CVE-2021-21182

CVE-2021-21182 affects Google Chrome/Chromium navigations: insufficient policy enforcement in navigations allows a renderer-compromised remote attacker to bypass navigation restrictions via a crafted HTML page, for Chrome/Chromium fixes before/at 89.0.4389.72. Connected advisories (Debian Arch/DS...

CVE-2021-32918

CVE-2021-32918 affects Prosody prior to 0.11.9. A default-configuration condition allows remote unauthenticated DoS via memory exhaustion when running under Lua 5.2 or Lua 5.3. The vulnerability arises from the way the server handles requests under those Lua versions, with the impact described as...

CVE-2021-3561

CVE-2021-3561 refers to an Out of Bounds flaw in fig2dev (version 3.2.8a). The flaw arises from a flawed bounds check in read_objects(), which could allow a crafted input to crash the application or, in some cases, cause memory corruption, impacting integrity and availability. The connected docum...

CVE-2022-24810

Net-snmp vulnerability CVE-2022-24810: A malformed OID in a SET to NET-SNMP’s VACM nsVacmAccessTable can cause a NULL pointer dereference. Affected are versions prior to 5.9.2; 5.9.2 contains a patch. Mitigations: upgrade to 5.9.2+ and restrict access; use strong SNMPv3 credentials and limit IP a...

CVE-2022-2869

CVE-2022-2869 affects libtiff’s tiffcrop tool, caused by a uint32_t underflow in extractContigSamples8bits that enables out-of-bounds read/write when processing a crafted TIFF file. An attacker could coerce a user to open a crafted file with tiffcrop, potentially crashing the application or enabl...

CVE-2022-46342

CVE-2022-46342 affects the X.Org X11 server (xorg-x11-server). The issue is a use-after-free in the XvdiSelectVideoNotify handler, which can lead to local privilege elevation on privileged X servers (and, per some advisories, potential remote code execution via X forwarding). Multiple advisories ...

CVE-2023-35824

CVE-2023-35824 is a Linux kernel use-after-free in the dm1105_remove path (drivers/media/pci/dm1105/dm1105.c), fixed by Linux kernel 6.3.2 (ChangeLog-6.3.2). The Astra Linux bulletin and related sources confirm the same issue affecting kernel before 6.3.2 and cite the same function/file, indicati...

CVE-2023-43655

CVE-2023-43655 affects the PHP dependency manager Composer when a user publishes a web-accessible composer.phar that can be executed as PHP and PHP is configured with register_argc_argv enabled . Multiple connected advisories confirm the vulnerability exists in Composer and describe that versions...

CVE-2023-52637

CVE-2023-52637 refers to a Linux kernel vulnerability in the j1939 subsystem where a use-after-free (UAF) could occur due to modification of jsk->filters while receiving packets and during setsockopt(SO_J1939_FILTER). The fix adds locking on jsk->sk to prevent UAF and stabilize access to fi...

CVE-2024-35789

CVE-2024-35789 – Linux kernel : Vulnerability in wifi/mac80211 VLAN handling where on moving a station out of a VLAN and deleting the VLAN, the fast_rx entry could still point to the VLAN netdev, enabling a use-after-free. The fixed behavior is to immediately call ieee80211_check_fast_rx after VL...

CVE-2024-35835

CVE-2024-35835 concerns the Linux kernel net/mlx5e subsystem, where arfs_create_groups has a double-free: if kvzalloc allocation for in fails, arfs_create_groups frees ft->g and returns an error, but arfs_create_table (the caller) then invokes mlx5e_destroy_flow_table, causing ft->g to be f...

CVE-2025-38218

CVE-2025-38218 affects the Linux kernel with f2fs: a sanity check failure in sit_bitmap_size can lead to a kernel panic during resize/mount. The issue arises when sit_i->bitmap_size is 192, making sit bitmap size 1536, but with MAIN_SEGS at 261893 the sit_blk_cnt becomes 4762; build_sit_entrie...

CVE-2013-7345

CVE-2013-7345 affects PHP’s fileinfo/awk rule processing. The BEGIN regular expression detector in magic/Magdir/commands can backtrack when parsing an ASCII file with many newline characters, leading to CPU-denial of service. Connected advisories confirm the vulnerability impact was validated acr...

CVE-2015-4473

CVE-2015-4473 is a memory-safety vulnerability in Mozilla Firefox’s browser engine (affecting Firefox before 40.0 and ESR 38.x before 38.2) that could allow remote code execution or a denial of service via unspecified vectors. Publicly reported across multiple vendors’ advisories, including IBM p...

CVE-2017-3291

CVE-2017-3291 affects the MySQL Server packaging component in Oracle MySQL. Affected are: 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The entry describes a difficult-to-exploit vulnerability that requires logon to the infrastructure where MySQL Server executes and user interac...

CVE-2017-5373

Summary (CVE-2017-5373) Memory-safety bugs were reported in Firefox 50.1/ESR 45.6 and affect Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-7814

This CVE (CVE-2017-7814) affects Mozilla products (Firefox < 56, Firefox ESR < 52.4, Thunderbird

CVE-2017-9503

Technical details about CVE-2017-9503 are not publicly provided in the connected documents. Please monitor for updates.

CVE-2018-12022

CVE-2018-12022 affects FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (globally or for a property) and the service classpath contains the Jodd‑db jar (for Jodd DB access) with an LDAP service available, an attacker can trigger remote code executio...

CVE-2018-15127

LibVNCServer contains a heap out-of-bounds write vulnerability in the server code of the File Transfer extension, enabling remote code execution. Multiple connected advisories confirm CVE-2018-15127 and note affected versions (LibVNCServer prior to the patched release, e.g., 0.9.12 in some adviso...

CVE-2018-8013

Apache Batik 1.x before 1.10 is vulnerable to information disclosure via deserializing a subclass of AbstractDocument, where inputStream-derived class name is used to invoke a no-arg constructor. The fix is to validate the class type before newInstance during deserialization; remediation is to up...

CVE-2019-18421

CVE-2019-18421 affects the Xen hypervisor on x86 PV guests. Root cause: restartable PV type changes with recursive pagetable promotions/demotions contain races that can lead to incorrect type counts, enabling a PV guest to gain host privileges. Impact: local privilege escalation to host OS on all...

CVE-2019-19450

CVE-2019-19450 affects the Python library python-reportlab (paraparser.py). A crafted XML document can cause remote code execution because start_unichar evaluates untrusted input in a element. Impact is high (as per CVSS in the entry). Remediation is to upgrade to a version where the issue is fi...

CVE-2019-20171

CVE-2019-20171 affects GPAC versions 0.5.2 and 0.9.0-development-20191109, with memory leaks identified in metx_New (isomedia/box_code_base.c) and abst_Read (isomedia/box_code_adobe.c). This vulnerability is evidenced in multiple sources (NVD entry and Debian/MAGEIA advisories) and is part of a b...

CVE-2020-12829

In QEMU

CVE-2020-14398

CVE-2020-14398 affects LibVNCServer before 0.9.13. An improperly closed TCP connection can cause an infinite loop in libvncclient/sockets.c. Several advisories (EulerOS, SUSE, Red Hat-related Nessus plugins) reference updates to LibVNCServer 0.9.13+ as the fix. Affected products include various L...

CVE-2020-24368

Summary: CVE-2020-24368 affects Icinga Web 2 (Icinga Web2) versions 2.0.0–2.6.4, 2.7.4 and 2.8.2, via a directory traversal vulnerability that allows access to arbitrary files readable by the web process. The issue is fixed in the same product series at versions 2.6.4, 2.7.4 and 2.8.2. Impact (as...

CVE-2020-25713

CVE-2020-25713 affects the Raptor RDF libraries (raptor2) with a flaw in raptor_xml_writer_start_element_common: a malformed input file can trigger an out-of-bounds array access, causing a segfault. Public sources (Arch Linux ASA-202011-20) describe this alongside CVE-2017-18926 as part of raptor...

CVE-2020-26215

CVE-2020-26215 affects Jupyter Notebook up to version 6.1.4, which is vulnerable to an open redirect via a specially crafted link to a notebook server that redirects the user to a spoofed website. The issue enables phishing-like redirection to arbitrary websites on the public internet. The vulner...

CVE-2020-4032

CVE-2020-4032 affects FreeRDP prior to 2.1.2, where an integer casting vulnerability occurs in update_recv_secondary_order. All clients with +glyph-cache or /relax-order-checks are affected. The issue is fixed in version 2.1.2. The connected sources consistently describe this as a vulnerability i...

CVE-2020-6520

CVE-2020-6520: A heap buffer overflow in Skia used by Google Chrome prior to version 84.0.4147.89 allowed remote exploitation via a crafted HTML page (heap corruption). Multiple connected sources confirm the issue resides in Skia used by Chrome/Chromium and the fix was delivered via Chrome/Chromi...

CVE-2020-6562

CVE-2020-6562 affects Blink in Google Chrome; root cause is insufficient policy enforcement. A crafted HTML page could leak cross-origin data. Affected: Chrome before 85.0.4183.83. Fix: update to 85.0.4183.83 or newer (as per connected advisories).

CVE-2021-33038

CVE-2021-33038 affects HyperKitty prior to 1.3.5: when importing a private mailing-list archive via management/commands/hyperkitty_import.py, archives are publicly visible during the import, potentially exposing sensitive information. Documented in multiple advisories; affected software is HyperK...

CVE-2021-3667

CVE-2021-3667 affects libvirt, in particular the virStoragePoolLookupByTargetPath API where a locked virStoragePoolObj is not released on ACL permission failure. This can let clients with limited ACLs on the read-write socket acquire the lock and cause denial of service to storage pool/volume API...

CVE-2022-26354

CVE-2022-26354 affects QEMU’s vhost-vsock device. The flaw leaks memory because, on error, an invalid element is not detached from the virtqueue before freeing memory, leading to memory leakage and potentially other unintended behavior. Affected are QEMU versions up to 6.2.0. Connected advisories...

CVE-2022-3521

CVE-2022-3521 is a race-condition vulnerability in the Linux Kernel KCM subsystem (function kcm_tx_work in net/kcm/kcmsock.c). The issue can allow a local attacker to trigger a crash via race conditions in the KCM path. Technical details in connected sources confirm the affected component and roo...

CVE-2022-3597

Technical details beyond the initial description are not provided in the supplied documents. Monitor for updates.

CVE-2022-46344

CVE-2022-46344 affects X.Org X11-server (XIChangeProperty). The description in the CVE entry notes an out-of-bounds memory access in the XIChangeProperty handler, enabling potential local privilege elevation on privileged X servers and remote code execution for ssh X forwarding sessions. Connecte...

CVE-2023-2722

CVE-2023-2722 describes a use-after-free in Google Chrome’s Autofill UI on Android, prior to 113.0.5672.126, enabling heap corruption via a crafted HTML page. The vulnerability is tied to the Chromium Autofill UI implementation and has been classified as High severity. Public sources indicate the...

CVE-2023-52757

CVE-2023-52757 : Linux kernel SMB client deadlock fix. The issue arose when releasing mids under server->mid_lock could lead to a deadlock with cifs_tcp_ses_lock and smb2_find_smb_tcon if mids were released without proper references. The patch removes an unnecessary spinlock in release_mid() c...

CVE-2024-26689

CVE-2024-26689 affects the Linux kernel via the Ceph subsystem: in fs/ceph/caps.c, encode_cap_msg() previously could perform a use-after-free due to a race between refcount increment and free in arg->xattr_buf handling. The race around ceph_buffer_get/ceph_buffer_put(ci->i_xattrs.blob) allo...

CVE-2024-26744

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srpt_service_guid parameter Make loading ib_srpt with this parameter set work. The current behavior isthat setting that parameter while loading the ib_srpt kernel moduletriggers the following ker...

CVE-2024-26855

CVE-2024-26855 – Linux kernel (net/ice) : The vulnerability is a NULL pointer dereference in ice_bridge_setlink(). If nlmsg_find_attr() returns NULL, br_spec may be dereferenced during nla_for_each_nested(), causing a crash/local impact. The fix adds an explicit check that br_spec is not NULL bef...

CVE-2024-35958

CVE-2024-35958 (Linux kernel, net: ena) fixes an incorrect descriptor free behavior in ENA TX queues. There are two queue types: (1) TX packets from the network stack and (2) TX packets redirected/forwarded by XDP. The bug caused ena_free_tx_bufs() to free descriptors assuming the first category,...

CVE-2014-1943

CVE-2014-1943 affects the file(1) utility and its libmagic component. A crafted indirect offset value in the file(1) magic can cause context-dependent attackers to trigger infinite recursion, CPU exhaustion, and a crash, i.e., denial of service. The vulnerability is described as applicable to fil...

CVE-2014-4943

CVE-2014-4943 affects the Linux kernel up to 3.15.6, specifically the PPPoL2TP feature in net/l2tp/l2tp_ppp.c. The vulnerability arises from data-structure differences between an l2tp socket and an inet socket, enabling local privilege escalation. Public details in connected sources include PoC/e...

CVE-2014-9016

CVE-2014-9016 affects Drupal 7.x prior to 7.34 and the Secure Password Hashes (phpass) module 6.x-2.x prior to 6.x-2.1. The issue is a denial-of-service condition caused by the password hashing API, where a crafted request can exhaust CPU and memory. Remediation is to update to Drupal 7.34+ and p...

CVE-2017-10114

CVE-2017-10114 affects the Java SE/JavaFX component; specifically Java SE 7u141 and 8u131. The vulnerability is described as difficult to exploit, requiring network access via multiple protocols and user interaction, with potential takeover of Java SE and possible impact on other products relying...

CVE-2017-3244

CVE-2017-3244 affects Oracle MySQL Server (subcomponent: Server: DML). Affected versions: 5.5.53 and earlier, 5.6.34 and earlier, 5.7.16 and earlier. Description from connected advisory confirms an easily exploitable vulnerability that allows a low-privileged attacker with network access via mult...

CVE-2017-5402

CVE-2017-5402 is a use-after-free in FontFace event handling that can crash Firefox/Thunderbird when a FontFace object is destroyed but events are fired. Affected products and versions include Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird