CVE-2017-7807

CVE-2017-7807 describes a domain URL hijack via AppCache fallback, resolved by requiring fallback files to be inside the manifest directory. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2018-15908

Artifex Ghostscript 9.23, prior to 2018-08-23, is affected by a restriction-bypass in .tempfile that allows crafted PostScript files to bypass safety checks and write files. Impact is stated as enabling file writes via PostScript, with broader security fixes applied in multiple distros. Remediati...

CVE-2018-18605

CVE-2018-18605 affects GNU Binutils libbfd (BFD) where a heap-based buffer over-read occurs in sec_merge_hash_lookup during section merges when entsize does not divide the size. This can allow remote DoS via specially crafted ELF (as demonstrated by ld). Affected products reference Binutils 2.31;...

CVE-2018-19961

CVE-2018-19961 affects the Xen hypervisor up to 4.11.x on AMD x86, where guest OS users may gain host privileges due to TLB flushes not reliably occurring after IOMMU mapping changes. Public documents confirm Xen as the affected product and describe the root cause and potential privilege escalati...

CVE-2018-20177

CVE-2018-20177 affects the rdesktop X11/CLI client (up to v1.8.3). The issue is an Integer Overflow in the rdp_in_unistr() path that causes a Heap-Based Buffer Overflow, leading to memory corruption and potential remote code execution. Several connected sources confirm the vulnerability in rdesktop

CVE-2018-20650

CVE-2018-20650 is described in connected documentation as a vulnerability in Poppler 0.72.0 where a reachable Object::dictLookup assertion in FileSpec.cc (pdfdetach) can be exploited to cause a denial of service due to lack of a type check for dict data. The MiracleLinux AXSA advisory lists this ...

CVE-2018-8905

CVE-2018-8905 is a LibTIFF issue affecting LibTIFF 4.0.9 and earlier. It describes a heap-based buffer overflow in the function LZWDecodeCompat (tif_lzw.c) triggered by a crafted TIFF file, with behavior demonstrated by tiff2ps. Connected advisories document the impact as cryptic but include pote...

CVE-2019-19039

CVE-2019-19039 is a Linux kernel vulnerability affecting btrfs: the function __btrfs_free_extent in fs/btrfs/extent-tree.c may trigger a path in btrfs_print_leaf during an ENOENT case, enabling a local attacker to obtain potentially sensitive information about register values via dmesg. The descr...

CVE-2020-11800

CVE-2020-11800 affects Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2, enabling remote code execution. The description indicates the issue is a remote code execution vulnerability, but the provided documents do not include a concrete root-cause analysis or a confirmed patch/version that fix...

CVE-2020-12658

CVE-2020-12658 affects gssproxy (gss-proxy)

CVE-2020-15986

CVE-2020-15986 affects Chromium's media component. An integer overflow in media before 86.0.4240.75 could enable a remote attacker to potentially cause heap corruption and arbitrary code execution. Public records in connected documents reference Chrome/Chromium updates fixing this in version 86.0...

CVE-2020-16000

CVE-2020-16000 refers to an Inappropriate implementation in Blink in Google Chrome before 86.0.4240.111, enabling remote exploitation via a crafted HTML page that could lead to heap corruption. Affected component: Blink in Chrome; root cause: inappropriate implementation in Blink; impact: potenti...

CVE-2020-16310

CVE-2020-16310 : Ghostscript v9.50 contains a division-by-zero vulnerability in dot24_print_page() (devices/gdevdm24.c) that allows a remote attacker to cause a denial of service via a crafted PDF. The issue is fixed in Ghostscript v9.51. Affected product: Artifex Ghostscript (9.50). Impact: DoS ...

CVE-2020-25032

CVE-2020-25032 affects Flask-CORS (CORS Middleware for Flask) versions before 3.0.9. The issue allows directory traversal via /../ sequences because resource matching does not canonicalize pathnames, potentially exposing private files. Public sources in the connected documents confirm affected pr...

CVE-2020-6386

CVE-2020-6386 is a use-after-free in Chrome’s speech processing leading to potential heap corruption when processing crafted HTML. Affected: Google Chrome prior to version 80.0.3987.116. Impact: remote code execution or instability as described in public advisories, with the issue fixed in the Ch...

CVE-2020-6496

CVE-2020-6496 : Use-after-free in the payments component of Google Chrome on macOS before 83.0.4103.97 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected: Chrome/macOS; Root cause: use-after-free in payments. Impact: sandbox escape possible; Exploit...

CVE-2020-6567

CVE-2020-6567 involves Google Chrome (Windows) prior to 85.0.4183.83, where insufficient validation of untrusted input in command line handling allowed bypassing navigation restrictions via a crafted HTML page. Connected advisories confirm Chromium updates to 85.0.4183.83 or later as the fix (e.g...

CVE-2020-7663

The CVE-2020-7663 issue affects the ruby-websocket-extensions library (prior to 0.1.5). The parser can take quadratic time when processing a Sec-WebSocket-Extensions header containing an unclosed string parameter value with a repeating two‑byte sequence (backslash and a character), enabling Regex...

CVE-2021-21170

CVE-2021-21170 is a content spoofing/UX UI issue in Chromium-based browsers (Chrome/Chromium) prior to 89.0.4389.72. The vulnerability affects the Loader/URL bar UI and could allow a renderer-compromised attacker to spoof the Omnibox via a crafted HTML page. A fix exists in Chrome/Chromium 89.0.4...

CVE-2021-32743

CVE-2021-32743 affects Icinga 2 where credentials for external services can be exposed via the API to authenticated users for certain objects. Specifically, in versions prior to 2.11.10 and 2.12.0–2.12.4, the API could disclose passwords for databases (IdoMysqlConnection, IdoPgsqlConnection), Red...

CVE-2022-0582

CVE-2022-0582 concerns Wireshark’s CSN.1 protocol dissector, where an unaligned access in versions 3.6.0–3.6.1 and 3.4.0–3.4.11 can cause a denial of service via crafted captures or packet injection. The connected advisories confirm affected packages and fixes across multiple distributions (e.g.,...

CVE-2022-23608

CVE-2022-23608 affects PJSIP/pjproject up to version 2.11.1. In a dialog set (or forking) scenario, a hash key shared by multiple UAC dialogs can be prematurely freed when a dialog is destroyed, causing the same dialog set to be registered in the hash table multiple times with different hash keys...

CVE-2022-3570

CVE-2022-3570 affects libtiff 4.4.0 and is due to multiple heap buffer overflows in tiffcrop.c that can trigger unsafe or out-of-bounds memory access via crafted TIFF images, potentially crashing the application or causing information disclosure. Connected advisories confirm related fixes and pro...

CVE-2023-34059

CVE-2023-34059 is a local, high-severity vulnerability in open-vm-tools’ vmware-user-suid-wrapper that can hijack the /dev/uinput file descriptor to simulate user inputs. It affects multiple Linux distributions (e.g., Debian, Red Hat/CentOS, AlmaLinux/AlmaLinux, Amazon Linux 2/2023), with advisor...

CVE-2023-4360

CVE-2023-4360 affects Color in Google Chrome (Chromium) prior to 116.0.5845.96. A remote attacker could craft an HTML page to obfuscate security UI. The issue is confirmed public in Chromium’s advisory and Chrome/Debian updates note the fix in version 116.0.5845.96 (and later). Remediation: upgra...

CVE-2024-0750

CVE-2024-0750 affects Firefox (versions prior to 122) and Thunderbird (prior to 115.7), with the issue described as a bug in popup notifications delay calculation that could allow a user to be tricked into granting permissions. Connected advisories confirm the vulnerability and link it to Mozilla...

CVE-2024-36941

CVE-2024-36941 is a Linux kernel vulnerability affecting the wifi nl80211 path. The issue is a NULL pointer dereference that could occur if parsing of the coalescing rule fails and the code dereferences NULL when freeing resources. The connected IBM advisory confirms the linux kernel fix for this...

CVE-2014-1490

CVE-2014-1490 : A race condition in NSS libssl session ticket processing (use-after-free) could allow remote attackers to cause a denial of service or, per the description, potentially other impact via a resumption handshake. Affected: NSS up to 3.15.4 and, by extension, Mozilla products (Firefox...

CVE-2016-1000339

CVE-2016-1000339 describes a cryptographic leakage in Bouncy Castle JCE Provider v1.55 and earlier, where the primary AES engine class was AESFastEngine. Because of the table-driven lookup, data channel timing could leak information about the AES key via table accesses; AESEngine also had leaks b...

CVE-2016-9603

CVE-2016-9603 affects QEMU’s Cirrus CLGD 54xx VGA emulator, specifically the VNC display driver support prior to 2.9. A heap-based buffer overflow can occur when a VNC client updates the display after a guest VGA operation. A privileged guest user could crash the QEMU process or potentially execu...

CVE-2017-0899

CVE-2017-0899 affects RubyGems 2.6.12 and earlier: printing a gemspec could process terminal escape sequences, enabling an ANSI escape sequence vulnerability. Public docs indicate RubyGems was updated to mitigate this (e.g., RubyGems 2.6.13 release). Affected component: RubyGems gem specification...

CVE-2018-10536

CVE-2018-10536 affects WavPack 5.1.0 and earlier; the WAV parser’s ParseRiffHeaderConfig in riff.c fails to reject multiple format chunks, enabling potential out-of-bounds memory write. Connected advisories (openSUSE openSUSE-2021-153/154, Red Hat advisories) confirm the issue and reference updat...

CVE-2018-12361

CVE-2018-12361 is an integer overflow in the SwizzleData code during buffer-size calculation that can lead to a potentially exploitable crash when inputs aren’t sanitized. Affected products include Mozilla Thunderbird before 60 and Firefox family before 61 (Firefox ESR before 60.1). Public remedi...

CVE-2018-20544

CVE-2018-20544 in libcaca 0.99.beta19 is a floating point exception in caca/dither.c (caca_dither_bitmap). Connected advisories show multiple vendors issuing fixes (e.g., openSUSE/SUSE, Ubuntu, Debian) and refer to a libcaca update that addresses this and related CVEs (20545–20549). The updates t...

CVE-2019-14438

CVE-2019-14438 affects VideoLAN VLC media player 3.0.7.1 and earlier, due to a heap-based buffer over-read in xiph_PackHeaders() within modules/demux/xiph.h, exploitable via crafted .ogg files. Multiple connected advisories confirm the issue and track fixes to VLC 3.0.8 (and related package updat...

CVE-2019-16239

CVE-2019-16239 affecting OpenConnect up to version 8.05. The issue is a heap-based/buffer overflow in process_http_response when a malicious server uses HTTP chunked encoding with crafted chunk sizes, leading to potential crash/DoS. Public sources in the connected documents include multiple advis...

CVE-2019-7314

CVE-2019-7314 affects LIVE555 Live555’s liblivemedia. It is triggered by mishandling the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, leading to a use-after-free that can crash the RTSP server or cause unspecified impact. Affected history points to Live555 before 2019.0...

CVE-2020-14929

CVE-2020-14929 affects Alpine (pre-2.23) where,a PREAUTH scenario can cause Alpine to proceed over an insecure connection after a /tls is sent instead of closing the connection. Public records in multiple vendor advisories indicate the issue is addressed by upgrading Alpine to 2.23 or newer; Fedo...

CVE-2020-17368

CVE-2020-17368 affects Firejail prior to 0.9.64. It arises when using --output or --output-stderr, where shell metacharacters are mishandled and the command line arguments are concatenated into a single string passed to a shell, enabling potential command injection. Public disclosures in Debian L...

CVE-2020-35459

CVE-2020-35459 affects ClusterLabs crmsh up to version 4.2.1. A local attacker can trigger shell code injection via the crm history command, potentially escalating privileges. Root cause: improper handling of commands in crm history that enables code execution. Impact: local privilege escalation....

CVE-2020-6522

CVE-2020-6522 affects Google Chrome (and Chromium) due to an inappropriate implementation in external protocol handlers, potentially allowing a sandbox escape via a crafted HTML page. The issue existed in Chrome prior to version 84.0.4147.89. Debian and FreeBSD advisories list this CVE among many...

CVE-2020-6544

CVE-2020-6544 affects Google Chrome (media component) with a use-after-free in media leading to potential heap corruption via a crafted HTML page. The vulnerability is exploitable remotely and, per the supplied documents, is addressed by upgrading to Chrome 84.0.4147.125 or newer. Connected advis...

CVE-2021-37979

CVE-2021-37979 is a Chrome/Chromium-related vulnerability describing a heap buffer overflow in the WebRTC component of the Chromium engine (before version 94.0.4606.81). The issue could allow a remote attacker to trigger heap corruption by convincing a user to visit a malicious page containing cr...

CVE-2022-2058

CVE-2022-2058 affects libtiff 4.4.0 (tiffcrop) with a Divide By Zero error that can cause a denial of service via a crafted TIFF file. The issue originates in tiffcrop and is addressed by a fix available in commit f3a5e010 for users compiling libtiff from source. Exploitation details or in-the-wi...

CVE-2022-34526

CVE-2022-34526 affects LibTIFF: a stack overflow in TIFFVGetField in Tiffsplit v4.4.0 can be triggered by processing crafted TIFF files via tiffsplit or tiffcrop, leading to DoS. The Connected documents confirm impact on the libtiff/tools, with advisories and mitigations from multiple vendors (e....

CVE-2022-3635

CVE-2022-3635 affects the Linux Kernel. The vulnerability is in the function tst_timer of drivers/atm/idt77252.c (IPsec component). It enables a use-after-free condition. A patch is recommended to fix the issue. The provided documents confirm the root cause and the vulnerable file/function, and d...

CVE-2023-23583

CVE-2023-23583 is an Intel microcode issue where mishandling of certain sequences of processor instructions on Intel Ice Lake and newer CPUs may allow a local attacker to escalate privileges, disclose information, or cause denial of service. Publicly documented impact and mitigations come from mu...

CVE-2023-52635

The CVE-2023-52635 entry concerns a Linux kernel devfreq timer race. Description: frequent governor switches (e.g., simple_ondemand and performance) on a devfreq device may race with timer cancellation and expiration, risking timer_list corruption when cancel_delayed_work_sync() is followed by ex...

CVE-2024-47698

CVE-2024-47698 (Linux kernel) affects DVB frontends rtl2830/rtl2832 in the media/dvb-frontends subsystem. The issue is an out-of-bounds write in the pid_filter logic for rtl2832, caused by not enforcing the maximum index on bit manipulations (dev->filters is 32-bit; indices must be 0–31). The ...

CVE-2009-3614

Liboping 1.3.2 is affected by CVE-2009-3614 due to an input validation error that allows reading arbitrary files on the local system. The connected documents reiterate this description but do not provide further technical details (such as affected functions, vectors, or patch versions). No exploi...