CVE-2020-2933

CVE-2020-2933 is a DoS vulnerability in Oracle MySQL Connector/J. Affected are MySQL Connector/J versions 5.1.48 and earlier. Debian/DSA and CNVD entries reference a fix path: upgrade to 5.1.49 (or later) to remediate. The public docs do not provide the exact root cause or exploitation details be...

CVE-2021-37979

CVE-2021-37979 is a Chrome/Chromium-related vulnerability describing a heap buffer overflow in the WebRTC component of the Chromium engine (before version 94.0.4606.81). The issue could allow a remote attacker to trigger heap corruption by convincing a user to visit a malicious page containing cr...

CVE-2021-43300

CVE-2021-43300 describes a stack-buffer overflow in the PJSUA API’s pjsua_recorder_create due to an attacker-controlled filename being copied into a fixed-size stack buffer without size validation. The vulnerability is present in the embedded pjproject used by Ring. Public advisories (Debian/Ubun...

CVE-2021-45930

CVE-2021-45930 affects Qt’s SVG rendering: QtSvg in Qt 5.0.0–5.15.2 and 6.0.0–6.2.1 contains an out-of-bounds write in QtPrivate::QCommonArrayOpsQPainterPath::Element ::growAppend (triggered by QPainterPath::addPath and QPathClipper::intersect). Connected advisories reference the same issue acros...

CVE-2022-1419

CVE-2022-1419 affects the Linux kernel DRM/vgem path: ioctl DRM_IOCTL_MODE_DESTROY_DUMB can concurrently reduce the refcount of drm_vgem_gem_object created by vgem_gem_dumb_create, while that create path may access the freed object. The public description for this CVE notes that on 32-bit systems...

CVE-2022-3521

CVE-2022-3521 is a race-condition vulnerability in the Linux Kernel KCM subsystem (function kcm_tx_work in net/kcm/kcmsock.c). The issue can allow a local attacker to trigger a crash via race conditions in the KCM path. Technical details in connected sources confirm the affected component and roo...

CVE-2022-45685

CVE-2022-45685 affects the jettison library (libjettison-java) used in Java-based JSON parsing. The root cause is a stack overflow when parsing crafted JSON data, leading to Denial of Service (DoS). The NVD/CVE entries rate CVSS v3.1 at 7.5 (HIGH) with network access and no user interaction. Publ...

CVE-2023-43655

CVE-2023-43655 affects the PHP dependency manager Composer when a user publishes a web-accessible composer.phar that can be executed as PHP and PHP is configured with register_argc_argv enabled . Multiple connected advisories confirm the vulnerability exists in Composer and describe that versions...

CVE-2023-4908

CVE-2023-4908: In Google Chrome/Chromium, an inappropriate implementation in Picture-in-Picture allowed a remote attacker to spoof the security UI via a crafted HTML page. Affected versions are prior to 117.0.5938.62 (Chrome/Chromium). The issue is rated Low severity by the Chromium/Chrome ecosys...

CVE-2025-64512

pdfminer.six contains an insecure deserialization vulnerability in the CMap loading path. The library uses pickle.loads() to deserialize CMap cache files; a malicious PDF can cause execution of code by pointing to a crafted .pickle.gz in the cmap directory. Affected releases are before the upstre...

CVE-2012-0247

CVE-2012-0247 affects ImageMagick 6.7.5-7 and earlier. The vulnerability allows remote attackers to cause memory corruption and potentially execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0. Connected advisories document that patches exist acros...

CVE-2014-6601

CVE-2014-6601 is described in connected advisories as an unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 (Hotspot) that allows remote attackers to affect confidentiality, integrity, and availability. The vectors are not publicly detailed in the provided documents. No explicit rem...

CVE-2015-4792

CVE-2015-4792 is an unspecified remote-authenticated vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier that can affect availability via unknown vectors related to Server: Partition. Connected advisories confirm this CVE is among those addressed by MariaDB/MySQL update...

CVE-2016-3710

CVE-2016-3710 : A bounds-checking flaw in QEMU’s VGA module (VBE read/write via I/O ports) allows a privileged guest to modify banked video memory and execute arbitrary code on the host with QEMU process privileges. Root cause: out-of-bounds read/write in VGA bank access. Impact: potential host c...

CVE-2017-13089

Summary: CVE-2017-13089 affects wget prior to 1.19.2. The issue is a stack-based buffer overflow in the HTTP protocol handling for chunked responses, caused by parsing chunk lengths with strtol() without enforcing non-negativity, leading to an attacker-controlled length passed to fd_read(). A rel...

CVE-2017-14632

Xiph.Org libvorbis 1.3.5 is vulnerable to CVE-2017-14632: remote code execution via freeing uninitialized memory in vorbis_analysis_headerout() when vi->channels

CVE-2017-3244

CVE-2017-3244 affects Oracle MySQL Server (subcomponent: Server: DML). Affected versions: 5.5.53 and earlier, 5.6.34 and earlier, 5.7.16 and earlier. Description from connected advisory confirms an easily exploitable vulnerability that allows a low-privileged attacker with network access via mult...

CVE-2017-5447

CVE-2017-5447 is an out-of-bounds read in glyph widths processing during text layout that can cause a crash and potentially expose memory. Affected products include Mozilla Thunderbird (<52.1) and Mozilla Firefox/Firefox ESR (ESR <52.1; Firefox

CVE-2017-6362

CVE-2017-6362 is a double-free in libgd2’s gdImagePngPtr() prior to 2.2.5, enabling remote denial of service via vectors related to a palette with no colors. Debs/Mageia advisories report the fix to libgd2 2.2.5; some sources note potential arbitrary code execution on crafted input. No exploit de...

CVE-2017-6836

The CVE-2017-6836 entry concerns the Audio File Library (audiofile) with affected versions up to 0.3.6. The vulnerability is a heap-based buffer overflow in Expand3To4Module::run (SimpleModule.h), which can cause a denial of service (crash) via a crafted audio file. Public advisories confirm this...

CVE-2018-10195

CVE-2018-10195 affects lrzsz prior to 0.12.21~rc. The issue stems from an incorrect length check in zsdata that can cause a size_t wraparound, potentially leaking information to the receiving side. Public sources consistently describe an information leak risk and, in distributions, a fix/update i...

CVE-2018-12264

Exiv2 0.26 contains an integer overflow in LoaderTiff::getData() (preview.cpp), leading to an out-of-bounds read in Exiv2::ValueType::setDataArea (value.hpp). Exploitation could cause crashes or memory corruption. The vulnerability is addressed in later Exiv2 revisions (e.g., upgrade to the 0.27....

CVE-2018-17000

CVE-2018-17000 is a vulnerability in LibTIFF/TIFF handling where a NULL pointer dereference in tif_unix.c (TIFFmemcmp) can be triggered by a crafted TIFF file, potentially via TIFF-writing utilities, yielding a denial of service. Public details in connected Debian advisory confirm the issue affec...

CVE-2018-20150

CVE-2018-20150 affects WordPress before 4.9.9 and 5.x before 5.0.1, where crafted URLs could trigger cross-site scripting in certain plugin use cases. Root cause involves payloads in URLs that bypass filtering for some plugin scenarios. Impact is XSS with potential exposure of data or session con...

CVE-2018-20570

CVE-2018-20570 affects JasPer 2.0.14: jp2_encode in libjasper jp2_enc.c experiences a heap-based buffer over-read, with potential crash/denial of service (CVSS3: high availability impact; network exposure). Connected sources corroborate the vulnerability and list unpatched/affected environments i...

CVE-2019-12594

CVE-2019-12594 affects DOSBox via insufficient access controls, allowing a program running in DOSBox to access host resources (e.g., /proc) when /proc is mounted. The root cause is a missing permission system that could enable arbitrary code execution in certain contexts. Multiple distributions h...

CVE-2019-18388

CVE-2019-18388 affects virglrenderer, with a NULL pointer dereference in vrend_renderer.c up to version 0.8.0. The flaw allows a local guest OS user to trigger a denial of service via malformed VRAM commands. Multiple connected advisories (Debian DLA-3232, openSUSE SUSE-SU updates, SUSE openSUSE-...

CVE-2019-18390

CVE-2019-18390 concerns virglrenderer with an out-of-bounds read in vrend_blit_need_swizzle (vrend_renderer.c) affecting versions up to 0.8.0. The vulnerability enables a DoS from a guest OS via VIRGL_CCMD_BLIT commands, with local attack vector and partial confidentiality/availability impact per...

CVE-2020-14152

The CVE-2020-14152 issue affects libjpeg (IJG JPEG): in djpeg, jpeg_mem_available() does not honor the max_memory_to_use setting, which can lead to excessive memory usage. Connected documents corroborate the same description (e.g., Azure Linux/fltk advisory references) for versions prior to 9d. N...

CVE-2020-15562

CVE-2020-15562 affects Roundcube Webmail and enables cross-site scripting (XSS) via a crafted HTML e-mail that uses the xmlns attribute of a HEAD element when an SVG is present. Affected releases include Roundcube Webmail < 1.2.11, 1.3.x < 1.3.14, and 1.4.x

CVE-2020-15977

The CVE entry CVE-2020-15977 describes an insufficient data validation issue in the dialogs component of the Chromium browser prior to 86.0.4240.75, enabling a remote attacker to potentially disclose data from disk via a crafted HTML page. Connected advisories (e.g., Arch Linux ASA-202010-1) enum...

CVE-2020-25032

CVE-2020-25032 affects Flask-CORS (CORS Middleware for Flask) versions before 3.0.9. The issue allows directory traversal via /../ sequences because resource matching does not canonicalize pathnames, potentially exposing private files. Public sources in the connected documents confirm affected pr...

CVE-2020-28049

CVE-2020-28049 affects SDDM prior to 0.19.0. A race during Xauthority file creation allows a local unprivileged user to connect to the X server for a brief window, exposing X display contents and potentially keystrokes or clipboard data. Root cause: race condition in Xauthority handling when star...

CVE-2020-6400

CVE-2020-6400 refers to an inappropriate CORS implementation in Google Chrome prior to 80.0.3987.87, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability affects Chrome’s cross-origin resource sharing handling and is addressed by updating to Chrome 80.0....

CVE-2020-6548

CVE-2020-6548: Heap buffer overflow in Skia within Google Chrome prior to 84.0.4147.125. A remote attacker who gains control of the renderer process could exploit heap corruption via a crafted HTML page. Affected product: Chrome/Chromium with Skia integration. Impact: potential arbitrary code exe...

CVE-2021-28658

Django vulnerability CVE-2021-28658 affects MultiPartParser in Django 2.2 (before 2.2.20), 3.0 (before 3.0.14), and 3.1 (before 3.1.8). A crafted filename in an uploaded file could trigger directory traversal; built-in upload handlers are not affected. Remediation: upgrade to the fixed releases (...

CVE-2021-32743

CVE-2021-32743 affects Icinga 2 where credentials for external services can be exposed via the API to authenticated users for certain objects. Specifically, in versions prior to 2.11.10 and 2.12.0–2.12.4, the API could disclose passwords for databases (IdoMysqlConnection, IdoPgsqlConnection), Red...

CVE-2023-3111

CVE-2023-3111 is a use-after-free in the Btrfs filesystem driver (fs/btrfs/relocation.c, function prepare_to_relocate). The flaw can be triggered by calling btrfs_ioctl_balance() before btrfs_ioctl_defrag(), leading to potential kernel memory corruption. Public documentation in connected advisori...

CVE-2023-52637

CVE-2023-52637 refers to a Linux kernel vulnerability in the j1939 subsystem where a use-after-free (UAF) could occur due to modification of jsk->filters while receiving packets and during setsockopt(SO_J1939_FILTER). The fix adds locking on jsk->sk to prevent UAF and stabilize access to fi...

CVE-2024-26744

CVE-2024-26744: In the Linux kernel, loading the ib_srpt module with srpt_service_guid can trigger a NULL pointer dereference crash. The vulnerability stems from loadingib_srpt with the srpt_service_guid parameter, which previously caused a kernel BUG: NULL pointer dereference when parsing argume...

CVE-2024-26855

CVE-2024-26855 – Linux kernel (net/ice) : The vulnerability is a NULL pointer dereference in ice_bridge_setlink(). If nlmsg_find_attr() returns NULL, br_spec may be dereferenced during nla_for_each_nested(), causing a crash/local impact. The fix adds an explicit check that br_spec is not NULL bef...

CVE-2013-4168

CVE-2013-4168 is a documented cross-site scripting (XSS) vulnerability in SmokePing 2.6.9, specifically affecting the start and end time fields. The issue is described as XSS in these input fields, with CVSS scores provided (NVD CVSSv2 base 4.3, CVSSv3.1 base 6.1) indicating a network-based entry...

CVE-2015-3214

CVE-2015-3214 affects QEMU prior to 2.3.1 (pit_ioport_read in i8254.c) and Linux kernel prior to 2.6.33. The flaw does not distinguish between read and write lengths, potentially allowing a privileged guest user (with PIT emulation enabled) to trigger an invalid index and cause arbitrary host cod...

CVE-2016-9895

CVE-2016-9895 affects Mozilla Firefox (<50.1) and Firefox ESR (<45.6) and Thunderbird (

CVE-2017-17787

CVE-2017-17787 affects GIMP 2.8.22, describing a heap-based buffer over-read in read_creator_block within plug-ins/common/file-psp.c. The available connected documents show multiple distributions documenting this issue and note that a security update exists (e.g., openSUSE security update openSUS...

CVE-2018-14654

CVE-2018-14654 affects GlusterFS (up to 4.1.x) via the GF_XATTROP_ENTRY_IN_KEY path in the translator used during mounting, allowing a remote attacker with access to mounted volumes to create arbitrary, empty files on the server. Exploitation details are not provided in the given documents. Remed...

CVE-2018-15908

Artifex Ghostscript 9.23, prior to 2018-08-23, is affected by a restriction-bypass in .tempfile that allows crafted PostScript files to bypass safety checks and write files. Impact is stated as enabling file writes via PostScript, with broader security fixes applied in multiple distros. Remediati...

CVE-2018-19539

CVE-2018-19539 (JasPer 2.0.14) : An access violation in libjasper/base/jas_image.c:jas_image_readcmpt can cause a denial of service. Affected component is jas_image_readcmpt in JasPer 2.0.14; root cause is an access violation leading to crash/DoS. Public remediation/fix details are not provided i...

CVE-2018-20650

CVE-2018-20650 is described in connected documentation as a vulnerability in Poppler 0.72.0 where a reachable Object::dictLookup assertion in FileSpec.cc (pdfdetach) can be exploited to cause a denial of service due to lack of a type check for dict data. The MiracleLinux AXSA advisory lists this ...

CVE-2018-7254

WavPack 5.1.0 is affected by multiple header parsing weaknesses in the CLI parsers. Specifically, ParseRiffHeaderConfig (riff.c), ParseDsdiffHeaderConfig (dsdiff.c), and ParseCaffHeaderConfig (caff.c) can mis-handle unknown or malformed chunk data, leading to remote-denial-of-service via buffer o...