CVE-2018-18605

CVE-2018-18605 affects GNU Binutils libbfd (BFD) where a heap-based buffer over-read occurs in sec_merge_hash_lookup during section merges when entsize does not divide the size. This can allow remote DoS via specially crafted ELF (as demonstrated by ld). Affected products reference Binutils 2.31;...

CVE-2018-20749

LibVNC/libvncserver (vncserver) contains a heap out-of-bounds write in libvncserver/rfbserver.c. CVE-2018-20749 and CVE-2018-20750 reference heap-out-of-bounds writes with incomplete fixes related to CVE-2018-15127; advisories note that the fix for the earlier CVE was incomplete and Debian/ALAS e...

CVE-2018-5157

CVE-2018-5157 affects Mozilla Firefox prior to 60.0 (including ESR

CVE-2019-15145

DjVuLibre 3.5.27 is vulnerable to a denial-of-service via an out-of-bounds read when processing a crafted JB2 image. The root cause is a missing zero-byte check in libdjvu/GBitmap.h, affecting JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h. Exploitation requires a crafted JB2 image a...

CVE-2019-15939

CVE-2019-15939 affects OpenCV 4.1.0, with a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize (modules/objdetect/src/hog.cpp). The connected documents confirm the issue and its association with OpenCV 4.1.0, but do not provide details on affected vendor/version ranges beyond this relea...

CVE-2020-13933

Apache Shiro vulnerabilities CVE-2020-13933 affects Shiro

CVE-2020-22037

CVE-2020-22037 : FFmpeg 4.2 has a Denial of Service due to a memory leak in avcodec_alloc_context3 (options.c). Connected advisories show multiple distros addressed this with security updates (e.g., Debian DSA 4990/4998, Mageia MGASA-2021-0495, Alpine security page). Affected products/versions ar...

CVE-2020-27764

CVE-2020-27764 is rejected/not used; not a valid active vulnerability entry.

CVE-2022-0581

Wireshark CMS dissector crash (CVE-2022-0581) affects Wireshark 3.6.0–3.6.1 and 3.4.0–3.4.11, causing denial of service via crafted capture files or packet injection. Connected advisories confirm the issue and list fixes in later Wireshark builds: e.g., Debian LTS DLA-2967-1 fixes include Wiresha...

CVE-2023-3421

CVE-2023-3421 is a use-after-free in Media in Google Chrome/Chromium prior to 114.0.5735.198 that could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability is documented across multiple advisories confirming the affected component as Chromium’s media handli...

CVE-2023-52696

CVE-2023-52696: In the Linux kernel, powerpc/powernv: add a null pointer check in opal_powercap_init(); kasprintf() can return NULL on allocation failure. Connected advisories note this vulnerability is resolved, with Nessus entries describing Azure Linux 3.0 kernel security update and Unity Linu...

CVE-2024-0808

The CVE-2024-0808 entry is supported by multiple connected documents: it describes an Integer underflow in Chromium’s WebUI that affects Google Chrome prior to 121.0.6167.85, enabling a remote attacker to potentially trigger heap corruption via a malicious file (High/CRITICAL via CVSS). Affected ...

CVE-2024-1936

Thunderbird vulnerability CVE-2024-1936: In Thunderbird, the encrypted subject of an email could be incorrectly and permanently assigned to a different message in local cache, risking leakage of confidential subjects when replying. Affected product: Mozilla Thunderbird (versions prior to 115.8.1)...

CVE-2024-26743

Technical details about CVE-2024-26743 are not provided in the supplied documents. Please monitor vendor advisories for affected products, impact, and fixes.

CVE-2024-36941

CVE-2024-36941 is a Linux kernel vulnerability affecting the wifi nl80211 path. The issue is a NULL pointer dereference that could occur if parsing of the coalescing rule fails and the code dereferences NULL when freeing resources. The connected IBM advisory confirms the linux kernel fix for this...

CVE-2011-2726

Summary (CVE-2011-2726) : Drupal 7.x before 7.5 is affected by an access-bypass vulnerability related to file attachments in comments. If a site enables File upload fields on any entity or points fields to the private file directory, non-privileged users can download a file attached to a comment ...

CVE-2012-4186

CVE-2012-4186 : Heap-based buffer overflow in Mozilla Firefox’s nsWaveReader::DecodeAudioData. Affected products include Firefox before 16.0 (and Firefox ESR 10.x before 10.0.8), Thunderbird before 16.0, and SeaMonkey before 2.13. Vectors are unspecified in the provided docs, but exploitation wou...

CVE-2014-1505

CVE-2014-1505 affects Mozilla Firefox (and related Mozilla components) where SVG filter operations in feDisplacementMap could leak displacement-correlation data and potentially bypass Same Origin Policy via a timing attack, enabling partial information disclosure from a different domain. Affected...

CVE-2015-1781

CVE-2015-1781 affects the GNU C Library (glibc/eglibc) NSS gethostbyname_r and related functions. A misaligned input buffer can cause a buffer overflow, leading to a crash or potentially arbitrary code execution via crafted DNS responses. Public advisories (Debian, Cloud Foundry, CentOS/RH, CNVD)...

CVE-2015-2734

CVE-2015-2734 details (mode C): The vulnerability affects Mozilla Firefox (Direct3D 9 implementation) in Windows builds prior to 39.0, Firefox ESR 31.x prior to 31.8 and 38.x prior to 38.1, and Thunderbird prior to 38.1. The underlying issue is reading data from uninitialized memory locations in ...

CVE-2015-2922

CVE-2015-2922 is a Linux kernel IPv6 Neighbor Discovery flaw in the ndisc_router_discovery path that lets a crafted Router Advertisement with a small hop_limit reconfigure the hop-limit on the receiving interface. It affects the IPv6 stack prior to kernel 3.19.6; the impact is loss of connectivit...

CVE-2016-10741

CVE-2016-10741 – Linux kernel local DoS (xfs_aops race) Affected: Linux kernel before 4.9.3. Issue: a race between direct I/O and memory-mapped I/O (hole handling) in fs/xfs/xfs_aops.c is incorrectly handled with BUG_ON, leading to a system crash under local access. Impact: denial of service via ...

CVE-2016-5290

CVE-2016-5290: Memory safety bugs in Firefox 49 and Firefox ESR 45.4 (affecting Thunderbird <45.5, Firefox ESR <45.5, and Firefox

CVE-2017-5440

CVE-2017-5440 is a use-after-free in XSLT processing caused by failure to propagate error conditions during matching while evaluating context, leading to use of freed objects and potentially a crash. Affected products include Mozilla Firefox (Firefox < 53) and Firefox ESR, and Mozilla Thunderb...

CVE-2018-10102

WordPress 4.x prior to 4.9.5 is affected: the version string in get_the_generator is not escaped, enabling possible XSS in the generator tag. Root cause: lack of escaping in the generator tag output. Impact: potential client-side script execution via the generator tag. The vulnerability is mitiga...

CVE-2018-19489

CVE-2018-19489: In QEMU, v9fs_wstat in 9pfs/9p.c allows a race during file renaming that can crash the guest OS (DoS). This is evidenced by the CVE description in the initial document and related advisories; no explicit remediation or fixed version is provided in the connected text.

CVE-2018-20481

Poppler 0.72.0 contains a vulnerability in XRef::getEntry where unallocated XRef entries can cause a NULL pointer dereference and denial of service when XRefEntry::setFlag is invoked from Parser::makeStream in Parser.cc, exploitable via a crafted PDF. Connected advisories (Ubuntu USN-3865-1, SUSE...

CVE-2018-5818

The CVE-2018-5818 entry concerns LibRaw prior to 0.19.1, where an error in parse_rollei() (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop (potential DoS). Affected component: LibRaw (image demosaic/decoding code). Root cause: faulty handling in parse_rollei() leading to u...

CVE-2019-16738

MediaWiki up to 1.33.0 is affected by an information disclosure in Special:Redirect that exposes suppressed usernames via a User ID Lookup. Impact is information leakage of user identifiers; no exploitation details are provided in the sources beyond this disclosure. Public advisories and security...

CVE-2020-10932

CVE-2020-10932 affects Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker able to obtain precise side‑channel measurements (often in compromised environments like SGX enclaves) can recover the long‑term ECDSA private key by exploiting side channels in scalar multiplication, convertin...

CVE-2020-11047

CVE-2020-11047 : In FreeRDP, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A manipulated message from a server can enable reading up to 8 bytes of client memory. This affects FreeRDP versions after 1.1 and before 2.0.0. A patch is available in 2.0.0; upgrade to 2.0....

CVE-2020-14332

The CVE-2020-14332 issue affects the Ansible Engine (module_args) where tasks run in check mode may reveal sensitive data from event data, impacting confidentiality. Exploitation details are not provided in the documents. Remediation guidance across connected sources indicates applying vendor sec...

CVE-2020-27767

CVE-2020-27767 entry is rejected/not used; not an active vulnerability.

CVE-2020-6472

CVE-2020-6472 affects Chromium-based browsers (e.g., Chrome/Chromium) through the developer tools policy enforcement component. Affected version lineage is before 83.0.4103.61, per multiple advisories. The vulnerability is a policy enforcement error in the developer tools that could allow an atta...

CVE-2021-20272

Privoxy (before 3.0.32) is affected by an assertion-failure vulnerability that can cause a server crash when processing constructed CGI requests (CVE-2021-20272). Multiple connected advisories confirm this issue and link it to crafted CGI inputs that trigger crashes (and related CVEs in the same ...

CVE-2021-37992

CVE-2021-37992 affects the WebAudio component of Chromium/Google Chrome, with an out-of-bounds read that could enable a remote attacker to cause heap corruption via a crafted HTML page. Affected product: Chromium/Chrome prior to 95.0.4638.54. Mitigation: upgrade to Chromium 95.0.4638.54 or newer ...

CVE-2022-23097

ConnMan’s DNS proxy (forward_dns_reply) mishandles a strnlen call, causing an out-of-bounds read through version 1.40. Impact can include crashes or memory exposure; multiple advisories reference CVE-2022-23097. Remediation across sources varies by distro, but generally requires upgrading ConnMan...

CVE-2022-47520

The CVE-2022-47520 entry concerns Linux kernel before 6.0.11. It stems from missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c of the WILC1000 wireless driver, allowing an out-of-bounds read while parsing an RSN information element from a Netlink packet. Impact is high for...

CVE-2023-2468

CVE-2023-2468 matches multiple sources reporting an insecure implementation in Chrome’s PictureInPicture feature. The vulnerability arises from an inappropriate implementation in PictureInPicture, which allowed a remote attacker who had compromised the renderer process to obfuscate the security U...

CVE-2023-3422

The CVE-2023-3422 issue affects Chromium-based browsers (notably Google Chrome) and is triggered by a use-after-free in Guest View on versions before 114.0.5735.198. An attacker could persuade a user to install a malicious extension, potentially exploiting heap corruption via a crafted HTML page,...

CVE-2023-41360

CVE-2023-41360 – FRRouting FRR ahead-of-stream read of ORF header . The connected Nessus advisory for MiracleLinux 9 (FRR 8.x line) documents an issue in bgpd/bgp_packet.c where the initial byte of the ORF header can be read in an ahead-of-stream situation, affecting FRR releases up to 9.0. The C...

CVE-2024-26689

CVE-2024-26689 affects the Linux kernel via the Ceph subsystem: in fs/ceph/caps.c, encode_cap_msg() previously could perform a use-after-free due to a race between refcount increment and free in arg->xattr_buf handling. The race around ceph_buffer_get/ceph_buffer_put(ci->i_xattrs.blob) allo...

CVE-2024-36954

CVE-2024-36954 affects the Linux kernel and is resolved by a fix in the tipc subsystem. The vulnerability arises from a memory leak in tipc_buf_append when __skb_linearize() fails, because the skb is not freed on the error path. The documented patch moves the assignment *buf = NULL after the __sk...

CVE-2024-49989

CVE-2024-49989: In the Linux kernel, the drm/amd/display path fixes a double-free when unloading the amdgpu module. The issue arises during cleanup of display encoders for flexible/inflexible endpoints, potentially freeing the same object twice during amdgpu driver unload. Connected advisories (A...

CVE-2025-37797

CVE-2025-37797 affects the Linux kernel HFSC qdisc. A Use-After-Free can occur in hfsc_change_class() when handling certain child qdiscs (e.g., netem, codel) due to a time-of-check/time-of-use race: hfsc_change_class() may add a class to vttree after qdisc_peek_len() potentially clears the queue....

CVE-2026-4775

The CVE-2026-4775 entry concerns the libtiff library. A signed integer overflow in putcontig8bitYCbCr44tile can be triggered by a specially crafted TIFF file, leading to an out-of-bounds heap write. Documented impact includes denial of service (crash) or arbitrary code execution. Affected details...

CVE-2011-4517

CVE-2011-4517 affects JasPer 1.900.1 used for JPEG-2000 decoding. The flaw is in libjasper/jpc/jpc_cs.c: jpc_crg_getparms uses an incorrect data type during a size calculation, enabling remote attackers to trigger a heap-based buffer overflow via a crafted CRG marker segment in a JPEG2000 file. C...

CVE-2014-8159

CVE-2014-8159 describes a flaw in the Linux kernel InfiniBand/RDMA subsystem where the uverbs interface used to register memory regions can be abused by a local user to access arbitrary physical memory, potentially crash the system or escalate privileges via /dev/infiniband/uverbsX. The initial e...

CVE-2015-3405

CVE-2015-3405 concerns ntp-keygen generating MD5 keys with insufficient entropy on big-endian systems, enabling an attacker to brute-force 93 possible keys and potentially spoof NTP. The IBM Power HMC bulletin lists affected products and versions: Power HMC V7.3.0.0, V7.9.0.0, V8.1.0.0, and V8.2....

CVE-2016-5424

CVE-2016-5424 affects PostgreSQL up to version 9.5.x: remote authenticated users with CREATEDB or CREATEROLE can gain superuser privileges by supplying mishandled special characters (" , \, carriage return, or newline) in a database or role name during an administrative operation. Affected versio...