CVE-2023-6204

CVE-2023-6204 describes an out-of-bounds read that can leak memory data into images created on the canvas element. The issue affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The available connected advisories corroborate the vulnerabilit...

CVE-2014-8161

CVE-2014-8161 affects PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1. A remote authenticated user can obtain sensitive column values by triggering a constraint violation and reading the error message. Technical details across connect...

CVE-2015-1239

CVE-2015-1239 is a vulnerability in OpenJPEG (used by PDFium in Google Chrome) where a double free in j2k_read_ppm_v3 can cause a remote-denial of service (process crash) via a crafted PDF. Affected software is OpenJPEG prior to r2997; impact is crash/DoS with no confidentiality or integrity loss...

CVE-2015-5351

CVE-2015-5351 affects Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2. The issue lies in the Manager and Host Manager applications, which establish sessions and send CSRF tokens for arbitrary new requests, allowing remote attackers to bypass CSRF protections by using a...

CVE-2016-3710

CVE-2016-3710 : A bounds-checking flaw in QEMU’s VGA module (VBE read/write via I/O ports) allows a privileged guest to modify banked video memory and execute arbitrary code on the host with QEMU process privileges. Root cause: out-of-bounds read/write in VGA bank access. Impact: potential host c...

CVE-2017-6362

CVE-2017-6362 is a double-free in libgd2’s gdImagePngPtr() prior to 2.2.5, enabling remote denial of service via vectors related to a palette with no colors. Debs/Mageia advisories report the fix to libgd2 2.2.5; some sources note potential arbitrary code execution on crafted input. No exploit de...

CVE-2018-10538

The CVE-2018-10538 issue affects WavPack up to version 5.1.0 for WAV input, where ParseRiffHeaderConfig in riff.c may allocate insufficient memory due to not validating unknown chunk sizes and a vulnerable bytes_to_copy/malloc path. This can cause out-of-bounds writes and memory allocation errors...

CVE-2018-19210

CVE-2018-19210 affects LibTIFF 4.0.9, with a NULL pointer dereference in TIFFWriteDirectorySec (tif_dirwrite.c) that leads to a denial of service when processing a crafted TIFF file. The connected IBM/Red Hat context confirms the CVE entry and its vulnerability description, but the provided docum...

CVE-2018-19477

CVE-2018-19477 relates to Artifex Ghostscript prior to 9.26, where a JBIG2Decode type confusion in psi/zfjbig2.c allows remote attackers to bypass access restrictions by sending specially crafted input. Public disclosures in multiple sources (e.g., Debian/Red Hat advisories, IBM PowerKVM bulletin...

CVE-2018-6798

CVE-2018-6798 affects Perl 5.22–5.26. A crafted locale-dependent regular expression can trigger a heap-based buffer over-read, potentially leading to information disclosure. Public references in Alpine (CVE entry), Fedora advisories, and Cloud Foundry USN/Ubuntu advisories confirm Perl-based impa...

CVE-2019-11338

CVE-2019-11338 affects FFmpeg/libav (FFmpeg 3.4 and 4.1.2) where libavcodec/hevcdec.c mishandles detection of duplicate first slices in crafted HEVC data. This can cause a NULL pointer dereference and out-of-bounds access, leading to a denial of service and possibly other impact. Public advisorie...

CVE-2019-11356

CVE-2019-11356 affects Cyrus IMAP Server (cyrus-imapd) via the CalDAV feature in httpd. The root cause is a buffer overflow triggered by a long iCalendar property name in CalDAV requests, enabling remote code execution. Impact is high (per CVSS) with potential remote compromise, depending on the ...

CVE-2019-15523

CVE-2019-15523 affects LINBIT csync2 up to version 2.0. The issue stems from not correctly checking the GNUTLS_E_WARNING_ALERT_RECEIVED return value from gnutls_handshake() and failing to call it again as required by the API design, which may lead to improper TLS handling. Publicly documented imp...

CVE-2020-13253

CVE-2020-13253 affects QEMU 4.2.0, where sd_wp_addr in hw/sd/sd.c uses an unvalidated address, causing an out-of-bounds read during sdhci_write() operations. This can allow a guest OS user to crash the QEMU process. The provided documents describe the vulnerability and impact but do not specify a...

CVE-2020-16002

CVE-2020-16002 is a use-after-free in PDFium leveraged via crafted PDFs in Google Chrome (before 86.0.4240.111). The vulnerability affects Chrome’s PDF rendering path (PDFium) and could allow a remote attacker to trigger heap corruption, with the potential for arbitrary impact as described in the...

CVE-2020-16043

CVE-2020-16043 affects Chromium-based browsers (e.g., Chrome) before version 87.0.4280.141 . The issue is an insufficient data validation in networking that could allow a remote attacker to bypass discretionary access control via malicious network traffic. Impact per sources: remote code/impact r...

CVE-2020-22031

CVE-2020-22031 is a heap-based Buffer Overflow in FFmpeg 4.2 specifically at libavfilter/vf_w3fdif.c (filter16_complex_low) that may cause memory corruption and other potential consequences. Public advisories (Ubuntu/Debian) confirm FFmpeg fixes are available via package updates; remediation is t...

CVE-2020-6533

CVE-2020-6533 affects Google Chrome’s V8 engine. The Debian security advisory and Debian tracker describe a Type Confusion in V8 prior to Chrome 84.0.4147.89, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. The issue was addressed in Chrome 84.0.4147.89 (or...

CVE-2021-21165

CVE-2021-21165: Data indicates a heap/object lifecycle issue in Chrome/Chromium audio paths before 89.0.4389.72, enabling potential remote arbitrary code execution. The Astra/Audit/Debian entries confirm an audio component flaw in Chromium with the same version bound. Affected product: Chromium b...

CVE-2021-21179

CVE-2021-21179 affects Google Chrome/Chromium, specifically a use-after-free in the Network Internals component on Linux prior to version 89.0.4389.72, enabling potential heap corruption via a crafted HTML page. A patch is available by upgrading to Chrome/Chromium 89.0.4389.72 or newer (see refer...

CVE-2021-21211

CVE-2021-21211 refers to an insecure navigation implementation in Google Chrome on iOS before 90.0.4430.72, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The connected sources confirm the same vulnerability description across multiple trackers (e.g., Debian securit...

CVE-2021-32917

Prosody (before 0.11.9) is affected by CVE-2021-32917 due to the proxy65 component allowing open access by default, enabling unrestricted use of the server’s bandwidth when mod_proxy65 is enabled. The issue arises even if no local XMPP accounts exist, exposing potential abuse of resources. Public...

CVE-2021-32919

Prosody (XMPP server) before 0.11.9 is affected by CVE-2021-32919 due to the undocumented dialback_without_dialback option in mod_dialback. The feature allows an experimental server-to-server authentication path that does not correctly authenticate remote certificates, enabling a remote server to...

CVE-2022-23520

The CVE concerns ruby-rails-html-sanitizer used by Rails apps. Affected when developers override Rails::Html::Sanitizer’s allowed tags to include both "select" and "style" elements, enabling an XSS payload. Root cause is an incomplete fix of CVE-2022-32209; the issue is fixed in version 1.4.4. Im...

CVE-2023-2460

CVE-2023-2460 is a Chromium/Chrome family issue: insufficient validation of untrusted input in Extensions could let a user-installed malicious extension bypass file access checks via a crafted HTML page. The vulnerability affects Google Chrome (and Chromium-based builds) up to version 113.0.5672....

CVE-2023-2723

CVE-2023-2723 relates to a use-after-free in Chrome/Chromium DevTools prior to 113.0.5672.126. A remote attacker who already compromised the renderer could trigger heap corruption via a crafted HTML page. The vulnerability has a high security impact (C/H/I/A) and a network attack vector with user...

CVE-2023-4354

CVE-2023-4354 describes a heap buffer overflow in Skia used by Google Chrome prior to 116.0.5845.96. The vulnerability could allow a remote attacker who has already compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Public references in the connected ...

CVE-2024-35822

The connected documents confirm CVE-2024-35822 affects the Linux kernel USB gadget mass storage path (usb_udc) where a thread may disable an endpoint while the main thread queues a request. Root cause: a warning in usb_ep_queue() was triggered instead of a functional failure. Fix: replacing WARN_...

CVE-2024-36933

CVE-2024-36933 relates to the Linux kernel. The issue arises in nsh_gso_segment() when handling GSO packets with an outer header (example: ETH_P_8021AD) that NSH encapsulates. The inner protocol (e.g., NSH over Ethernet) can cause the outer header to be stripped or mispositioned due to misrestora...

CVE-2012-3489

CVE-2012-3489 affects PostgreSQL’s core server libxml2 support. The issue arises in the libxml2-based parsing path where the xml_parse function can be manipulated via an XML value that references a DTD or an external entity, enabling remote authenticated users to determine the existence of arbitr...

CVE-2015-3143

The connected documents provide concrete details for CVE-2015-3143: in curl and libcurl, versions 7.10.6 through 7.41.0 failed to properly re-use NTLM connections, enabling a remote attacker to connect as another user via an unauthenticated request (NTLM/Negotiate authentication interaction). Thi...

CVE-2015-4335

CVE-2015-4335: Redis EVAL Lua sandbox escape . The vulnerability affects Redis up to 2.8.21 and 3.x up to 3.0.2, where remote attackers could abuse the EVAL Lua command to execute arbitrary Lua bytecode, potentially escaping the sandbox and running code with Redis process privileges. Debian’s adv...

CVE-2015-5195

CVE-2015-5195 affects ntpd via ntp_openssl.m4; a crafted statistics or filegen configuration command, if not excluded at compile time, can cause a denial of service with a segmentation fault. Affected product is ntpd/NTP; root cause is an issue in configuration handling when commands are processe...

CVE-2017-14132

CVE-2017-14132 affects JasPer 1.900.8–1.900.31 and 2.0.0–2.0.16. A crafted image can trigger a heap-based buffer over-read in the function jas_image_ishomosamp (libjasper/base/jas_image.c), allowing remote attackers to cause an application crash (denial of service). The vulnerability is triggered...

CVE-2017-3243

CVE-2017-3243 affects Oracle MySQL’s MySQL Server component (Server: Charsets). Affected versions are 5.5.53 and earlier. The vulnerability is described as difficult to exploit but allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (compl...

CVE-2018-20150

CVE-2018-20150 affects WordPress before 4.9.9 and 5.x before 5.0.1, where crafted URLs could trigger cross-site scripting in certain plugin use cases. Root cause involves payloads in URLs that bypass filtering for some plugin scenarios. Impact is XSS with potential exposure of data or session con...

CVE-2018-20153

CVE-2018-20153 affects WordPress versions before 4.9.9 and 5.x before 5.0.1, where contributors could modify new comments made by users with higher privileges, potentially enabling XSS. Mitigations exist in WordPress 4.9.9+ and 5.0.1+, as referenced in Debian security advisories (DSA-4401-1) and ...

CVE-2018-5168

CVE-2018-5168 is a vulnerability in Thunderbird and Firefox where an attacker can bypass permission checks by manipulating the baseURI of the theme element, enabling a user interaction-free installation of a theme that could contain offensive images. Affected products and versions per the records...

CVE-2018-6555

CVE-2018-6555 is a Linux kernel local use-after-free via the irda_setsockopt path in irda/af_irda.c (and later in staging/irda), potentially causing memory corruption, denial of service, or a system crash. Affected trees reference IRDA socket usage as the attack vector. The vulnerability is addre...

CVE-2019-11506

CVE-2019-11506 affects GraphicsMagick versions 1.3.30 through 1.4 snapshot-20190403 Q8, where a heap-based buffer overflow occurs in WriteMATLABImage (coders/mat.c) related to ExportRedQuantumType in magick/export.c. The consequence is denial of service and possibly other impact via a crafted ima...

CVE-2019-18849

CVE-2019-18849 affects tnef up to version 1.4.18. The vulnerability is a heap-based buffer over-read involving strdup in handling crafted winmail.dat attachments, which could allow an attacker to write to the victim's .ssh/authorized_keys. Multiple advisories confirm the fix in tnef 1.4.18 across...

CVE-2019-19318

The CVE-2019-19318 issue affects Linux kernel 5.3.11. Root cause: mounting a crafted btrfs image twice can trigger a use-after-free in rwsem_down_write_slowpath because rwsem_can_spin_on_owner’s rwsem_owner_flags returns an already freed pointer. Documented impact per sources indicates an availab...

CVE-2019-9705

CVE-2019-9705 affects Vixie Cron prior to Debian 3.0pl1-133, allowing local users to cause memory DoS by submitting an unlimited number of crontab lines. Connected sources confirm the issue is a local denial of service due to memory consumption from large crontabs. The Broadcom advisory re-states...

CVE-2020-12862

CVE-2020-12862 affects the SANE backends project prior to version 1.0.30. The issue is an out-of-bounds read in the SANE backends that may allow a malicious device on the same local network to read memory content, including ASLR offsets, exposing partial confidentiality information. Exploitation ...

CVE-2020-17490

CVE-2020-17490 affects SaltStack Salt (TLS module) up to version 3002, where the TLS execution module creates certificates with weak file permissions. The root cause is improper permissions on certificate files, potentially exposing private keys and enabling unintended access to sensitive materia...

CVE-2020-6540

CVE-2020-6540 is a buffer overflow in Skia used by Google Chrome, prior to 84.0.4147.105, allowing remote heap corruption via a crafted HTML page. The Debian security advisory DSA-4824-1 lists CVE-2020-6540 among fixed issues and recommends upgrading Chromium to at least 87.0.4280.88-0.4~deb10u1 ...

CVE-2020-6566

CVE-2020-6566 affects Google Chrome/Chromium prior to 85.0.4183.83, where insufficient policy enforcement in media could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is evidenced in multiple advisories and CVE trackers, with Debian/ Fedora updates indicatin...

CVE-2021-21173

CVE-2021-21173 describes a side-channel information leakage in Google Chrome/Chromium’s Network Internals, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected component: Network Internals in Chromium before version 89.0.4389.72. Root cause: side-channel informat...

CVE-2021-21175

In Google Chrome, CVE-2021-21175 corresponds to an inappropriate implementation in the Site Isolation feature prior to 89.0.4389.72. The issue allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected product: Google Chrome (Site Isolation). Root cause: improper imp...

CVE-2021-21178

CVE-2021-21178 refers to an inappropriate implementation in the Chromium/Google Chrome compositor on Linux and Windows, allowing a remote attacker to spoof the Omnibox via a crafted HTML page. Affected: Chromium/Chrome prior to version 89.0.4389.72. Impact: content spoofing of the URL bar. Root c...