CVE-2018-19489

CVE-2018-19489: In QEMU, v9fs_wstat in 9pfs/9p.c allows a race during file renaming that can crash the guest OS (DoS). This is evidenced by the CVE description in the initial document and related advisories; no explicit remediation or fixed version is provided in the connected text.

CVE-2018-8795

CVE-2018-8795 affects rdesktop up to and including v1.8.3. The vulnerability is an Integer Overflow that leads to a Heap-Based Buffer Overflow in process_bitmap_updates(), causing memory corruption and likely remote code execution when connecting to a malicious RDP server. Affected software: rdes...

CVE-2019-12248

CVE-2019-12248 affects OTRS (Open Ticket Request System) across multiple releases (OTRS/Community Edition 5.0.x–7.0.x, etc.). The issue arises when a malicious email sent to an OTRS system is quoted by a logged-in agent, causing the browser to load external image resources. Root cause: lack of re...

CVE-2019-16218

CVE-2019-16218 affects WordPress prior to 5.2.3, where stored comments can trigger XSS. Root cause is an input handling flaw in comments that allows script injection. The issue is documented in the CVE entry as WordPress before 5.2.3 allows XSS in stored comments. Public references indicate WordP...

CVE-2019-9894

PuTTY (before 0.71) is affected by CVE-2019-9894: a remotely triggerable memory overwrite can occur during RSA key exchange prior to host key verification. Open-source advisories and vendor updates indicate this was addressed in PuTTY 0.71 and newer. The vulnerability enables memory corruption wi...

CVE-2020-13596

CVE-2020-13596 affects Django 2.2.x prior to 2.2.13 and 3.0.x prior to 3.0.7. The issue is an XSS vulnerability arising from query parameters generated by the admin ForeignKeyRawIdWidget not being properly URL encoded, enabling cross-site scripting. Several advisories note that upgrading Django t...

CVE-2020-22032

CVE-2020-22032 is a heap-based Buffer Overflow in FFmpeg 4.2 (libavfilter/vf_edgedetect.c, gaussian_blur) that may lead to memory corruption. Public records tie this to FFmpeg 4.2 and list it in multiple advisories (Ubuntu USN-5472-1, Debian DSA-4990-1) as affecting FFmpeg, with mitigations urgin...

CVE-2020-6402

CVE-2020-6402 affects Google Chrome on macOS (OS X) prior to 80.0.3987.87, where Insufficient policy enforcement in downloads could let a user who installed a crafted Chrome Extension execute arbitrary code. The root cause is a policy enforcement flaw in the Downloads component, enabling code exe...

CVE-2021-21107

CVE-2021-21107 is a Use-After-Free in the Chromium drag-and-drop path affecting Google Chrome/Chromium on Linux prior to 87.0.4280.141. The vulnerability could allow a remote attacker who compromises the renderer process to escape the sandbox via a crafted HTML page. Public advisories (Arch Linux...

CVE-2021-39254

The CVE-2021-39254 issue affects NTFS-3G prior to 2021.8.22, where a crafted NTFS image can trigger an integer overflow in memmove, causing a heap-based buffer overflow in ntfs_attr_record_resize. Connected advisories confirm NTFS-3G is the vulnerable component and that upgrades to a fixed versio...

CVE-2023-1814

CVE-2023-1814 affects Google Chrome/Chromium: insufficient validation of untrusted input in Safe Browsing allows bypassing download checking via a crafted HTML page. Public advisories note this as a Chrome/Chromium vulnerability; fixes were released in Chrome/Chromium 112.0.5615.49 (and related p...

CVE-2023-3422

The CVE-2023-3422 issue affects Chromium-based browsers (notably Google Chrome) and is triggered by a use-after-free in Guest View on versions before 114.0.5735.198. An attacker could persuade a user to install a malicious extension, potentially exploiting heap corruption via a crafted HTML page,...

CVE-2023-37369

CVE-2023-37369 affects Qt bases (Qt5/Qt6) with a vulnerability in QXmlStreamReader triggered by a crafted XML string, potentially causing an application crash due to a prefix-length handling bug. The issue is tied to Qt base components (qtbase-opensource-src) and has been addressed in multiple ad...

CVE-2024-0747

CVE-2024-0747 describes a CSP bypass: when a parent page loads a child in an iframe with unsafe-inline, the parent CSP could override the child CSP. Affected: Firefox before 122, Firefox ESR before 115.7, and Thunderbird before 115.7. Practical impact: potential bypass of content security policie...

CVE-2024-27059

CVE-2024-27059 refers to a Linux kernel vulnerability in the usb-storage isd200 sub-driver. The issue arises from using ATA ID values HEADS and SECTORS to derive cylinder/head for READ/WRITE CDBs; division/modulus by zero could occur if either value is 0. The fix blocks binding to devices with AT...

CVE-2024-35845

The Linux kernel contains a vulnerability in the iwlwifi wifi driver within the dbg-tlv component. The issue stems from the iwl_fw_ini_debug_info_tlv being used as a string without proper NUL termination , which can lead to memory safety issues. This vulnerability has been resolved in various dis...

CVE-2024-35893

CVE-2024-35893 relates to a Linux kernel net/sched kernel-infoleak via act_skbmod. The issue was that tcf_skbmod_dump() copied four bytes from kernel stack to user space because struct tc_skbmod has a four‑byte hole. The fix clears the structure before filling fields to prevent uninitialized data...

CVE-2024-36954

CVE-2024-36954 affects the Linux kernel and is resolved by a fix in the tipc subsystem. The vulnerability arises from a memory leak in tipc_buf_append when __skb_linearize() fails, because the skb is not freed on the error path. The documented patch moves the assignment *buf = NULL after the __sk...

CVE-2025-3155

CVE-2025-3155 is a documented flaw in Yelp (GNOME Help) where help documents can execute arbitrary scripts, enabling potential exfiltration of user files. The connected advisories corroborate that this affects the Yelp/Yelp-xsl components across multiple distributions (e.g., Debian, Red Hat-deriv...

CVE-2011-1440

CVE-2011-1440 affects Google Chrome prior to 11.0.696.57. The vulnerability is a use-after-free in handling the ruby element and CSS token sequences in the rendering pipeline (WebKit-based). Exploitation is remote and could cause a denial of service or possibly other unspecified impact. The avail...

CVE-2014-8159

CVE-2014-8159 describes a flaw in the Linux kernel InfiniBand/RDMA subsystem where the uverbs interface used to register memory regions can be abused by a local user to access arbitrary physical memory, potentially crash the system or escalate privileges via /dev/infiniband/uverbsX. The initial e...

CVE-2015-1781

CVE-2015-1781 affects the GNU C Library (glibc/eglibc) NSS gethostbyname_r and related functions. A misaligned input buffer can cause a buffer overflow, leading to a crash or potentially arbitrary code execution via crafted DNS responses. Public advisories (Debian, Cloud Foundry, CentOS/RH, CNVD)...

CVE-2016-0643

CVE-2016-0643 is an unspecified vulnerability affecting Oracle MySQL up to 5.7.11 and MariaDB up to 5.5.49, 10.0.x up to 10.0.25, and 10.1.x up to 10.1.14, allowing local users to affect confidentiality through DML-related vectors. Public documents confirm affected products/versions and indicate ...

CVE-2016-0648

CVE-2016-0648 is an unspecified local-privilege/availability vulnerability in Oracle MySQL (versions 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier) and in MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 that can affect availability via PS-related vectors. Conn...

CVE-2017-2520

CVE-2017-2520 (SQLite, affected Apple OSes) is a vulnerability where a crafted SQL statement could cause a buffer overflow, enabling remote code execution or a denial of service. Affected products/versions (from provided sources): Apple iOS <10.3.2, macOS <10.12.5, tvOS <10.2.1, watchOS

CVE-2017-5445

CVE-2017-5445 describes a memory-read vulnerability in Mozilla products when parsing the application/http-index-format content, caused by uninitialized values used to create an array. The impact is information disclosure by reading uninitialized memory in affected components. Affected versions pe...

CVE-2017-5464

CVE-2017-5464 affects Mozilla products: Thunderbird

CVE-2017-5637

CVE-2017-5637 affects Apache ZooKeeper prior to fixes in 3.4.10 and 3.5.3. The issue: two four-letter commands, wchp and wchc, are CPU-intensive and can cause a denial of service by overwhelming CPU on the server, rendering it unable to serve legitimate clients. Affected products/versions include...

CVE-2017-7792

The CVE-2017-7792 issue affects Thunderbird (< 52.3), Firefox ESR (< 52.3), and Firefox (

CVE-2017-7810

CVE-2017-7810 refers to memory-safety bugs reported in Firefox 55 and Firefox ESR 52.3, with potential to exploit memory corruption to run arbitrary code. Connected documents confirm that Thunderbird

CVE-2018-19490

CVE-2018-19490 affects Gnuplot 5.2.5 in datafile.c (df_generate_ascii_array_entry). The issue is a heap-based buffer overflow caused by passing an overlong right bound string to the plot function, which can lead to a crash and, per CVSS, potential high-severity impact. Exploitation details or aff...

CVE-2018-20622

CVE-2018-20622 affects JasPer 2.0.14 and is due to a memory leak in base/jas_malloc.c in libjasper.a when using "--output-format jp2". Public docs consistently identify the vulnerability as a memory leak rather than a direct crash or code execution vector; no exploit details or attack vectors are...

CVE-2018-6767

CVE-2018-6767 affects WavPack 5.1.0, with a stack-based buffer over-read in ParseRiffHeaderConfig (cli/riff.c) that can cause denial of service via crafted RF64 files; related issues in ParseDsdiffHeaderConfig and ParseCaffHeaderConfig can lead to heap/global over-reads or memory corruption in va...

CVE-2018-7456

Summary: CVE-2018-7456 is a NULL pointer dereference in LibTIFF’s TIFFPrintDirectory() (tif_print.c) when using tiffinfo, affecting LibTIFF 4.0.9 and earlier (and related 3.x series in older advisories). Several connected sources confirm the issue and its classification as a denial of service ris...

CVE-2019-13755

CVE-2019-13755 : Google Chrome prior to 79.0.3945.79 suffers from insufficient policy enforcement in extensions, allowing a remote attacker to disable extensions via a crafted HTML page. Connected sources confirm this is a Chrome-extension policy issue, with public fixes in 79.0.3945.79 and later...

CVE-2019-16738

MediaWiki up to 1.33.0 is affected by an information disclosure in Special:Redirect that exposes suppressed usernames via a User ID Lookup. Impact is information leakage of user identifiers; no exploitation details are provided in the sources beyond this disclosure. Public advisories and security...

CVE-2019-18389

CVE-2019-18389 describes a heap-based buffer overflow in the virglrenderer transfer path. Specifically, vrend_renderer_transfer_write_iov in vrend_renderer.c (virglrenderer up to version 0.8.0) can be triggered by VIRGL_CCMD_RESOURCE_INLINE_WRITE, enabling denial of service and potentially guest‑...

CVE-2019-20162

GPAC CVE-2019-20162 affects GPAC 0.8.0 and 0.9.0-development-20191109. The vulnerability is a heap-based buffer overflow in gf_isom_box_parse_ex() (isomedia/box_funcs.c). The provided documents do not specify exploit details, impacted platforms beyond GPAC versions, potential impact (beyond gener...

CVE-2020-0182

CVE-2020-0182 affects libexif, where exif_entry_get_value may perform an out-of-bounds read due to a missing bounds check, enabling local information disclosure without extra privileges. The published advisories and vendor bulletins (e.g., Red Hat RHSA-2020:4040; Debian DLA-2249-1; ALAS2-2020-152...

CVE-2020-10932

CVE-2020-10932 affects Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker able to obtain precise side‑channel measurements (often in compromised environments like SGX enclaves) can recover the long‑term ECDSA private key by exploiting side channels in scalar multiplication, convertin...

CVE-2020-25596

Technical details about CVE-2020-25596 are not provided in the supplied documents. Affected products, exploitability, and fixes are described only at a high level in the initial description; monitor for updates.

CVE-2021-21115

CVE-2021-21115 : In Google Chrome before 87.0.4280.141, a use-after-free in the Safe Browsing component could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. This is confirmed in connected advisories (e.g., Arch Linux ASA-202101-6) referencing Chromium ...

CVE-2021-37967

CVE-2021-37967 describes an insecure implementation in the Background Fetch API in Google Chrome/Chromium, where a remote attacker who had already compromised the renderer process could leak cross-origin data via a crafted HTML page. The issue affects Chrome/Chromium prior to version 94.0.4606.54...

CVE-2022-23097

ConnMan’s DNS proxy (forward_dns_reply) mishandles a strnlen call, causing an out-of-bounds read through version 1.40. Impact can include crashes or memory exposure; multiple advisories reference CVE-2022-23097. Remediation across sources varies by distro, but generally requires upgrading ConnMan...

CVE-2023-41361

CVE-2023-41361 affects FRRouting FRR 9.0; the bgpd/bgp_open.c path does not check for an overly large rcv software version length, enabling a potential issue. The NVD/NIST entry confirms a critical impact (C:H/I:H/A:H). Debian/DEB LTS advisories indicate a fixed package is available in Debian; en...

CVE-2023-52679

CVE-2023-52679 is a Linux kernel vulnerability: a double-free in of_parse_phandle_with_args_map was mitigated. The inner loop freed the previous reference via of_node_put(new) and assumed the next value was NULL. The fix ensures that the loop invariant holds by resetting the temporary to NULL aft...

CVE-2023-52696

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a pointer to dynamically allocated memorywhich can be NULL upon failure.

CVE-2023-6206

CVE-2023-6206 is described across connected sources as a clickjacking-related issue tied to the fullscreen transition in Mozilla Firefox and Thunderbird. The vulnerability affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The issue is dis...

CVE-2007-6353

CVE-2007-6353 is an integer overflow in the Exiv2 library (in exif.cpp) that allows context-dependent attackers to trigger a heap-based buffer overflow via a crafted EXIF file, potentially enabling arbitrary code execution. Public disclosures across multiple OS advisories confirm impact on libexi...

CVE-2014-0198

The connected F5 advisory confirms CVE-2014-0198: the do_ssl3_write function in OpenSSL 1.x (up to 1.0.1g) with SSL_MODE_RELEASE_BUFFERS enabled can trigger a denial-of-service via a NULL pointer dereference in certain recursive alert paths. Impact is remote DoS; no exploitation details are provi...