CVE-2020-16291

Ghostscript vulnerability CVE-2020-16291 is a buffer overflow in contrib/gdevdj9.c affecting Ghostscript versions 9.18 through 9.50, which can cause a denial of service when processing a crafted PDF. The issue is fixed in Ghostscript 9.51. Affected users should upgrade to >= 9.51 to mitigate t...

CVE-2020-25601

CVE-2020-25601 (Xen) : A lack of preemption in evtchn_reset() and evtchn_destroy() inside the FIFO event channel model can cause a guest with many active event channels to stall the hypervisor, enabling a local attacker (malicious or buggy guest kernel) to mount a Denial of Service affecting the ...

CVE-2020-27760

CVE-2020-27760 affects ImageMagick. In GammaImage() (MagickCore/enhance.c), certain gamma values can trigger a divide-by-zero when processing crafted input, potentially impacting availability. A patch uses PerceptibleReciprocal() to prevent the division by zero. Affected: ImageMagick versions pri...

CVE-2021-28658

Django vulnerability CVE-2021-28658 affects MultiPartParser in Django 2.2 (before 2.2.20), 3.0 (before 3.0.14), and 3.1 (before 3.1.8). A crafted filename in an uploaded file could trigger directory traversal; built-in upload handlers are not affected. Remediation: upgrade to the fixed releases (...

CVE-2021-32686

CVE-2021-32686 affects the PJSIP pjproject library prior to 2.11.1. The issue is a race condition in the SSL socket: (1) the accepted socket lacks a group lock, causing a race between callback and destroy, and (2) the SSL socket parent/listener may be destroyed during TLS handshake. These intermi...

CVE-2022-1419

CVE-2022-1419 affects the Linux kernel DRM/vgem path: ioctl DRM_IOCTL_MODE_DESTROY_DUMB can concurrently reduce the refcount of drm_vgem_gem_object created by vgem_gem_dumb_create, while that create path may access the freed object. The public description for this CVE notes that on 32-bit systems...

CVE-2022-21546

CVE-2022-21546 is a Linux kernel vulnerability affecting the SCSI target path. The issue arises in target_core_iblock/file when handling WRITE_SAME commands if the NDOB bit is set (NDOB indicates no data buffer) or when zero SG elements are sent. The kernel patch adds a common WRITE_SAME check fo...

CVE-2022-40617

strongSwan before 5.9.8 is affected by a denial-of-service in the revocation plugin when processing a crafted end-entity certificate containing a CRL/OCSP URL pointing to an attacker‑controlled server that does not respond or misbehaves. This is documented across multiple advisories (Linux distri...

CVE-2023-4351

CVE-2023-4351 is a use-after-free in Chromium/Google Chrome networking path exploited via a crafted HTML page, allowing remote heap corruption. The issue affects Google Chrome before version 116.0.5845.96 and is classed with High severity. Multiple connected advisories (e.g., Debian DSA-5479, Gen...

CVE-2023-52572

CVE-2023-52572 is confirmed in the provided connected documents. The vulnerability is a use-after-free (UAF) in the CIFS/SMB protocol handling inside the Linux kernel, specifically in cifs_demultiplex_thread() and related paths, which can lead to a UAF in smb2_is_network_name_deleted and downstre...

CVE-2024-0742

The CVE-2024-0742 entry is confirmed with concrete details in connected docs: an incorrect timestamp used to prevent input after page load can cause browser prompts and dialogs to be activated or dismissed unintentionally. Affected products are Firefox < 122, Firefox ESR < 115.7, and Thunde...

CVE-2024-24858

CVE-2024-24858 describes a race condition in the Linux kernel's Bluetooth code (net/bluetooth) specifically in {conn,adv}_{min,max}_interval_set() that can cause I2cap connection or broadcast abnormalities, potentially leading to a denial of service. The Astra Linux security bulletin also referen...

CVE-2024-35888

CVE-2024-35888 affects the Linux kernel erspan/ip6erspan paths. The issue was that ip6erspan_rcv() and erspan_rcv() did not ensure erspan_base_hdr is present in the skb->head before reading the ver field, risking uninitialized access. The fix adds missing pskb_may_pull() checks to ensure the l...

CVE-2024-36919

CVE-2024-36919 — Linux kernel (bnx2fc): The Unity/Miracle/NASL advisories confirm a patch that removes spin_lock_bh when releasing resources after upload in the bnx2fc session offload flow. Root cause: session resources are used by FW/driver during offload; after upload they are no longer needed,...

CVE-2024-46853

CVE-2024-46853 is a Linux kernel issue corrected by updating to a patched kernel. The vulnerability stems from a KASAN slab-out-of-bounds bug in the nxp-fspi driver (spi/nxp-fspi) when handling data not aligned to 4 bytes written to TX FIFO. The issue could cause a read beyond the allocated regio...

CVE-2014-9116

CVE-2014-9116 concerns the Mutt mail client. The description specifies that the write_one_header function in mutt 1.5.23 mishandles newline characters at the beginning of a header, allowing a remote attacker to cause a denial of service (crash) by sending a header with an empty body. This conditi...

CVE-2015-5194

CVE-2015-5194: ntpd’s log_config_command in ntp_parser.y allows remote attackers to crash ntpd via crafted logconfig commands. Affected are ntpd before 4.2.7p42; remediation is to upgrade to a fixed version (4.2.7p42+). Connected advisories from F5/IBM detail affected products and patch guidance ...

CVE-2017-11104

Knot DNS (versions before 2.4.5 and 2.5.x before 2.5.2) is affected by a TSIG authentication bypass due to an improper TSIG validity period check. An attacker with a valid key name and algorithm could bypass TSIG authentication if no additional ACL restrictions are set. Vulnerable components: Kno...

CVE-2017-7785

CVE-2017-7785 is a buffer overflow in ARIA attribute handling within the DOM that affects Thunderbird (< 52.3) and Firefox components (Firefox ESR < 52.3, Firefox

CVE-2018-0497

CVE-2018-0497 affects ARM mbed TLS prior to 2.12.0, prior to 2.7.5, and prior to 2.1.14. It enables remote partial plaintext recovery in CBC-based ciphersuites via a timing-based side-channel attack. The issue stems from an incorrect fix for CVE-2013-0169, specifically a wrong SHA-384 calculation...

CVE-2018-20182

CVE-2018-20182 affects the rdesktop RDP client; the vulnerability is a Buffer Overflow in the global variables of seamless_process_line(), leading to memory corruption and potential remote code execution in versions up to 1.8.3. Public feeds from Debian, Fedora, Alpine, and Gentoo indicate mitiga...

CVE-2019-18790

CVE-2019-18790ffects Sangoma Asterisk chan_sip.c: a SIP request can alter a peer’s IP address to hijack calls. Affected: Asterisk 13.x <13.29.2, 16.x <16.6.2, 17.x <17.0.1; Certified Asterisk

CVE-2019-7396

ImageMagick prior to 7.0.8-25 contains a memory leak in ReadSIXELImage (coders/sixel.c). The issue is documented as CVE-2019-7396. Affected releases may leak memory when processing SIXEL images; no other impact is described in the provided sources. Remediation: upgrade to ImageMagick 7.0.8-25 or ...

CVE-2020-12284

FFmpeg contains a heap-based buffer overflow in libavcodec/cbs_jpeg.c (cbs_jpeg_split_fragment) in versions 4.1 and 4.2.2, triggered during JPEG_MARKER_SOS processing due to a missing length check. This could lead to memory corruption. Several advisories reference CVE-2020-12284; fixes were issue...

CVE-2020-13933

Apache Shiro vulnerabilities CVE-2020-13933 affects Shiro

CVE-2020-16296

Ghostscript (Artifex) vulnerable in GetNumWrongData() within contrib/lips4/gdevlips.c across versions 9.18–9.50; exploitable by processing a crafted PDF file, resulting in denial of service. The issue is confirmed fixed in v9.51. Affected releases and fixes are corroborated across multiple source...

CVE-2020-16297

CVE-2020-16297 describes a buffer overflow in Ghostscript: FloydSteinbergDitheringC() in contrib/gdevbjca.c affects Ghostscript 9.18–9.50 and can allow a remote attacker to cause a denial of service via a crafted PDF file. The issue is fixed in Ghostscript v9.51. Affected products and exact compo...

CVE-2020-16307

Ghostscript (Artifex) vulnerable in version 9.50 due to a null pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c, which could allow a remote attacker to cause a denial of service via a crafted PostScript file. The issue is mitigated by upgrading to version 9.51 (as reported by CVE...

CVE-2020-6532

CVE-2020-6532 affects Google Chrome (SCTP use-after-free) prior to version 84.0.4147.105. The root cause is a use-after-free in SCTP handling, which could allow remote code execution via a crafted HTML page (heap corruption). Public advisories in connected docs confirm the issue and list affected...

CVE-2020-6535

CVE-2020-6535 affects Google Chrome/WebUI where insufficient data validation in the WebUI allowed a renderer-compromised attacker to inject scripts/HTML into a privileged page via a crafted HTML page. The vulnerability targets Chrome versions prior to 84.0.4147.89. Public sources in connected doc...

CVE-2021-30151

CVE-2021-30151 is a Cross-Site Scripting vulnerability in Sidekiq up to 6.2.0 (and

CVE-2021-43008

The CVE-2021-43008 vulnerability affects Adminer ≤ 4.6.2, where improper access control allows an attacker-controlled remote MySQL server to trigger Adminer to read a local file via LOAD DATA LOCAL INFILE, exposing sensitive files (e.g., /etc/passwd). The issue can enable Arbitrary File Read on t...

CVE-2022-1122

CVE-2022-1122 affects openjpeg2 2.4.0, specifically opj2_decompress when processing a directory with many files. The issue is a failed buffer allocation for directory filenames leading to free() on an uninitialized pointer, causing a segmentation fault and denial of service. Connected advisories ...

CVE-2022-24807

Net-snmp vulnerability CVE-2022-24807: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can lead to an out-of-bounds memory access. Exploitable by a user with read-write credentials. A fix was released in Net-SNMP 5.9.2. Recommendation: upgrade to 5.9.2 or newer; use s...

CVE-2022-48337

CVE-2022-48337 affects GNU Emacs up to 28.2. The issue arises from the etags implementation in lib-src/etags.c, which uses the system C library function and does not sanitize input, enabling command execution via shell metacharacters in source-file names (for example, using etags -u * in a direct...

CVE-2023-2858

The CVE-2023-2858 issue is a NetScaler file parser crash in Wireshark, reported for Wireshark versions 4.0.0–4.0.5 and 3.6.0–3.6.13, allowing a denial-of-service via crafted capture files. Connected advisories confirm the root cause is a parser crash in the NetScaler file parser within Wireshark....

CVE-2023-37201

CVE-2023-37201 is a WebRTC-related use-after-free in Firefox/Thunderbird: an attacker could trigger memory corruption during HTTPS WebRTC setup. Affected: Firefox <115, Firefox ESR <102.13, Thunderbird

CVE-2024-36950

CVE-2024-36950 is a Linux kernel vulnerability resolved in the FireWire OHCI driver. The issue occurred in the interrupt handler when a bus reset interrupt could be unmasked and cause a freeze if the bus reset was not yet serviced. The fix masks bus reset interrupts in the IRQ handler and unmasks...

CVE-2024-49989

CVE-2024-49989: In the Linux kernel, the drm/amd/display path fixes a double-free when unloading the amdgpu module. The issue arises during cleanup of display encoders for flexible/inflexible endpoints, potentially freeing the same object twice during amdgpu driver unload. Connected advisories (A...

CVE-2012-0247

CVE-2012-0247 affects ImageMagick 6.7.5-7 and earlier. The vulnerability allows remote attackers to cause memory corruption and potentially execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0. Connected advisories document that patches exist acros...

CVE-2014-9112

CVE-2014-9112 affects GNU cpio (2.11) via a heap-based buffer overflow in process_copy_in triggered by crafted archives. IBM notes potential remote code execution or elevated-privilege crash on PowerKVM systems; Debian/Red Hat/Fedora advisories confirm fixes in respective package updates (e.g., D...

CVE-2015-0241

CVE-2015-0241 affects PostgreSQL: the to_char() function can crash or allow remote authenticated code execution via a crafted numeric formatting template (buffer over-read) or timestamp template (buffer overflow). Affected versions include PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x befo...

CVE-2015-7692

CVE-2015-7692 affects ntpd (NTP) prior to 4.2.8p4 for 4.2.x and 4.3.77 for 4.3.x. The flaw is in the crypto_xmit function (ntp_crypto.c) and can cause remote DoS crashes. This entry notes it as a continuation of an incomplete fix for CVE-2014-9750. No specific patched versions are provided in the...

CVE-2016-3477

CVE-2016-3477 affects Oracle MySQL Server (versions before 5.5.50, 5.6 before 5.6.30, 5.7 before 5.7.12) and MariaDB (before 5.5.50, 10.0.x before 10.0.26, 10.1.x before 10.1.15). The vulnerability is in the Server: Parser component and can allow a local user to impact confidentiality, integrity,...

CVE-2016-9895

CVE-2016-9895 affects Mozilla Firefox (<50.1) and Firefox ESR (<45.6) and Thunderbird (

CVE-2017-15873

CVE-2017-15873 is tied to BusyBox 1.27.2 where the function get_next_block in archival/libarchive/decompress_bunzip2.c may overflow an integer, leading to a write access violation. The connected sources (NVD entry for CVE-2017-15873 and multiple vendor advisories/Nessus plugins) confirm this vuln...

CVE-2017-2615

The CVE-2017-2615 issue affects QEMU’s Cirrus CLGD 54xx VGA emulator support. The vulnerability is an out-of-bounds access during VGA data copying via bitblt in backward mode, which could allow a privileged guest user to crash the QEMU process and potentially execute arbitrary host code with QEMU...

CVE-2017-5434

CVE-2017-5434 is a use-after-free in Firefox/Thunderbird related to focus-handling that can cause a potentially exploitable crash. Public details in connected advisories show the flaw affects Firefox versions before 53 (and ESR branches before 53/52.1) with Firefox 53+ fixes and ESR updates deliv...

CVE-2017-5438

CVE-2017-5438 is a use-after-free in XSLT processing caused by the result handler being held by a freed handler. Publicly documented impact includes crashes and potential code execution in affected Mozilla products. Affected: Firefox

CVE-2018-10195

CVE-2018-10195 affects lrzsz prior to 0.12.21~rc. The issue stems from an incorrect length check in zsdata that can cause a size_t wraparound, potentially leaking information to the receiving side. Public sources consistently describe an information leak risk and, in distributions, a fix/update i...