CVE-2017-5438

CVE-2017-5438 is a use-after-free in XSLT processing caused by the result handler being held by a freed handler. Publicly documented impact includes crashes and potential code execution in affected Mozilla products. Affected: Firefox

CVE-2017-2615

The CVE-2017-2615 issue affects QEMU’s Cirrus CLGD 54xx VGA emulator support. The vulnerability is an out-of-bounds access during VGA data copying via bitblt in backward mode, which could allow a privileged guest user to crash the QEMU process and potentially execute arbitrary host code with QEMU...

CVE-2017-5434

CVE-2017-5434 is a use-after-free in Firefox/Thunderbird related to focus-handling that can cause a potentially exploitable crash. Public details in connected advisories show the flaw affects Firefox versions before 53 (and ESR branches before 53/52.1) with Firefox 53+ fixes and ESR updates deliv...

CVE-2018-10195

CVE-2018-10195 affects lrzsz prior to 0.12.21~rc. The issue stems from an incorrect length check in zsdata that can cause a size_t wraparound, potentially leaking information to the receiving side. Public sources consistently describe an information leak risk and, in distributions, a fix/update i...

CVE-2018-10583

CVE-2018-10583 is an information-disclosure vulnerability affecting LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 where processing a malicious ODT file can trigger an SMB connection (e.g., xlink:href=file://192.168.0.2/test.jpg) and disclose sensitive information. Public references and cha...

CVE-2018-12397

CVE-2018-12397 affects Mozilla Firefox/Firefox ESR. The vulnerability arises from a WebExtension’s ability to access local files without the user-visible warning, bypassing the intended “Access your data for all websites” prompt. This can allow extensions to run content scripts on local pages wit...

CVE-2018-19364

CVE-2018-19364 affects QEMU’s 9p file system components (hw/9pfs/cofile.c and hw/9pfs/9p.c). The issue arises when a fid path is modified while another thread is still accessing it, enabling a use-after-free condition. The description only states a use-after-free outcome as a consequence, with no...

CVE-2018-20147

Affected software: WordPress core. Vulnerability (CVE-2018-20147) exists in WordPress versions prior to 4.9.9 and in 5.x prior to 5.0.1. Root cause: authors could modify metadata to bypass restrictions on deleting files. Impact: potential bypass of file deletion protections (partial integrity/ava...

CVE-2018-5379

The CVE-2018-5379 issue affects the Quagga BGP daemon (bgpd) prior to version 1.2.3. The root cause is a double-free of memory when processing certain UPDATE messages that contain cluster-list and/or unknown attributes. This can lead to a denial of service (bgpd crash) and, in some cases, may all...

CVE-2018-8793

CVE-2018-8793 affects rdesktop up to version 1.8.3, where a heap-based buffer overflow in cssp_read_tsrequest() causes memory corruption and likely remote code execution. Multiple connected advisories confirm upstream fix to 1.8.4; remediation is to upgrade to 1.8.4 or newer. Exploitation status ...

CVE-2018-8796

CVE-2018-8796 affects rdesktop up to v1.8.3, with an out-of-bounds read in process_bitmap_updates() causing a denial of service (segfault). Remediation: upgrade to v1.8.4 or later (multiple advisories note the fix in upstream 1.8.4; Fedora/Debian/Arch Linux references).

CVE-2019-12838

CVE-2019-12838 affects SchedMD Slurm: SQL Injection in the accounting storage path. Public advisories affirm vulnerable releases include Slurm 17.11.x, 18.08.0–18.08.7, and 19.05.0. Debian and SUSE/Nessus/OpenVAS entries confirm available patches: Debian DLA-2143 (for Jessie) fixes via slurm-llnl...

CVE-2019-15144

DjVuLibre 3.5.27 contains a denial-of-service flaw in GArrayTemplate::sort triggered by crafted PBM files (libdjvu/GContainer.h). This CVE is CVE-2019-15144. Connected advisories (Debian, Mageia, Gentoo, Fedora, Cloud Foundry, Astra Linux) confirm the issue and note fixes/updates to djvulibre pac...

CVE-2019-19525

CVE-2019-19525 affects the Linux kernel prior to 5.3.6, where a use-after-free can be triggered by a malicious USB device via drivers/net/ieee802154/atusb.c (CID-7fd25e6fc035). The vulnerability has an availability impact and a MEDIUM base score (CVSS v3.1: 4.6) with LOCAL/PHYSICAL factors descri...

CVE-2019-20165

GPAC vulnerability CVE-2019-20165 affects GPAC versions 0.8.0 and 0.9.0-development-20191109, caused by a NULL pointer dereference in ilst_item_Read() in isomedia/box_code_apple.c. This yields an exploitable crash in affected builds as described in multiple advisories. Public details in the conne...

CVE-2019-20387

CVE-2019-20387: heap-based buffer over-read in repodata_schema2id() of libsolv (repodata.c) causing potential crash. Affected: Cloud Pak for Security (CP4S) versions 1.8.1.0, 1.8.0.0, 1.7.2.0. Root cause: last schema length shorter than input schema leading to over-read. Remediation: upgrade to C...

CVE-2020-11045

CVE-2020-11045 refers to FreeRDP and describes an out-of-bounds read in update_read_bitmap_data that can cause client memory to be read into an image buffer, with the display affected (shown as color). The connected advisories ( MiracleLinux, Rocky Linux/AlmaLinux, Debian, Red Hat, Oracle Linux, ...

CVE-2020-15565

Root cause: CVE-2020-15565 arises from insufficient cache write-back under VT-d when page tables are shared between IOMMU and CPU, requiring flushing of both CPU and IOMMU TLBs. A backport/backing fixes missed a necessary cache flush, leaving IOMMU updates potentially non-coherent. Affected produ...

CVE-2020-20451

FFmpeg 4.2 contains a Denial of Service vulnerability (CVE-2020-20451) caused by resource management errors in fftools/cmdutils.c. Connected advisories from Debian and openSUSE/SUSE enumerate this CVE among a set of FFmpeg issues and indicate remediation via updated FFmpeg packages (examples: Deb...

CVE-2020-28034

Versions of WordPress prior to 5.5.2 are vulnerable to Cross-Site Scripting (XSS) . The root cause is a deficiency in the security measures used to protect web page structures, specifically allowing XSS via global variables . Exploiting this vulnerability allows a malicious actor to compromise da...

CVE-2020-6384

CVE-2020-6384 is a use-after-free in WebAudio of Google Chrome/Chromium prior to version 80.0.3987.116, potentially enabling heap corruption via a crafted HTML page. Connected advisories confirm this issue is fixed in later Chromium/Chrome updates (e.g., Chromium 80.0.3987.132 and newer, with Red...

CVE-2020-6553

CVE-2020-6553 is described as a use-after-free in offline mode in Google Chrome on iOS prior to 84.0.4147.125, potentially enabling heap corruption via a crafted HTML page. Connected sources tie this entry to Chromium security updates; Debian advisories reference updating Chromium to 84.0.4147.12...

CVE-2021-21110

CVE-2021-21110 concerns Chromium/Chrome: a use-after-free in the safe browsing component of the Chromium browser before version 87.0.4280.141 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Connected advisories consistently tie this CVE to Chromium u...

CVE-2021-21114

CVE-2021-21114 affects the Chromium-based browser (Chromium/Google Chrome family) with an issue in the audio component prior to version 87.0.4280.141 . The root cause is described as a use-after-free leading to potential heap corruption when processing crafted HTML pages, enabling a remote attack...

CVE-2021-38300

CVE-2021-38300 affects the Linux kernel on MIPS through arch/mips/net/bpf_jit.c, where the BPF JIT can emit incorrect machine code when transforming unprivileged cBPF programs. Root cause: conditional branches can exceed the 128 KB limit, enabling a local user to execute arbitrary code in kernel ...

CVE-2022-1355

CVE-2022-1355 affects libtiff/tiffcp: a stack-buffer-overflow in tiffcp.c (main()) allows crafting TIFF files to crash the tiffcp tool, causing DoS. Multiple advisories confirm the issue and provide fixes for libtiff, with Debian/Red Hat/Amazon Linux advisories detailing patched versions (e.g., D...

CVE-2022-42309

CVE-2022-42309 is a Xenstore vulnerability in the Xen hypervisor where a malicious guest can trigger xenstored to crash or memory-corrupt via the error path bug introduced by the XSA-115 fix. The issue stems from xenstore node creation using a wrong pointer in certain error paths, with exploitati...

CVE-2023-34969

CVE-2023-34969 affects the dbus package. D-Bus before 1.15.6 may allow an unprivileged user to crash dbus-daemon when a privileged user uses org.freedesktop.DBus.Monitoring to observe traffic; on the system bus this yields a denial-of-service. Affected versions are before 1.15.6; fixed in 1.12.28...

CVE-2023-4368

CVE-2023-4368 : In Google Chrome/Chromium, insufficient policy enforcement in the Extensions API prior to 116.0.5845.96 allowed a user-wacched to install a malicious extension to bypass an enterprise policy via a crafted HTML page. The issue is described as a Medium severity in the Chromium advis...

CVE-2023-6861

The CVE-2023-6861 issue is a heap buffer overflow in nsWindow::PickerOpen(void) when Firefox/Thunderbird run in headless mode. Affected products: Firefox ESR <115.6, Thunderbird <115.6, and Firefox

CVE-2024-35899

CVE-2024-35899 affects the Linux kernel nf_tables (netfilter). The issue is a race where the destroy workqueue may run after exit_net has released resources, risking use-after-free of a nf_tables set during module removal. The provided trace shows KASAN slab-use-after-free in nf_tables_trans_dest...

CVE-2025-23150

CVE-2025-23150 affects the Linux kernel ext4 filesystem. The issue stems from an off-by-one error in do_split that can cause out-of-bounds access in ext4_insert_dentry, leading to a use-after-free condition (as detected via Syzkaller). The problem can occur during directory entry creation paths t...

CVE-2015-0395

CVE-2015-0395 is an unspecified vulnerability affecting Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 with impact on confidentiality, integrity, and availability via Hotspot. Connected advisories list it among multiple OpenJDK/Java vulnerabilities and indicate that remediation involves upgrading to...

CVE-2015-0412

CVE-2015-0412 affects Oracle Java SE 6u85, 7u72, and 8u25 with exploitation via JAX-WS vectors, potentially impacting confidentiality, integrity and availability. Connected sources indicate this OpenJDK/Java vulnerability has been addressed in multiple vendor advisories: Debian security notices (...

CVE-2015-7855

CVE-2015-7855 affects ntpd in NTP 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77. The decodenetnum() function can assert-botch when processing mode 6 or mode 7 packets with an unusually long data value, enabling a remote attacker to cause ntpd to crash (denial of service). Public references indicat...

CVE-2015-8011

CVE-2015-8011 (buffer overflow in lldp_decode of lldpd) affects Open vSwitch/openvswitch builds and allows remote attackers to cause a daemon crash or potentially execute arbitrary code via large management addresses and TLV boundary handling in lldpd before 0.8.0. Documented impacts include deni...

CVE-2017-5441

CVE-2017-5441 is a use-after-free in Mozilla Firefox (and related Mozilla products) that occurs when holding a text selection during scroll events, leading to a potentially exploitable crash. Affected: Firefox < 53 (and ESR lines), Thunderbird < 52.1, Firefox ESR

CVE-2017-5897

CVE-2017-5897 involves an out-of-bounds read in the Linux kernel’s IPv6 GRE handling (ip6_gre.c, ip6gre_err). Connected sources (Debian DSA-3791-1 and Cloud Foundry USN-3265-2) confirm the issue and note mitigation via kernel updates (e.g., Debian Jessie fix in linux 3.16.39-1+deb8u1; vendor advi...

CVE-2017-7793

CVE-2017-7793 is a use-after-free in Thunderbird/Fetch API where the worker or window is freed while in use, leading to a potentially exploitable crash. Public details reference Thunderbird

CVE-2017-7809

CVE-2017-7809 is a use-after-free in an editor DOM node during tree traversal that can crash the process. Affected products cited across connected docs include Mozilla Thunderbird and Mozilla Firefox components; IBM SONAS ships vulnerable Firefox releases and lists a fix in IBM SONAS version 1.5....

CVE-2017-8831

The CVE-2017-8831 issue affects the Linux kernel, specifically the saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c, with impact up to kernel version 4.11.5. It is a local, potentially privilege-escalating vulnerability described as a “double fetch” vulnerability caused by re-r...

CVE-2017-9062

Concisely: CVE-2017-9062 affects WordPress versions prior to 4.7.5, caused by improper handling of post meta data in the XML-RPC API. The underlying issue is in the set_custom_fields() path of wp-xmlrpc-server.php, which handles post meta data without sufficient validation. The vulnerability can ...

CVE-2018-10963

CVE-2018-10963 affects LibTIFF: the TIFFWriteDirectorySec() function in tif_dirwrite.c (LibTIFF up to 4.0.9) allows remote attackers to trigger a denial of service (assertion failure and crash) with a crafted TIFF file. Affected versions: LibTIFF ≤ 4.0.9. Remediation: upgrade to LibTIFF 4.0.10 or...

CVE-2018-12379

CVE-2018-12379 describes an out-of-bounds write triggered when the Mozilla Updater opens a MAR file containing a very long item filename. This requires that the updater is run locally with the malicious MAR file, potentially allowing a crash exploitable by an attacker. Affected products include F...

CVE-2018-14654

CVE-2018-14654 affects GlusterFS (up to 4.1.x) via the GF_XATTROP_ENTRY_IN_KEY path in the translator used during mounting, allowing a remote attacker with access to mounted volumes to create arbitrary, empty files on the server. Exploitation details are not provided in the given documents. Remed...

CVE-2018-20021

LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c0 contains a CWE-835: Infinite loop vulnerability in VNC client code (CVE-2018-20021). This flaw can let an attacker cause high resource consumption (CPU/RAM) via crafted VNC traffic. The issue is discussed across multiple Linux distrib...

CVE-2019-0053

The CVE-2019-0053 entry concerns the inetutils Telnet client in Junos OS, where environment-variable handling is insufficiently validated, causing a stack-based buffer overflow. This vulnerability is local to the Telnet client used from the CLI or shell, with inbound Telnet services unaffected. A...

CVE-2019-12594

CVE-2019-12594 affects DOSBox via insufficient access controls, allowing a program running in DOSBox to access host resources (e.g., /proc) when /proc is mounted. The root cause is a missing permission system that could enable arbitrary code execution in certain contexts. Multiple distributions h...

CVE-2019-13458

CVE-2019-13458 affects Open Ticket Request System (OTRS) and its Community Edition: 7.0.x (up to 7.0.8), 5.0.x (up to 5.0.36) and 6.0.x (up to 6.0.19). An attacker with an agent login and appropriate permissions can abuse OTRS notification tags in templates to disclose hashed user passwords. Publ...

CVE-2020-11042

CVE-2020-11042: In FreeRDP, version range greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. The vulnerability allows reading an attacker-defined amount of client memory (32-bit unsigned, up to 4 GB) into an intermediate buffer, which can crash the client ...