CVE-2018-19967

The CVE-2018-19967 issue concerns the Xen hypervisor (through 4.11.x) on Intel x86: guest OS users could cause a host hang due to Xen not mitigating Intel’s mishandling of certain HLE transactions tied to the KACQUIRE prefix. Connected sources (openSUSE/SUSE advisories and Xen advisories) confirm...

CVE-2024-27431

CVE-2024-27431 relates to the Linux kernel where, for XDP programs tied to a cpumap entry, the xdp_rxq_info structure backing the XDP invocation was not zero-initialized. This could cause xdp_md->rx_queue_index to reflect uninitialised memory values. The published fix zeros the rxq data struct...

CVE-2025-37797

CVE-2025-37797 affects the Linux kernel HFSC qdisc. A Use-After-Free can occur in hfsc_change_class() when handling certain child qdiscs (e.g., netem, codel) due to a time-of-check/time-of-use race: hfsc_change_class() may add a class to vttree after qdisc_peek_len() potentially clears the queue....

CVE-2015-0383

CVE-2015-0383 relates to an unspecified local vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4/R28.3.4, with impact to integrity and availability via Hotspot, as per the initial description. Connected documents reference multiple Java/Op...

CVE-2016-9074

CVE-2016-9074: Mozilla NSS timing-side-channel mitigation is insufficient in some circumstances. Affects NSS-based components used by Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox

CVE-2017-5407

CVE-2017-5407 describes a information-disclosure flaw in SVG filters due to floating-point timing side channels that can leak pixel data and history across origins. Affected products include Mozilla Firefox and Thunderbird versions older than 52 (Firefox ESR older than 45.8; Thunderbird older tha...

CVE-2017-7786

A buffer overflow in the image renderer can be triggered when painting non-displayable SVG elements, causing a crash and, in some advisories, potential arbitrary-code execution. Affected products include Mozilla Thunderbird and Firefox/Firefox ESR prior to certain versions (Thunderbird < 52.3,...

CVE-2017-7800

CVE-2017-7800 is a use-after-free in WebSockets that can trigger a crash when the connection object is freed before disconnection finishes. Affected: Thunderbird < 52.3, Firefox ESR < 52.3, Firefox

CVE-2018-16877

Pacemaker contains several documented vulnerabilities (CVE-2018-16877, CVE-2018-16878, CVE-2019-3885) discussed across multiple advisories. The issues include: a client–server authentication flaw enabling local privilege escalation, an insufficient verification that can cause DoS via uncontrolled...

CVE-2018-19541

CVE-2018-19541 : A heap-based buffer over-read of size 8 exists in the function jas_image_depalettize (libjasper/base/jas_image.c) in JasPer, affecting versions from 1.900.8 up to 2.0.16 listed in the Initial document. The vulnerability can cause a crash and may enable memory access issues. The C...

CVE-2018-20024

CVE-2018-20024 is a null pointer dereference in LibVNCServer/LibVNCClient before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7, leading to denial of service via the VNC client code. The connected Nessus/Ubuntu/Mageia entries cite this CVE among LibVNC vulnerabilities, but no explicit public pat...

CVE-2018-4013

CVE-2018-4013 affects the LIVE555 RTSP server library (liveMedia) version 0.92, where a vulnerability in the HTTP packet-parsing path can cause a stack-based buffer overflow leading to remote code execution. The root cause involves reading HTTP headers into stack buffers during RTSP-over-HTTP han...

CVE-2018-5818

The CVE-2018-5818 entry concerns LibRaw prior to 0.19.1, where an error in parse_rollei() (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop (potential DoS). Affected component: LibRaw (image demosaic/decoding code). Root cause: faulty handling in parse_rollei() leading to u...

CVE-2018-8800

CVE-2018-8800 affects rdesktop prior to 1.8.4. It is a heap-based buffer overflow in ui_clip_handle_data() causing memory corruption and likely remote code execution when connecting to a malicious server. Multiple advisories (Arch Linux ASA-201902-5, Debian DSA-4394-1/ DLA-1683-1) indicate upgrad...

CVE-2020-15984

CVE-2020-15984 affects Google Chrome on iOS before 86.0.4240.75, where the Omnibox (URL bar) does not enforce policies correctly, enabling a remote attacker to spoof the Omnibox via a crafted URL. Several advisories (Debian, FreeBSD, Arch) indicate the fixed version is 86.0.4240.75 or later, impl...

CVE-2020-17538

Ghostscript vulnerability CVE-2020-17538: a buffer overflow in GetNumSameData() within contrib/lips4/gdevlips.c affects Ghostscript versions 9.18–9.50 and can cause a denial of service when processing crafted PDFs. The issue is fixed in v9.51; affected users should upgrade to Ghostscript 9.51 or ...

CVE-2020-22037

CVE-2020-22037 : FFmpeg 4.2 has a Denial of Service due to a memory leak in avcodec_alloc_context3 (options.c). Connected advisories show multiple distros addressed this with security updates (e.g., Debian DSA 4990/4998, Mageia MGASA-2021-0495, Alpine security page). Affected products/versions ar...

CVE-2020-27764

CVE-2020-27764 is rejected/not used; not a valid active vulnerability entry.

CVE-2020-27765

CVE-2020-27765 describes a flaw in ImageMagick (MagickCore/segment.c). A crafted image can trigger undefined behavior via a division by zero, with impact most likely on availability. Affected are ImageMagick versions prior to 7.0.9-0. Mitigation/patch guidance is not in the initial description, b...

CVE-2020-28039

CVE-2020-28039 affects WordPress core, specifically is_protected_meta in wp-includes/meta.php. WordPress versions prior to 5.5.2 are vulnerable due to an incorrect determination of whether a meta key is protected, which allows arbitrary file deletion. The issue is addressed in WordPress 5.5.2 (se...

CVE-2020-6449

CVE-2020-6449 is a use-after-free vulnerability in the audio component of Google Chrome prior to 80.0.3987.149. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page. Documents confirm the affected product is Google Chrome/Chromium and that the fix was applied i...

CVE-2020-6529

CVE-2020-6529 involves an inappropriate WebRTC implementation in Google Chrome versions prior to 84.0.4147.89. An attacker positioned on an privileged network could leak cross-origin data via a crafted HTML page. The CVE is tied to WebRTC data handling in Chrome, with a base impact characterized ...

CVE-2020-6531

CVE-2020-6531 describes a side-channel information leakage in Chrome/Chromium’s Scroll to Text feature. A crafted HTML page could allow a remote attacker to leak cross-origin data. Public details indicate the issue affects Chrome/Chromium versions prior to 84.0.4147.89, with Debian noting a fix i...

CVE-2021-37968

The CVE-2021-37968 entry describes an insecure implementation in the Background Fetch API in Google Chrome, leading to potential cross-origin data leakage via a crafted HTML page. Affected software: Google Chrome (Background Fetch API); root cause: improper handling in the API implementation; imp...

CVE-2022-0730

CVE-2022-0730: In Cacti, authentication can be bypassed under certain LDAP conditions when anonymous binding is enabled. Public advisories (Debian DSA/DLA, Fedora/Amazon, ENISA EUVD) reference this as a vulnerability in cacti with authenticated LDAP bypass risk. Debian fixed multiple releases: fo...

CVE-2022-1785

CVE-2022-1785 is a Vim/Vi Improved (vim/vim) vulnerability described as an Out-of-bounds Write in vim/vim prior to 8.2.4977. Connected sources (ALMA/ALAS advisories) confirm the issue and list CVE-2022-1785 among fixed bulletins; remediation is to upgrade Vim to a version that contains the patch ...

CVE-2022-21151

CVE-2022-21151 involves Intel processors where optimization/removal of security-critical code in the processor microcode can allow an authenticated local attacker to cause information disclosure. Affected vectors are local access with low attack complexity and no user interaction. Public docs con...

CVE-2022-2978

CVE-2022-2978 – NILFS use-after-free in Linux kernel : A local attacker could trigger a use-after-free in nilfs_mdt_destroy via security_inode_alloc, potentially crashing the system or enabling privilege escalation. This vulnerability is tied to the NILFS filesystem in the Linux kernel. The conne...

CVE-2022-45060

CVE-2022-45060 – Varnish Cache HTTP/2 header forgery affects Varnish Cache 5.x and 6.x up to before 6.0.11, 7.x up to before 7.1.2, and 7.2.x up to before 7.2.1. An attacker can inject characters in HTTP/2 pseudo-headers that are invalid for HTTP/1 request lines, causing the Varnish server to gen...

CVE-2023-3216

CVE-2023-3216: Type confusion in V8/Chromium’s JavaScript engine causes heap corruption via a crafted HTML page, affecting Google Chrome pre-114.0.5735.133. The issue is documented across multiple feeds (Chromium/V8 type confusion with high impact). Affected software is Google Chrome/Chromium bro...

CVE-2023-36661

CVE-2023-36661 affects Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider. The underlying issue is a server-side request forgery (SSRF) via a crafted KeyInfo element in XML signatures. This yields unauthenticated SSRF risk with impact on availability (per CVE ...

CVE-2024-25189

The CVE concerns libjwt: 1.15.3 uses strcmp (not constant time) to verify authentication, enabling a timing side‑channel bypass. Connected sources confirm this is a legitimate vulnerability with high impact (CVE-2024-25189) and note Debian LTS advisories and Debian/DLA entries recommending an upg...

CVE-2024-35934

The CVE-2024-35934 issue affects the Linux kernel net/smc subsystem. Affected component: smc_pnet-related code in net/smc (pnet IDs list creation). Root cause: excessive RTNL (rtnl) lock pressure during net namespace/pnet initialization, caused by smc_pnet_create_pnetids_list() acquiring rtnl in ...

CVE-2024-46871

The CVE-2024-46871 entry concerns the Linux kernel's DRM/AMD display component. It fixes an incorrect definition for AMDGPU_DMUB_NOTIFICATION_MAX, where the enum dmub_notification_type was actually exposing 6 types instead of 5. The undercount could lead to out-of-bounds access when allocating th...

CVE-1999-0038

CVE-1999-0038 describes a buffer overflow in the xlock program that allows local users to execute commands as root. The connected sources (Red Hat CVE entry, PT Security listing, and multiple feeds) corroborate a local-privilege escalation due to a buffer overflow in xlock, but the documents do n...

CVE-2008-1105

CVE-2008-1105 is a remote-code-execution vulnerability in Samba: a heap-based buffer overflow in receive_smb_raw() in util/sock.c affects Samba 3.0.0–3.0.29, exploitable via crafted SMB responses. Public advisories (e.g., CentOS/RHEL RHSA-2008:0290) confirm a fix was backported and updates releas...

CVE-2011-2726

Summary (CVE-2011-2726) : Drupal 7.x before 7.5 is affected by an access-bypass vulnerability related to file attachments in comments. If a site enables File upload fields on any entity or points fields to the private file directory, non-privileged users can download a file attached to a comment ...

CVE-2014-3707

CVE-2014-3707 affects libcurl/curl prior to a non-vulnerable build when using CURLOPT_COPYPOSTFIELDS, where curl_easy_duphandle incorrectly copies HTTP POST data, causing an out-of-bounds read. Affected products/versions cited in the documents include libcurl/curl 7.17.1 through 7.38.0, enabling ...

CVE-2014-9584

CVE-2014-9584 affects the Linux kernel where the function parse_rock_ridge_inode_internal in fs/isofs/rock.c does not validate a length value in the ER System Use Field, enabling local users to obtain sensitive kernel memory via a crafted iso9660 image. This vulnerability exists in kernels before...

CVE-2015-3148

CVE-2015-3148 affects curl and libcurl (versions 7.10.6 through 7.41.0). The issue is improper reuse of authenticated Negotiate connections, which could allow a remote attacker to perform requests as another user by manipulating a connection during a request. The connected sources corroborate the...

CVE-2016-3705

CVE-2016-3705 affects libxml2 (tracked in CVE-2016-3705) and is caused by insufficient tracking of recursion depth in parser.c (functions xmlParserEntityCheck and xmlParseAttValueComplex). A crafted XML document with many nested entity references can exhaust the stack, causing a denial of service...

CVE-2017-7784

The CVE-2017-7784 issue is a use-after-free in the image observer during frame reconstruction after the observer has been freed, affecting Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2018-1000115

CVE-2018-1000115 – Memcached UDP amplification vulnerability. Memcached 1.5.5 contains an Insufficient Control of Network Message Volume (CWE-406) in UDP support, enabling a remote attacker to perform a denial-of-service via UDP traffic to port 11211 (amplification ~1:50,000). The issue is mitiga...

CVE-2018-12367

CVE-2018-12367 affects Mozilla Thunderbird < 60, Firefox ESR < 60.1, and Firefox

CVE-2018-19489

CVE-2018-19489: In QEMU, v9fs_wstat in 9pfs/9p.c allows a race during file renaming that can crash the guest OS (DoS). This is evidenced by the CVE description in the initial document and related advisories; no explicit remediation or fixed version is provided in the connected text.

CVE-2018-7995

CVE-2018-7995 describes a race condition in Linux kernel’s store_int_with_restart() (arch/x86/kernel/cpu/mcheck/mce.c) up to version 4.15.7. This flaw lets a local attacker with root access to write to /sys/devices/system/machinecheck/machinecheck/check_interval and trigger a denial of service/pa...

CVE-2018-8795

CVE-2018-8795 affects rdesktop up to and including v1.8.3. The vulnerability is an Integer Overflow that leads to a Heap-Based Buffer Overflow in process_bitmap_updates(), causing memory corruption and likely remote code execution when connecting to a malicious RDP server. Affected software: rdes...

CVE-2019-12248

CVE-2019-12248 affects OTRS (Open Ticket Request System) across multiple releases (OTRS/Community Edition 5.0.x–7.0.x, etc.). The issue arises when a malicious email sent to an OTRS system is quoted by a logged-in agent, causing the browser to load external image resources. Root cause: lack of re...

CVE-2019-16218

CVE-2019-16218 affects WordPress prior to 5.2.3, where stored comments can trigger XSS. Root cause is an input handling flaw in comments that allows script injection. The issue is documented in the CVE entry as WordPress before 5.2.3 allows XSS in stored comments. Public references indicate WordP...

CVE-2020-12693

CVE-2020-12693 affects Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3. In the scenario where Message Aggregation is enabled, a race condition can allow an authentication bypass through an Alternate Path or Channel and enable a user to launch a process as an arbitrary user. The connected ...