CVE-2016-0647

CVE-2016-0647 corresponds to an unspecified vulnerability in MySQL/MariaDB affecting Full-Text Search (FTS) that allows local users to impact availability. Affected: Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier; MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x b...

CVE-2026-14355

The CVE-2026-14355 issue affects PHP 8.2.x before 8.2.32, 8.3.x before 8.3.32, 8.4.x before 8.4.23, and 8.5.x before 8.5.8. It is caused by a buffer allocation flaw in the AES-WRAP-PAD algorithm within the OpenSSL extension, where the output buffer for AES key-wrap-with-padding is sized from plai...

CVE-2014-1490

CVE-2014-1490 : A race condition in NSS libssl session ticket processing (use-after-free) could allow remote attackers to cause a denial of service or, per the description, potentially other impact via a resumption handshake. Affected: NSS up to 3.15.4 and, by extension, Mozilla products (Firefox...

CVE-2014-9016

CVE-2014-9016 affects Drupal 7.x prior to 7.34 and the Secure Password Hashes (phpass) module 6.x-2.x prior to 6.x-2.1. The issue is a denial-of-service condition caused by the password hashing API, where a crafted request can exhaust CPU and memory. Remediation is to update to Drupal 7.34+ and p...

CVE-2015-7692

CVE-2015-7692 affects ntpd (NTP) prior to 4.2.8p4 for 4.2.x and 4.3.77 for 4.3.x. The flaw is in the crypto_xmit function (ntp_crypto.c) and can cause remote DoS crashes. This entry notes it as a continuation of an incomplete fix for CVE-2014-9750. No specific patched versions are provided in the...

CVE-2016-7799

CVE-2016-7799 (ImageMagick) affects MagickCore/profile.c in ImageMagick, where a crafted file can trigger an out-of-bounds read, leading to denial of service. Affected product: ImageMagick (library/component: MagickCore/profile.c). Root cause: improper handling in profile processing. Impact: deni...

CVE-2017-11104

Knot DNS (versions before 2.4.5 and 2.5.x before 2.5.2) is affected by a TSIG authentication bypass due to an improper TSIG validity period check. An attacker with a valid key name and algorithm could bypass TSIG authentication if no additional ACL restrictions are set. Vulnerable components: Kno...

CVE-2017-15873

CVE-2017-15873 is tied to BusyBox 1.27.2 where the function get_next_block in archival/libarchive/decompress_bunzip2.c may overflow an integer, leading to a write access violation. The connected sources (NVD entry for CVE-2017-15873 and multiple vendor advisories/Nessus plugins) confirm this vuln...

CVE-2017-5405

CVE-2017-5405: In Mozilla Firefox/Thunderbird the vulnerability arises from how certain FTP response codes are handled, causing uninitialized port values to be used in FTP operations. Connected advisories confirm this CVE is fixed in Thunderbird/Firefox branches around version 52 and ESR 45.8 (e....

CVE-2018-10392

CVE-2018-10392 affects Xiph.Org libvorbis 1.3.6 where mapping0_forward in mapping0.c does not validate the number of channels, allowing a remote attacker to cause denial of service via a crafted file (heap-based overflow or over-read). The issue is fixed in later libvorbis releases (mitigation ty...

CVE-2018-1071

CVE-2018-1071 : The connected advisories confirm a stack-based buffer overflow in zsh’s exec.c:hashcmd() (through version 5.4.2), enabling a local attacker to cause a denial of service. Affected products include zsh across multiple distributions (Amazon Linux 2, Debian, CentOS/RHEL, Fedora, Gento...

CVE-2018-11439

CVE-2018-11439 affects TagLib 1.11.1’s Ogg FLAC scanning code (TagLib::Ogg::FLAC::File::scan in oggflacfile.cpp). The vulnerability is a heap-based buffer over-read exposed by processing a crafted audio file, leading to information disclosure. Public‑facing references in connected documents indic...

CVE-2018-12367

CVE-2018-12367 affects Mozilla Thunderbird < 60, Firefox ESR < 60.1, and Firefox

CVE-2019-20163

GPAC 0.8.0 and 0.9.0-development-20191109 expose a NULL pointer dereference in gf_odf_avc_cfg_write_bs() (odf/descriptors.c). The CVE-2019-20163 entry is documented across multiple feeds; no exploitation details are provided in the core text. Upstream fixes and distro advisories indicate remediat...

CVE-2020-15567

CVE-2020-15567 is described in connected documents as a Xen hypervisor vulnerability: non-atomic modification of a live EPT PTE during mapping of guest EPT tables could expose partially written PTEs and be race-exploitable. Affected software is the Xen hypervisor (versions up to 4.13.x per descri...

CVE-2020-16001

CVE-2020-16001 is a use-after-free vulnerability in Chrome’s media component (video/multimedia stack) that could allow remote code execution via a crafted HTML page. It was fixed in the Chromium/Chrome stable channel with version 86.0.4240.111. The associated advisory notes this as a high-severit...

CVE-2020-22015

CVE-2020-22015 is a Buffer Overflow in FFmpeg 4.2, triggered by an out-of-bounds condition in libavformat/movenc.c (mov_write_video_tag). The vulnerability could allow a remote attacker to obtain sensitive information, cause a Denial of Service, or execute arbitrary code. Connected advisories con...

CVE-2020-6096

The CVE-2020-6096 entry is supported by connected sources: the glitch is in ARMv7 memcpy() within GNU glibc (version 2.30.9000 in the description) where underflowing the third parameter num can cause a signed-compare bug, potentially writing out of bounds and enabling remote code execution. Debia...

CVE-2020-6553

CVE-2020-6553 is described as a use-after-free in offline mode in Google Chrome on iOS prior to 84.0.4147.125, potentially enabling heap corruption via a crafted HTML page. Connected sources tie this entry to Chromium security updates; Debian advisories reference updating Chromium to 84.0.4147.12...

CVE-2021-21110

CVE-2021-21110 concerns Chromium/Chrome: a use-after-free in the safe browsing component of the Chromium browser before version 87.0.4280.141 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Connected advisories consistently tie this CVE to Chromium u...

CVE-2021-32686

CVE-2021-32686 affects the PJSIP pjproject library prior to 2.11.1. The issue is a race condition in the SSL socket: (1) the accepted socket lacks a group lock, causing a race between callback and destroy, and (2) the SSL socket parent/listener may be destroyed during TLS handshake. These intermi...

CVE-2021-45958

CVE-2021-45958 affects UltraJSON (ujson) up to version 5.1.0, with a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation could crash the application by using excessive indentation. Publicly documented references include Debian LTS (DLA-2929-1) and Mageia...

CVE-2022-25648

CVE-2022-25648 affects the Ruby library ruby-git (Ruby interface to Git). The vulnerability arises from the fetch(remote = 'origin', opts = {}) pathway, where the remote argument is passed to the underlying git fetch command and can be manipulated to inject commands. Several connected advisories ...

CVE-2022-3570

CVE-2022-3570 affects libtiff 4.4.0 and is due to multiple heap buffer overflows in tiffcrop.c that can trigger unsafe or out-of-bounds memory access via crafted TIFF images, potentially crashing the application or causing information disclosure. Connected advisories confirm related fixes and pro...

CVE-2023-3215

The CVE-2023-3215 vulnerability affects Google's Chromium-based WebRTC: a use-after-free in WebRTC can lead to heap corruption when processing crafted HTML pages. Exploitable in Chrome/Chromium prior to version 114.0.5735.133. Remediation is to upgrade to 114.0.5735.133 or newer (as reflected in ...

CVE-2024-24858

CVE-2024-24858 describes a race condition in the Linux kernel's Bluetooth code (net/bluetooth) specifically in {conn,adv}_{min,max}_interval_set() that can cause I2cap connection or broadcast abnormalities, potentially leading to a denial of service. The Astra Linux security bulletin also referen...

CVE-2024-35960

The CVE-2024-35960 entry concerns a Linux kernel mlx5 flow rule handling bug. Affected component is net/mlx5 rules in the flow table; the root cause was that add_rule_fg could attach a newly created rule to the tree only when its refcount was 1, while create_flow_handle could reference an existin...

CVE-2024-36006

CVE-2024-36006 affects the Linux kernel mlxsw spectrum_acl_tcam code. The root cause is incorrect list usage: both vchunk_migrate_all and vregion_rehash paths call list_first_entry() without ensuring the lists are non-empty, triggering warnings. The connected Astra Linux bulletin confirms the sam...

CVE-2015-5194

CVE-2015-5194: ntpd’s log_config_command in ntp_parser.y allows remote attackers to crash ntpd via crafted logconfig commands. Affected are ntpd before 4.2.7p42; remediation is to upgrade to a fixed version (4.2.7p42+). Connected advisories from F5/IBM detail affected products and patch guidance ...

CVE-2016-10195

CVE-2016-10195 affects libevent’s evdns.c name_parse function, where handling of label_len can trigger an out-of-bounds stack read. The vulnerability exists in libevent up to version prior to 2.1.6-beta, and is described as having unspecified impact for remote attackers via the label_len-related ...

CVE-2016-6796

CVE-2016-6796 affects Apache Tomcat across multiple lines: a malicious web application could bypass the SecurityManager by manipulating the configuration parameters for the JSP Servlet. Affected versions include Tomcat 9.0.0.M1–9.0.0.M9, 8.5.0–8.5.4, 8.0.0.RC1–8.0.36, 7.0.0–7.0.70, and 6.0.0–6.0....

CVE-2016-9074

CVE-2016-9074: Mozilla NSS timing-side-channel mitigation is insufficient in some circumstances. Affects NSS-based components used by Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox

CVE-2017-5434

CVE-2017-5434 is a use-after-free in Firefox/Thunderbird related to focus-handling that can cause a potentially exploitable crash. Public details in connected advisories show the flaw affects Firefox versions before 53 (and ESR branches before 53/52.1) with Firefox 53+ fixes and ESR updates deliv...

CVE-2017-7791

CVE-2017-7791: A data: protocol-based modal alert spoofing vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2017-7809

CVE-2017-7809 is a use-after-free in an editor DOM node during tree traversal that can crash the process. Affected products cited across connected docs include Mozilla Thunderbird and Mozilla Firefox components; IBM SONAS ships vulnerable Firefox releases and lists a fix in IBM SONAS version 1.5....

CVE-2018-10393

CVE-2018-10393 affects libvorbis 1.3.6: bark_noise_hybridmp in psy.c causes a stack-based buffer over-read. Affected software is the libvorbis library (Xiph.org) and downstream packages (Debian/AlmaLinux/Gentoo advisories reference libvorbis ≤1.3.6). Impact is memory-safe violation potential; in ...

CVE-2018-17101

CVE-2018-17101 affects LibTIFF 4.0.9, with two out-of-bounds writes in cpTags (tiff2bw.c and pal2rgb.c) that can crash the application or have other unspecified impact when processing crafted TIFF images. Affected/affected-family advisories show upstream fixes; remediation is to upgrade LibTIFF t...

CVE-2018-19476

Artifex Ghostscript before 9.26 contains a setcolorspace type confusion in psi/zicc.c that lets remote attackers bypass access restrictions. Affected: Ghostscript versions prior to 9.26 (e.g., 9.25 and earlier per advisories). Impact per sources ranges from information disclosure to potential cod...

CVE-2018-19541

CVE-2018-19541 : A heap-based buffer over-read of size 8 exists in the function jas_image_depalettize (libjasper/base/jas_image.c) in JasPer, affecting versions from 1.900.8 up to 2.0.16 listed in the Initial document. The vulnerability can cause a crash and may enable memory access issues. The C...

CVE-2018-20147

Affected software: WordPress core. Vulnerability (CVE-2018-20147) exists in WordPress versions prior to 4.9.9 and in 5.x prior to 5.0.1. Root cause: authors could modify metadata to bypass restrictions on deleting files. Impact: potential bypass of file deletion protections (partial integrity/ava...

CVE-2018-5379

The CVE-2018-5379 issue affects the Quagga BGP daemon (bgpd) prior to version 1.2.3. The root cause is a double-free of memory when processing certain UPDATE messages that contain cluster-list and/or unknown attributes. This can lead to a denial of service (bgpd crash) and, in some cases, may all...

CVE-2018-8793

CVE-2018-8793 affects rdesktop up to version 1.8.3, where a heap-based buffer overflow in cssp_read_tsrequest() causes memory corruption and likely remote code execution. Multiple connected advisories confirm upstream fix to 1.8.4; remediation is to upgrade to 1.8.4 or newer. Exploitation status ...

CVE-2019-20165

GPAC vulnerability CVE-2019-20165 affects GPAC versions 0.8.0 and 0.9.0-development-20191109, caused by a NULL pointer dereference in ilst_item_Read() in isomedia/box_code_apple.c. This yields an exploitable crash in affected builds as described in multiple advisories. Public details in the conne...

CVE-2020-15992

CVE-2020-15992 affects Chromium-based browsers (Chromium/Google Chrome) before 86.0.4240.75, specifically the networking component. A remote attacker who already gained renderer-process access could bypass the same-origin policy via a crafted HTML page, with impacts including potential informatio...

CVE-2020-27763

CVE-2020-27763 is rejected and not a valid vulnerability entry.

CVE-2020-27770

CVE-2020-27770 is an ImageMagick flaw caused by a missing check for a 0 value in replace_extent, which can let an offset p overflow in SubstituteString(), potentially impacting availability. Affected software: ImageMagick versions prior to 7.0.8-68. The connected security notes confirm the root c...

CVE-2021-0089

CVE-2021-0089 concerns an observable response discrepancy in some Intel processors that could let an authorized local user potentially disclose information. The connected sources corroborate that this is a processor/CPU issue affecting Intel CPUs and related Xen/Citrix contexts, with the primary ...

CVE-2021-30151

CVE-2021-30151 is a Cross-Site Scripting vulnerability in Sidekiq up to 6.2.0 (and

CVE-2021-3667

CVE-2021-3667 affects libvirt, in particular the virStoragePoolLookupByTargetPath API where a locked virStoragePoolObj is not released on ACL permission failure. This can let clients with limited ACLs on the read-write socket acquire the lock and cause denial of service to storage pool/volume API...

CVE-2022-21546

CVE-2022-21546 is a Linux kernel vulnerability affecting the SCSI target path. The issue arises in target_core_iblock/file when handling WRITE_SAME commands if the NDOB bit is set (NDOB indicates no data buffer) or when zero SG elements are sent. The kernel patch adds a common WRITE_SAME check fo...