10003 matches found
CVE-2024-0753
CVE-2024-0753: Affects Firefox before 122, Firefox ESR before 115.7, and Thunderbird before 115.7. In certain HSTS configurations, a subdomain could bypass the upper-domain HSTS policy. Public documents from Astra Linux, Debian LTS, and Red Hat/ALAS advisories confirm this as a subdomain HSTS byp...
CVE-2024-26659
CVE-2024-26659 (Linux kernel) affects xHCI by mishandling isoc Babble and Buffer Overrun events. The driver could release a multi-TRB TD prematurely when an early TRB reports an error, risking loss of the final completion event and a misleading “Transfer event TRB DMA ptr not part of current TD” ...
CVE-2024-27431
CVE-2024-27431 relates to the Linux kernel where, for XDP programs tied to a cpumap entry, the xdp_rxq_info structure backing the XDP invocation was not zero-initialized. This could cause xdp_md->rx_queue_index to reflect uninitialised memory values. The published fix zeros the rxq data struct...
CVE-2024-46871
The CVE-2024-46871 entry concerns the Linux kernel's DRM/AMD display component. It fixes an incorrect definition for AMDGPU_DMUB_NOTIFICATION_MAX, where the enum dmub_notification_type was actually exposing 6 types instead of 5. The undercount could lead to out-of-bounds access when allocating th...
CVE-2025-3155
CVE-2025-3155 is a documented flaw in Yelp (GNOME Help) where help documents can execute arbitrary scripts, enabling potential exfiltration of user files. The connected advisories corroborate that this affects the Yelp/Yelp-xsl components across multiple distributions (e.g., Debian, Red Hat-deriv...
CVE-2014-9529
CVE-2014-9529: A race condition in Linux kernel key garbage collection (key_gc_unused_keys in security/keys/gc.c) up to 3.18.2 can enable local users to cause DoS or memory corruption during key garbage collection via keyctl. Connected advisory confirms kernel upstream fix and lists commit a3a878...
CVE-2015-4913
CVE-2015-4913 affects Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier. It is a remote authenticated vulnerability exposing availability via DML-related vectors (un disclosed). Root cause is unspecified in the provided description; no specific fixes or patch versions are listed. It i...
CVE-2015-7499
CVE-2015-7499 (libxml2) involves a heap-based buffer overflow in the xmlGROW function of parser.c, affecting libxml2 prior to 2.9.3. The consequence described is memory disclosure/leakage under certain crafted XML inputs. The Amazon Linux 2 advisory ALAS2-2019-1220 confirms libxml2 exposure and l...
CVE-2016-0648
CVE-2016-0648 is an unspecified local-privilege/availability vulnerability in Oracle MySQL (versions 5.5.48 and earlier, 5.6.29 and earlier, 5.7.11 and earlier) and in MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 that can affect availability via PS-related vectors. Conn...
CVE-2016-1000342
CVE-2016-1000342 is associated with Bouncy Castle JCE Provider up to version 1.55 and earlier, where ECDSA does not fully validate ASN.1 encoding of signatures during verification. This can allow injection of extra elements in the signature sequence and may permit the introduction of “invisible” ...
CVE-2017-18189
SoX CVE-2017-18189 is a NULL pointer dereference in the startread function (xa.c) that occurs when a crafted header specifies zero channels. The issue can cause an infinite loop and a subsequent crash/denial of service. Affected product: SoX up to version 14.4.2. The vulnerability is exploitable ...
CVE-2017-2888
SDL2 versions affected: SDL 2.0.x with vulnerable code path when creating a new RGB Surface (notably in 2.0.5). Root cause: integer overflow during surface allocation due to crafted image input, leading to too little memory allocation, a subsequent buffer overflow, and potential code execution. P...
CVE-2017-3144
ISC DHCP vulnerability CVE-2017-3144 arises from failure to properly clean up closed OMAPI connections, which can exhaust the DHCP server’s socket descriptor pool and cause a denial of service. Affected releases include ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, and 4.3.0 to 4.3.6; older vers...
CVE-2017-6301
CVE-2017-6301 affects ytnef (libytnef) up to 1.9.0; the issue is an out-of-bounds read in the TNEF parsing path described as part of the patch set (4 of 9). Multiple sources (MGASA-2017-0174, USN-4615-1, OSV entries) describe this family of vulnerabilities as heap-related with potential crashes/D...
CVE-2017-9462
CVE-2017-9462 affects Mercurial prior to 4.1.3. When using the hg serve --stdio server, remote authenticated users could trigger the Python debugger by passing a repository name that uses --debugger, enabling execution of arbitrary code. Public advisories confirm this vulnerability and reference ...
CVE-2018-14617
CVE-2018-14617 affects the Linux kernel up to 4.17.10. A NULL pointer dereference and panic occur in hfsplus_lookup() when opening a file in an HFS+ filesystem with malformed catalog data mounted read-only without a metadata directory, potentially causing a kernel panic. Connected Nessus entry co...
CVE-2018-16643
CVE-2018-16643 affects ImageMagick 7.0.8-4 where ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage fail to check the return value of fputc, enabling a remote denial of service via a crafted image file. The vulnerability arises from not validating fputc results during image writing path...
CVE-2018-5131
CVE-2018-5131 affects Mozilla Firefox (ESR < 52.7 and Firefox
CVE-2020-27754
ImageMagick vulnerability CVE-2020-27754 stems from overflow-prone calls to PixelPacketIntensity() in IntensityCompare() within magick/quantize.c. A crafted input could return overflowed pixel intensities to callers; the patch fixes this by introducing ConstrainPixelIntensity() to clamp values wi...
CVE-2020-6466
CVE-2020-6466 is a use-after-free vulnerability in Google Chrome’s media component (pre-83.0.4103.61). The issue could allow a remote attacker who has renderer access to potentially execute arbitrary code or escape the sandbox via a crafted HTML page. Debian/Arch advisories confirm mitigation by ...
CVE-2020-6467
CVE-2020-6467 is a use-after-free vulnerability in the WebRTC component of Chromium/Google Chrome prior to 83.0.4103.61. The advisory description from the initial document states a remote attacker could potentially exploit a heap corruption via a crafted HTML page. Connected sources corroborate a...
CVE-2021-3392
CVE-2021-3392 is a use-after-free vulnerability in the QEMU MegaRAID emulator. It occurs when processing SCSI I/O requests during an error path in mptsas_free_request() where the request object may not be dequeued from the pending queue, allowing a privileged guest to crash the host QEMU process ...
CVE-2021-4181
CVE-2021-4181 is a crash in the Wireshark Sysdig Event dissector (affects Wireshark 3.6.0 and 3.4.0–3.4.10) that could cause denial of service via crafted capture files or packet injections. Connected documents confirm a DoS impact with a crash/infinite loop in dissectors. Public details do not s...
CVE-2021-43301
CVE-2021-43301 is a stack buffer overflow in the PJSUA API (pjproject) when calling pjsua_playlist_create. An attacker-controlled file_names argument is copied to a fixed-size stack buffer without size validation, potentially allowing memory corruption. Connected documents indicate this affects t...
CVE-2022-2124
CVE-2022-2124 describes a Buffer Over-read in the GitHub repository vim/vim prior to 8.2. The Astra Linux security bulletin confirms a Buffer Over-read in vim prior to 8.2. No additional technical details (affected platforms, exact root cause, exploit status) or remediation steps are provided in ...
CVE-2022-24859
CVE-2022-24859 affects PyPDF2 prior to 1.27.5. The issue is an infinite loop triggered when a malicious PDF is processed because the ContentStream._readInlineImage loop does not terminate unless it encounters an EI token, failing to detect end-of-stream. This can cause unbounded processing time d...
CVE-2022-26651
The CVE-2022-26651 issue affects Asterisk through 19.x and Certified Asterisk through 16.8-cert13, in the func_odbc module, where inadequate escaping for backslash characters in SQL queries can cause user-provided data to create broken or injectable SQL. The documented impact includes potential i...
CVE-2023-1994
Wireshark vulnerability CVE-2023-1994 involves a crash in the GQUIC dissector, enabling denial of service via crafted packets or capture files. Affected versions are Wireshark 4.0.0–4.0.4 and 3.6.0–3.6.12. Several connected sources indicate fixes have been released in later packages (e.g., Wiresh...
CVE-2023-52679
CVE-2023-52679 is a Linux kernel vulnerability: a double-free in of_parse_phandle_with_args_map was mitigated. The inner loop freed the previous reference via of_node_put(new) and assumed the next value was NULL. The fix ensures that the loop invariant holds by resetting the temporary to NULL aft...
CVE-2023-6860
CVE-2023-6860: The VideoBridge channel allowed a content process to access textures from remote decoders, creating a potential sandbox escape in Firefox ESR <115.6, Thunderbird <115.6, and Firefox
CVE-2024-35823
CVE-2024-35823: Linux kernel vt buffer corruption when deleting characters has been fixed. Root cause: overlapping buffers in VT text handling; solution: replace memcpy() with memmove() (same approach as VGA text buffer fix). Affected component: vt in the Linux kernel. Remediation: upgrade to a k...
CVE-2024-35893
CVE-2024-35893 relates to a Linux kernel net/sched kernel-infoleak via act_skbmod. The issue was that tcf_skbmod_dump() copied four bytes from kernel stack to user space because struct tc_skbmod has a four‑byte hole. The fix clears the structure before filling fields to prevent uninitialized data...
CVE-2024-36950
CVE-2024-36950 is a Linux kernel vulnerability resolved in the FireWire OHCI driver. The issue occurred in the interrupt handler when a bus reset interrupt could be unmasked and cause a freeze if the bus reset was not yet serviced. The fix masks bus reset interrupts in the IRQ handler and unmasks...
CVE-2004-0488
The provided documents confirm CVE-2004-0488: a stack-based buffer overflow in the ssl_util_uuencode_binary function of ssl_util.c used by Apache mod_ssl when configured to trust the issuing CA. This can allow remote code execution via a client certificate with a long subject DN. The issue affect...
CVE-2015-2724
CVE-2015-2724 involves memory safety bugs in the Mozilla Firefox browser engine (affecting Firefox up to version 39.0, ESR lines older than 31.8/38.1, and Thunderbird before 38.1). The issues allow remote attackers to cause a denial of service via memory corruption or potentially execute arbitrar...
CVE-2016-9921
According to connected sources, CVE-2016-9921 affects QEMU with Cirrus CLGD 54xx VGA Emulator. The root cause is a divide-by-zero in cirrus_do_copy when Cirrus VGA graphics mode is VGA, which can be triggered during VGA data copying. Impact is guest-privileged code causing a host DoS by crashing ...
CVE-2017-0902
CVE-2017-0902 is the RubyGems DNS hijacking vulnerability affecting RubyGems 2.6.12 and earlier. The issue allows a MITM attacker to redirect the RubyGems client to download and install gems from a server the attacker controls. Public advisories (e.g., ALAS-2017-915) document the vulnerability cl...
CVE-2017-13090
The connected documents confirm CVE-2017-13090 affects wget prior to 1.19.2, due to chunked HTTP processing in retr.c:fd_read_body(). The chunk parser uses strtol() to read chunk lengths but does not validate non-negativity; then reads chunks with MIN(..) and passes a negative length to fd_read()...
CVE-2017-15105
CVE-2017-15105 affects unbound prior to version 1.6.8. The vulnerability arises from improper validation of wildcard-synthesized NSEC records, enabling an attacker to prove the non-existence (NXDOMAIN) of an existing wildcard record or to trick Unbound into accepting a NODATA proof. The connected...
CVE-2017-17093
CVE-2017-17093 affects WordPress prior to 4.9.1, specifically wp-includes/general-template.php where the lang attribute of an HTML element is not properly restricted. This design flaw can enable cross-site scripting (XSS) via the site language setting. The vulnerability is addressed by WordPress ...
CVE-2017-7753
CVE-2017-7753 is an out-of-bounds read in the rendering path when applying style rules to pseudo-elements (e.g., ::first-line) using cached style data. Affected products/versions include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox
CVE-2018-20180
CVE-2018-20180 affects rdesktop up to version 1.8.3, where an integer underflow triggers a heap-based buffer overflow in the function rdpsnddbg_process(), leading to memory corruption and likely remote code execution. The vulnerability is demonstrated across multiple advisories for rdesktop, with...
CVE-2018-5127
The CVE-2018-5127 issue is a memory-safety buffer overflow in the SVG path handling (svg animatedPathSegList) triggered via script, allowing a potentially exploitable crash. Affected products and versions include Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox
CVE-2018-5147
CVE-2018-5147 references the same flaw as CVE-2018-5146, arising from an out-of-bounds write in Vorbis processing, with libtremor used by Firefox on Android/ARM. The initial description notes impact on Firefox ESR < 52.7.2 and Firefox
CVE-2018-7550
CVE-2018-7550 affects Quick Emulator (QEMU). The load_multiboot function in hw/i386/multiboot.c is vulnerable: if mh_load_end_addr > mh_bss_end_addr, it triggers an out-of-bounds read/write memory access. This enables a local guest OS user to execute arbitrary code on the QEMU host. Affected c...
CVE-2019-13746
CVE-2019-13746 affects Google Chrome Omnibox: Insufficient policy enforcement in Omnibox prior to 79.0.3945.79 allows a remote attacker to spoof the URL bar via a crafted HTML page. Affected: Chrome/Chromium Omnibox (policy enforcement in URL bar). Impact: spoofing of Omnibox contents; no other i...
CVE-2020-11740
CVE-2020-11740 affects the Xen hypervisor (Xen through 4.13.x) with xenoprof profiling. The vulnerability lets guest OS users obtain sensitive information about other guests by requesting to map xenoprof buffers when profiling is not enabled, and those buffers are not scrubbed. Noted in multiple ...
CVE-2020-13959
CVE-2020-13959 affects Apache Velocity Tools before 3.1. The vulnerability lies in the default VelocityView error page which reflects back the vm file entered in the URL, enabling an attacker to supply an XSS payload via the vm parameter. When a user clicks a crafted URL, the payload can execute ...
CVE-2020-16303
CVE-2020-16303 : A use-after-free in xps_finish_image_path() (devices/vector/gdevxps.c) of Artifex Software GhostScript v9.50 can let a remote attacker escalate privileges via a crafted PDF. The issue is fixed in Ghostscript v9.51. Affected product: Ghostscript (Artifex). Remediation: upgrade to ...