10003 matches found
CVE-2015-0410
CVE-2015-0410 is a denial-of-service weakness in the OpenJDK/Hotspot DER decoder. A remote attacker could exploit a crafted DER-encoded input to trigger an infinite loop in the decoder, impacting availability. Public disclosures in Debian and CentOS advisories list OpenJDK 6/7 (and related Java S...
CVE-2015-3331
CVE-2015-3331 affects the Linux kernel up to 3.19.2, where __driver_rfc4106_decrypt in arch/x86/crypto/aesni-intel_glue.c mishandles memory locations for encrypted data, enabling a context-dependent attacker to trigger a buffer overflow via a crypto API call (e.g., with a libkcapi test program us...
CVE-2015-8011
CVE-2015-8011 (buffer overflow in lldp_decode of lldpd) affects Open vSwitch/openvswitch builds and allows remote attackers to cause a daemon crash or potentially execute arbitrary code via large management addresses and TLV boundary handling in lldpd before 0.8.0. Documented impacts include deni...
CVE-2016-10937
IMAPFilter up to version 2.6.12 did not validate hostnames in SSL certificates, enabling potential MITM during TLS handshakes. Several connected advisories show the fix was released in version 2.6.16, adding proper SSL hostname validation (CVE-2016-10937). Affected releases across distros (openSU...
CVE-2016-2047
CVE-2016-2047 affects multiple MySQL-compatible products. The root cause is failure to verify server hostname against CN/SAN in X.509 certificates, enabling MITM by crafted certificates. Affected: MariaDB prior to 5.5.47, 10.0.x prior to 10.0.23, 10.1.x prior to 10.1.10; Oracle MySQL 5.5.48 and e...
CVE-2017-0899
CVE-2017-0899 affects RubyGems 2.6.12 and earlier: printing a gemspec could process terminal escape sequences, enabling an ANSI escape sequence vulnerability. Public docs indicate RubyGems was updated to mitigate this (e.g., RubyGems 2.6.13 release). Affected component: RubyGems gem specification...
CVE-2017-0903
CVE-2017-0903 affects RubyGems (versions 2.0.0 to 2.6.13) where YAML deserialization of gem specifications can bypass class whitelists and potentially enable remote code execution. The connected advisories confirm an unsafe YAML deserialization vulnerability in the rubygems module that could be t...
CVE-2017-5203
CVE-2017-5203 affects tcpdump: a buffer overflow in the BOOTP parser (print-bootp.c:bootp_print()) exists in tcpdump before 4.9.0. Several connected advisories confirm this family of issues and indicate the fix is to upgrade to tcpdump 4.9.0 or later. The CentOS advisory and Debian/Arch Linux sec...
CVE-2017-5897
CVE-2017-5897 involves an out-of-bounds read in the Linux kernel’s IPv6 GRE handling (ip6_gre.c, ip6gre_err). Connected sources (Debian DSA-3791-1 and Cloud Foundry USN-3265-2) confirm the issue and note mitigation via kernel updates (e.g., Debian Jessie fix in linux 3.16.39-1+deb8u1; vendor advi...
CVE-2017-7786
A buffer overflow in the image renderer can be triggered when painting non-displayable SVG elements, causing a crash and, in some advisories, potential arbitrary-code execution. Affected products include Mozilla Thunderbird and Firefox/Firefox ESR prior to certain versions (Thunderbird < 52.3,...
CVE-2017-7792
The CVE-2017-7792 issue affects Thunderbird (< 52.3), Firefox ESR (< 52.3), and Firefox (
CVE-2017-7807
CVE-2017-7807 describes a domain URL hijack via AppCache fallback, resolved by requiring fallback files to be inside the manifest directory. Affected products include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox
CVE-2018-10583
CVE-2018-10583 is an information-disclosure vulnerability affecting LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 where processing a malicious ODT file can trigger an SMB connection (e.g., xlink:href=file://192.168.0.2/test.jpg) and disclose sensitive information. Public references and cha...
CVE-2018-12397
CVE-2018-12397 affects Mozilla Firefox/Firefox ESR. The vulnerability arises from a WebExtension’s ability to access local files without the user-visible warning, bypassing the intended “Access your data for all websites” prompt. This can allow extensions to run content scripts on local pages wit...
CVE-2018-16877
Pacemaker contains several documented vulnerabilities (CVE-2018-16877, CVE-2018-16878, CVE-2019-3885) discussed across multiple advisories. The issues include: a client–server authentication flaw enabling local privilege escalation, an insufficient verification that can cause DoS via uncontrolled...
CVE-2018-19364
CVE-2018-19364 affects QEMU’s 9p file system components (hw/9pfs/cofile.c and hw/9pfs/9p.c). The issue arises when a fid path is modified while another thread is still accessing it, enabling a use-after-free condition. The description only states a use-after-free outcome as a consequence, with no...
CVE-2018-20021
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c0 contains a CWE-835: Infinite loop vulnerability in VNC client code (CVE-2018-20021). This flaw can let an attacker cause high resource consumption (CPU/RAM) via crafted VNC traffic. The issue is discussed across multiple Linux distrib...
CVE-2018-7995
CVE-2018-7995 describes a race condition in Linux kernel’s store_int_with_restart() (arch/x86/kernel/cpu/mcheck/mce.c) up to version 4.15.7. This flaw lets a local attacker with root access to write to /sys/devices/system/machinecheck/machinecheck/check_interval and trigger a denial of service/pa...
CVE-2018-8799
CVE-2018-8799 affects the rdesktop client; multiple sources indicate that versions up to 1.8.3 contain an out-of-bounds read in function process_secondary_order(), leading to a denial of service (segfault). Several connected advisories note that the issue is addressed in the 1.8.4 release series ...
CVE-2018-8800
CVE-2018-8800 affects rdesktop prior to 1.8.4. It is a heap-based buffer overflow in ui_clip_handle_data() causing memory corruption and likely remote code execution when connecting to a malicious server. Multiple advisories (Arch Linux ASA-201902-5, Debian DSA-4394-1/ DLA-1683-1) indicate upgrad...
CVE-2019-0053
The CVE-2019-0053 entry concerns the inetutils Telnet client in Junos OS, where environment-variable handling is insufficiently validated, causing a stack-based buffer overflow. This vulnerability is local to the Telnet client used from the CLI or shell, with inbound Telnet services unaffected. A...
CVE-2019-12248
CVE-2019-12248 affects OTRS (Open Ticket Request System) across multiple releases (OTRS/Community Edition 5.0.x–7.0.x, etc.). The issue arises when a malicious email sent to an OTRS system is quoted by a logged-in agent, causing the browser to load external image resources. Root cause: lack of re...
CVE-2019-12838
CVE-2019-12838 affects SchedMD Slurm: SQL Injection in the accounting storage path. Public advisories affirm vulnerable releases include Slurm 17.11.x, 18.08.0–18.08.7, and 19.05.0. Debian and SUSE/Nessus/OpenVAS entries confirm available patches: Debian DLA-2143 (for Jessie) fixes via slurm-llnl...
CVE-2019-18790
CVE-2019-18790ffects Sangoma Asterisk chan_sip.c: a SIP request can alter a peer’s IP address to hijack calls. Affected: Asterisk 13.x <13.29.2, 16.x <16.6.2, 17.x <17.0.1; Certified Asterisk
CVE-2020-11042
CVE-2020-11042: In FreeRDP, version range greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. The vulnerability allows reading an attacker-defined amount of client memory (32-bit unsigned, up to 4 GB) into an intermediate buffer, which can crash the client ...
CVE-2020-12693
CVE-2020-12693 affects Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3. In the scenario where Message Aggregation is enabled, a race condition can allow an authentication bypass through an Alternate Path or Channel and enable a user to launch a process as an arbitrary user. The connected ...
CVE-2020-22031
CVE-2020-22031 is a heap-based Buffer Overflow in FFmpeg 4.2 specifically at libavfilter/vf_w3fdif.c (filter16_complex_low) that may cause memory corruption and other potential consequences. Public advisories (Ubuntu/Debian) confirm FFmpeg fixes are available via package updates; remediation is t...
CVE-2020-27765
CVE-2020-27765 describes a flaw in ImageMagick (MagickCore/segment.c). A crafted image can trigger undefined behavior via a division by zero, with impact most likely on availability. Affected are ImageMagick versions prior to 7.0.9-0. Mitigation/patch guidance is not in the initial description, b...
CVE-2020-6391
CVE-2020-6391 concerns Blink in Google Chrome. The vulnerability arises from insufficient validation of untrusted input in Blink, allowing a local attacker to bypass Content Security Policy via a specially crafted HTML page on Chrome versions prior to 80.0.3987.87. Affected product: Google Chrome...
CVE-2020-6449
CVE-2020-6449 is a use-after-free vulnerability in the audio component of Google Chrome prior to 80.0.3987.149. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page. Documents confirm the affected product is Google Chrome/Chromium and that the fix was applied i...
CVE-2020-6480
CVE-2020-6480 is documented as an access restriction bypass in Chromium/Google Chrome’s enterprise component, caused by insufficient policy enforcement. The Arch Linux ASA-202005-12 details multiple issues with chromium before 83.0.4103.61-1, including the CVE-2020-6480 bypass of navigation restr...
CVE-2020-6566
CVE-2020-6566 affects Google Chrome/Chromium prior to 85.0.4183.83, where insufficient policy enforcement in media could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is evidenced in multiple advisories and CVE trackers, with Debian/ Fedora updates indicatin...
CVE-2021-37971
CVE-2021-37971 affects Google Chrome up to 94.0.4606.54 where the Web Browser UI could be spoofed in the Omnibox via a crafted HTML page due to an incorrect security UI. The vulnerability allows a remote attacker to mislead users by altering the URL bar contents. The initial and connected documen...
CVE-2021-37972
CVE-2021-37972 relates to an out-of-bounds read in libjpeg-turbo used by Google Chrome (Chromium) before 94.0.4606.54, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product is Chrome/Chromium with libjpeg-turbo integration; root cause is a mem...
CVE-2021-37974
CVE-2021-37974 affects Google Chrome's Safebrowsing component and is a use-after-free vulnerability that could allow a remote attacker who compromises the renderer process to cause heap corruption via a crafted HTML page. The issue is rooted in Safe Browsing handling prior to version 94.0.4606.71...
CVE-2022-32083
MariaDB CVE-2022-32083 affects MariaDB 10.2–10.6.1 with a segmentation fault in Item_subselect::init_expr_cache_tracker. The Connected documents confirm the same issue across multiple advisories, but none specify an official fixed version in the provided text. Impact is a crash (DoS-like concern)...
CVE-2023-42464
The CVE-2023-42464 entry concerns a Type Confusion in Netatalk 3.1.x before 3.1.17, specifically in Spotlight RPC parsing where a key–value dictionary’s values are not properly type-checked by dalloc_value_for_key(), allowing a malicious actor to fully control the pointer value and theoretically ...
CVE-2023-52572
CVE-2023-52572 is confirmed in the provided connected documents. The vulnerability is a use-after-free (UAF) in the CIFS/SMB protocol handling inside the Linux kernel, specifically in cifs_demultiplex_thread() and related paths, which can lead to a UAF in smb2_is_network_name_deleted and downstre...
CVE-2024-35888
CVE-2024-35888 affects the Linux kernel erspan/ip6erspan paths. The issue was that ip6erspan_rcv() and erspan_rcv() did not ensure erspan_base_hdr is present in the skb->head before reading the ver field, risking uninitialized access. The fix adds missing pskb_may_pull() checks to ensure the l...
CVE-2025-38218
CVE-2025-38218 affects the Linux kernel with f2fs: a sanity check failure in sit_bitmap_size can lead to a kernel panic during resize/mount. The issue arises when sit_i->bitmap_size is 192, making sit bitmap size 1536, but with MAIN_SEGS at 261893 the sit_blk_cnt becomes 4762; build_sit_entrie...
CVE-2014-0198
The connected F5 advisory confirms CVE-2014-0198: the do_ssl3_write function in OpenSSL 1.x (up to 1.0.1g) with SSL_MODE_RELEASE_BUFFERS enabled can trigger a denial-of-service via a NULL pointer dereference in certain recursive alert paths. Impact is remote DoS; no exploitation details are provi...
CVE-2015-0395
CVE-2015-0395 is an unspecified vulnerability affecting Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 with impact on confidentiality, integrity, and availability via Hotspot. Connected advisories list it among multiple OpenJDK/Java vulnerabilities and indicate that remediation involves upgrading to...
CVE-2016-9603
CVE-2016-9603 affects QEMU’s Cirrus CLGD 54xx VGA emulator, specifically the VNC display driver support prior to 2.9. A heap-based buffer overflow can occur when a VNC client updates the display after a guest VGA operation. A privileged guest user could crash the QEMU process or potentially execu...
CVE-2017-0900
CVE-2017-0900 is a DoS vulnerability in RubyGems: RubyGems versions 2.6.12 and earlier are vulnerable to maliciously crafted gem specifications that trigger a denial of service when a client runs a query. Public advisories across multiple vendors reference this CVE (Debian DLA entries, CentOS/RH ...
CVE-2017-3600
CVE-2017-3600 applies to the Oracle MySQL Server component, specifically the Server mysqldump client. The issue is described as allowing a high-privileged attacker with network access to take over the MySQL server, with CVSS base score 6.6 (3.0) / 6.6 (3.1) depending on vector, and is equivalent ...
CVE-2017-5464
CVE-2017-5464 affects Mozilla products: Thunderbird
CVE-2017-5465
CVE-2017-5465 is an out-of-bounds read in ConvolvePixel used when processing SVG content. The issue can crash the application and may copy memory into SVG content, potentially affecting rendering. Affected products include Thunderbird and Mozilla Firefox variants: Thunderbird < 52.1, Firefox E...
CVE-2017-7800
CVE-2017-7800 is a use-after-free in WebSockets that can trigger a crash when the connection object is freed before disconnection finishes. Affected: Thunderbird < 52.3, Firefox ESR < 52.3, Firefox
CVE-2017-7802
CVE-2017-7802 is a use-after-free in the DOM during an image element resize event. The vulnerability occurs when freed image elements are accessed due to lack of strong references, potentially causing a crash. Affected products/versions from the provided documents include Thunderbird < 52.3, F...