipboard....

CVE-2020-11800

CVE-2020-11800 affects Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2, enabling remote code execution. The description indicates the issue is a remote code execution vulnerability, but the provided documents do not include a concrete root-cause analysis or a confirmed patch/version that fix...

CVE-2020-15953

LibEtPan ≤ 1.9.4 (used in MailCore 2 ≤ 0.6.3 and related products) contains a STARTTLS buffering issue that enables response injection during TLS negotiation across IMAP, SMTP, and POP3. The root cause is improper handling when a server responds with begin TLS, causing the client to read extra da...

CVE-2020-15975

CVE-2020-15975 affects Chromium/Google Chrome before 86.0.4240.75, caused by an integer overflow in the SwiftShader component that could enable remote code execution via crafted HTML. Debian/Arch advisories confirm the vulnerability in SwiftShader with the fix to version 86.0.4240.75 (or later) a...

CVE-2020-15986

CVE-2020-15986 affects Chromium's media component. An integer overflow in media before 86.0.4240.75 could enable a remote attacker to potentially cause heap corruption and arbitrary code execution. Public records in connected documents reference Chrome/Chromium updates fixing this in version 86.0...

CVE-2020-25862

CVE-2020-25862 affects Wireshark dissectors, specifically the TCP dissector. Versions impacted: 3.2.0–3.2.6, 3.0.0–3.0.13, and 2.6.0–2.6.20. Root cause: the TCP dissector could crash due to improper handling of the invalid 0xFFFF checksum in epan/dissectors/packet-tcp.c. The issue was addressed b...

CVE-2020-6386

CVE-2020-6386 is a use-after-free in Chrome’s speech processing leading to potential heap corruption when processing crafted HTML. Affected: Google Chrome prior to version 80.0.3987.116. Impact: remote code execution or instability as described in public advisories, with the issue fixed in the Ch...

CVE-2020-6544

CVE-2020-6544 affects Google Chrome (media component) with a use-after-free in media leading to potential heap corruption via a crafted HTML page. The vulnerability is exploitable remotely and, per the supplied documents, is addressed by upgrading to Chrome 84.0.4147.125 or newer. Connected advis...

CVE-2020-6547

CVE-2020-6547 affects Google Chrome/Chromium with an incorrect security UI issue in media that could allow a remote attacker to glean sensitive information via a crafted HTML page. The Debian advisory for chromium lists CVE-2020-6547 among multiple fixes and states the fix version as chromium 84....

CVE-2021-21111

CVE-2021-21111 concerns Chromium/WebUI: insufficient policy enforcement prior to 87.0.4280.141 allows a user who installs a crafted malicious extension to potentially perform a sandbox escape. Affected: Chromium-based Chrome/Chromium up to the 87.0.4280.141 release. Impact: remote code execution ...

CVE-2021-21180

CVE-2021-21180 is a use-after-free vulnerability in Google Chrome’s tab search component, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. The publicly documented impact is a remote code execution/heap corruption risk, with the vulnerability existing in C...

CVE-2021-3561

CVE-2021-3561 refers to an Out of Bounds flaw in fig2dev (version 3.2.8a). The flaw arises from a flawed bounds check in read_objects(), which could allow a crafted input to crash the application or, in some cases, cause memory corruption, impacting integrity and availability. The connected docum...

CVE-2022-23608

CVE-2022-23608 affects PJSIP/pjproject up to version 2.11.1. In a dialog set (or forking) scenario, a hash key shared by multiple UAC dialogs can be prematurely freed when a dialog is destroyed, causing the same dialog set to be registered in the hash table multiple times with different hash keys...

CVE-2022-41916

CVE-2022-41916 is a denial-of-service vulnerability in Heimdal’s PKI certificate validation (libhx509). The issue affects Heimdal versions prior to 7.7.1, including KDC via PKINIT and kinit via PKINIT, and any third-party apps using libhx509. Public documentation consistently states that upgradin...

CVE-2023-6204

CVE-2023-6204 describes an out-of-bounds read that can leak memory data into images created on the canvas element. The issue affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The available connected advisories corroborate the vulnerabilit...