CVE-2023-4368

CVE-2023-4368 : In Google Chrome/Chromium, insufficient policy enforcement in the Extensions API prior to 116.0.5845.96 allowed a user-wacched to install a malicious extension to bypass an enterprise policy via a crafted HTML page. The issue is described as a Medium severity in the Chromium advis...

CVE-2023-6861

The CVE-2023-6861 issue is a heap buffer overflow in nsWindow::PickerOpen(void) when Firefox/Thunderbird run in headless mode. Affected products: Firefox ESR <115.6, Thunderbird <115.6, and Firefox

CVE-2024-0750

CVE-2024-0750 affects Firefox (versions prior to 122) and Thunderbird (prior to 115.7), with the issue described as a bug in popup notifications delay calculation that could allow a user to be tricked into granting permissions. Connected advisories confirm the vulnerability and link it to Mozilla...

CVE-2024-26883

CVE-2024-26883 : In the Linux kernel, a vulnerability was fixed that affects 32-bit architectures in the stackmap handling used by BPF. The overflow risk arises when roundup_pow_of_two() is used to compute the number of hash buckets, as a 32‑bit left shift can overflow and cause undefined behavio...

CVE-2014-9112

CVE-2014-9112 affects GNU cpio (2.11) via a heap-based buffer overflow in process_copy_in triggered by crafted archives. IBM notes potential remote code execution or elevated-privilege crash on PowerKVM systems; Debian/Red Hat/Fedora advisories confirm fixes in respective package updates (e.g., D...

CVE-2014-9116

CVE-2014-9116 concerns the Mutt mail client. The description specifies that the write_one_header function in mutt 1.5.23 mishandles newline characters at the beginning of a header, allowing a remote attacker to cause a denial of service (crash) by sending a header with an empty body. This conditi...

CVE-2015-0241

CVE-2015-0241 affects PostgreSQL: the to_char() function can crash or allow remote authenticated code execution via a crafted numeric formatting template (buffer over-read) or timestamp template (buffer overflow). Affected versions include PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x befo...

CVE-2016-5300

Expat CVE-2016-5300 is a denial-of-service vulnerability in the Expat XML parser caused by insufficient entropy used for hash initialization. The issue allows context-dependent attackers to cause CPU exhaustion via crafted identifiers in XML documents. Connected material confirms this as an Expat...

CVE-2017-18635

CVE-2017-18635 describes an XSS in noVNC before 0.6.2 where a remote VNC server can inject arbitrary HTML into the noVNC page via status field messages (e.g., server name). Connected advisories confirm affected packages across multiple distros (Debian, Ubuntu, Mageia, Red Hat-related advisories) ...

CVE-2017-5432

CVE-2017-5432 is a use-after-free in Firefox < 53 that can trigger a potentially exploitable crash during certain text-input selection. The vulnerability also affects related Mozilla products in older ESR/thunderbird branches (e.g., Thunderbird < 52.1; ESR

CVE-2017-5445

CVE-2017-5445 describes a memory-read vulnerability in Mozilla products when parsing the application/http-index-format content, caused by uninitialized values used to create an array. The impact is information disclosure by reading uninitialized memory in affected components. Affected versions pe...

CVE-2018-18284

Ghostscript 9.25 and earlier is affected by CVE-2018-18284, where the sandbox protection can be bypassed via vectors involving the 1Policy operator. Affected component: Ghostscript interpreter; root cause: sandbox bypass in policy handling. Impact: sandbox escape via crafted PostScript; in the Ar...

CVE-2018-20024

CVE-2018-20024 is a null pointer dereference in LibVNCServer/LibVNCClient before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7, leading to denial of service via the VNC client code. The connected Nessus/Ubuntu/Mageia entries cite this CVE among LibVNC vulnerabilities, but no explicit public pat...

CVE-2018-4013

CVE-2018-4013 affects the LIVE555 RTSP server library (liveMedia) version 0.92, where a vulnerability in the HTTP packet-parsing path can cause a stack-based buffer overflow leading to remote code execution. The root cause involves reading HTTP headers into stack buffers during RTSP-over-HTTP han...

CVE-2018-5748

CVE-2018-5748 affects libvirt and its QEMU monitoring path (qemu/qemu_monitor.c). A large QEMU reply can trigger memory exhaustion, enabling a denial-of-service. Connected documents also note an incomplete fix for CVE-2018-5748 that may be triggered via the QEMU guest agent (CVE-2018-1064). Vulne...

CVE-2018-7456

Summary: CVE-2018-7456 is a NULL pointer dereference in LibTIFF’s TIFFPrintDirectory() (tif_print.c) when using tiffinfo, affecting LibTIFF 4.0.9 and earlier (and related 3.x series in older advisories). Several connected sources confirm the issue and its classification as a denial of service ris...

CVE-2019-14970

CVE-2019-14970 affects VLC media player (3.0.7.1 and earlier). The vulnerability is in the MKV demuxer code path, specifically mkv::event_thread_t, allowing a crafted .mkv file to trigger a heap-based buffer overflow. Public disclosures across multiple advisories confirm VLC 3.0.8 fixes this and ...

CVE-2019-20161

CVE-2019-20161 affects GPAC up to version 0.8.0 and 0.9.0-development-20191109, due to a heap-based buffer overflow in ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c. The connected documents confirm the affected component and function and describe the impact as a heap-based overflow. Multipl...

CVE-2020-14330

CVE-2020-14330 (Ansible) is an Improper Output Neutralization for Logs flaw in the uri module that can expose sensitive data in logs/output, including keys from playbooks, affecting confidentiality. The vulnerability affects Ansible Engine/uri usage with local access; no exploit details are provi...

CVE-2020-16291

Ghostscript vulnerability CVE-2020-16291 is a buffer overflow in contrib/gdevdj9.c affecting Ghostscript versions 9.18 through 9.50, which can cause a denial of service when processing a crafted PDF. The issue is fixed in Ghostscript 9.51. Affected users should upgrade to >= 9.51 to mitigate t...

CVE-2020-22032

CVE-2020-22032 is a heap-based Buffer Overflow in FFmpeg 4.2 (libavfilter/vf_edgedetect.c, gaussian_blur) that may lead to memory corruption. Public records tie this to FFmpeg 4.2 and list it in multiple advisories (Ubuntu USN-5472-1, Debian DSA-4990-1) as affecting FFmpeg, with mitigations urgin...

CVE-2020-25596

Technical details about CVE-2020-25596 are not provided in the supplied documents. Affected products, exploitability, and fixes are described only at a high level in the initial description; monitor for updates.

CVE-2020-25600

The connected XSA-342 advisory provides concrete details for CVE-2020-25600: Xen 2-level event channel model mismanages the per-guest limit, causing 32-bit x86 domains (including Domain 0) to observe successful allocations that should fail, risking corruption of the shared info structure and enab...

CVE-2020-25602

CVE-2020-25602 : Xen up to 4.14.x contains a vulnerability where an x86 PV guest accessing the MISC_ENABLE MSR (0x1a0) triggers a host crash due to missing #GP fault handling when reading this Intel-specific MSR. The vulnerability can crash the host Xen instance, enabling a local Denial of Servic...

CVE-2020-25604

CVE-2020-25604 in Xen up to 4.14.x describes a race condition when migrating timers between x86 HVM vCPUs. The locking model can allow a second vCPU of the same guest to release a lock it did not acquire, potentially causing a hang or crash (DoS) of the hypervisor. Affected: all Xen versions on x...

CVE-2020-6528

CVE-2020-6528 affects Google Chrome/iOS with a vulnerability in basic authentication that allowed spoofing the Omnibox. The issue is fixed in Chrome 84.0.4147.89 (stable channel); update to that release or newer. Other connected advisories confirm a fix in the corresponding Chromium/Chrome releas...

CVE-2021-37967

CVE-2021-37967 describes an insecure implementation in the Background Fetch API in Google Chrome/Chromium, where a remote attacker who had already compromised the renderer process could leak cross-origin data via a crafted HTML page. The issue affects Chrome/Chromium prior to version 94.0.4606.54...

CVE-2021-37977

CVE-2021-37977 is a use-after-free in the Garbage Collection of the Chromium browser engine (pre-94.0.4606.81). Exploitation could enable remote code execution via a crafted HTML page, with heap corruption as the underlying risk. The vulnerability affects Google Chrome/Chromium prior to the patch...

CVE-2021-38171

CVE-2021-38171 affects FFmpeg 4.4 and is described as adts_decode_extradata in libavformat/adtsenc.c not checking the return value of init_get_bits; the second argument to init_get_bits can be crafted. The connected documents confirm this as the root cause, noting that a crafted input could explo...

CVE-2021-39254

The CVE-2021-39254 issue affects NTFS-3G prior to 2021.8.22, where a crafted NTFS image can trigger an integer overflow in memmove, causing a heap-based buffer overflow in ntfs_attr_record_resize. Connected advisories confirm NTFS-3G is the vulnerable component and that upgrades to a fixed versio...

CVE-2022-1619

CVE-2022-1619 is a heap-based buffer overflow in Vim's cmdline_erase_chars (vim/vim) before version 8.2.4899. The vulnerability can crash Vim, corrupt memory, and potentially enable remote code execution. The connected Astra Linux bulletin confirms the same technical detail. The provided document...

CVE-2022-21151

CVE-2022-21151 involves Intel processors where optimization/removal of security-critical code in the processor microcode can allow an authenticated local attacker to cause information disclosure. Affected vectors are local access with low attack complexity and no user interaction. Public docs con...

CVE-2022-3061

Astra Linux advisories confirm a Linux kernel fix related to the pixclock divide-by-zero issue in i740/i740fb families, aligning with CVE-2022-3061. The fix involves validating pixclock before use (e.g., zero check in charger-like var handling such as savagefb_check_var / i740fb equivalent) and n...

CVE-2022-3169

CVE-2022-3169 - Linux kernel NVMe host driver. A denial-of-service condition may occur when NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET are issued in sequence via the device file, potentially causing a PCIe link disconnect. Affected component is the Linux kernel’s NVMe host/driver pathway; the f...

CVE-2022-33741

CVE-2022-33741 concerns Linux PV frontend frontends (Block and Network) used by Xen that leak data through memory sharing with the backend. The root cause described across sources is that these frontends do not zero memory regions before sharing them with the backend, and the grant table granular...

CVE-2023-1668

CVE-2023-1668 — Open vSwitch (OVS) has a flaw where, when processing an IP packet with protocol 0, OVS installs a datapath flow whose action does not modify the IP header. This can cause a datapath rule matching all IP protocols (nw_proto wildcarded) to have an incorrect action, risking improper ...

CVE-2012-3158

CVE-2012-3158 – Oracle MySQL/MariaDB context : Affected MySQL Server components in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Protocol. Multiple connected advisories (e.g...

CVE-2015-0412

CVE-2015-0412 affects Oracle Java SE 6u85, 7u72, and 8u25 with exploitation via JAX-WS vectors, potentially impacting confidentiality, integrity and availability. Connected sources indicate this OpenJDK/Java vulnerability has been addressed in multiple vendor advisories: Debian security notices (...

CVE-2015-2925

The vulnerability CVE-2015-2925 affects the Linux kernel prior to 4.2.4, specifically the prepend_path function in fs/dcache.c. It allows a local attacker to bypass container protections by renaming a directory inside a bind mount, enabling a double-chroot-style escape. The impact is enabling pri...

CVE-2015-7703

CVE-2015-7703: ntpd remote configuration feature exposes a file overwrite risk via the :config command when remote configuration is enabled and the attacker knows the configuration password. Affected: ntpd 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77. Connected documents confirm this as a real vu...

CVE-2016-0755

CVE-2016-0755 affects libcurl's lib/url.c ConnectionExists handling for NTLM-authenticated proxy connections. The issue allows a remote attacker to reuse proxy connections authenticated as different users, potentially authenticating as another user via a crafted request. Public advisories confirm...

CVE-2016-6207

The CVE-2016-6207 issue affects the GD Graphics Library (libgd) up to version 2.2.3, due to an integer overflow in _gdContributionsAlloc within gd_interpolation.c. This allows remote attackers to trigger a denial of service via an out-of-bounds memory write or memory consumption. A patch/update t...

CVE-2017-5404

CVE-2017-5404 is a use-after-free in Firefox/Thunderbird when manipulating ranges in selections with one node inside a native anonymous tree and one node outside it, leading to a potentially exploitable crash. Affected: Firefox versions before 52 and Firefox ESR before 45.8; Thunderbird versions ...

CVE-2017-7867

CVE-2017-7867 is a heap-based buffer overflow in ICU for C/C++, caused by an out-of-bounds write in utf8TextAccess and utext_setNativeIndex*, leading to potential remote code execution or denial of service. The IBM bulletin (and related reports) confirm the flaw affects ICU prior to 2017-02-13 an...

CVE-2017-9063

CVE-2017-9063 affects WordPress before 4.7.5 and is a stored XSS in the Customizer due to an invalid customization session. Impact: potential script execution in users’ browsers. remediation: upgrade WordPress to 4.7.5 or later. Notes from connected docs confirm the issue details and version boun...

CVE-2018-1083

CVE-2018-1083 affects zsh: a stack/buffer overflow in the shell’s auto-complete path handling (gen_matches_files in compctl.c) can allow a local, unprivileged user to execute code in their own context, escalating privileges if the user is privileged. Public advisories and vendor notes confirm mul...

CVE-2018-10963

CVE-2018-10963 affects LibTIFF: the TIFFWriteDirectorySec() function in tif_dirwrite.c (LibTIFF up to 4.0.9) allows remote attackers to trigger a denial of service (assertion failure and crash) with a crafted TIFF file. Affected versions: LibTIFF ≤ 4.0.9. Remediation: upgrade to LibTIFF 4.0.10 or...

CVE-2018-17481

CVE-2018-17481 describes a use-after-free in PDFium used by Google Chrome before 71.0.3578.98, enabling potential heap corruption via a crafted PDF file. Affected software/components: Google Chrome and the PDFium library. Impact per sources: remote attacker could exploit heap corruption; Chrome’s...

CVE-2018-18605

CVE-2018-18605 affects GNU Binutils libbfd (BFD) where a heap-based buffer over-read occurs in sec_merge_hash_lookup during section merges when entsize does not divide the size. This can allow remote DoS via specially crafted ELF (as demonstrated by ld). Affected products reference Binutils 2.31;...

CVE-2018-19490

CVE-2018-19490 affects Gnuplot 5.2.5 in datafile.c (df_generate_ascii_array_entry). The issue is a heap-based buffer overflow caused by passing an overlong right bound string to the plot function, which can lead to a crash and, per CVSS, potential high-severity impact. Exploitation details or aff...