CVE-2018-7550

CVE-2018-7550 affects Quick Emulator (QEMU). The load_multiboot function in hw/i386/multiboot.c is vulnerable: if mh_load_end_addr > mh_bss_end_addr, it triggers an out-of-bounds read/write memory access. This enables a local guest OS user to execute arbitrary code on the QEMU host. Affected c...

CVE-2019-9897

PuTTY before version 0.71 is vulnerable to multiple denial-of-service attacks that can be triggered by writing to the terminal (CVE-2019-9897). The connected advisories indicate fixes in upstream PuTTY 0.71 and security updates across distributions (openSUSE/SUSE, Debian), resolving this and rela...

CVE-2020-25602

CVE-2020-25602 : Xen up to 4.14.x contains a vulnerability where an x86 PV guest accessing the MISC_ENABLE MSR (0x1a0) triggers a host crash due to missing #GP fault handling when reading this Intel-specific MSR. The vulnerability can crash the host Xen instance, enabling a local Denial of Servic...

CVE-2020-25604

CVE-2020-25604 in Xen up to 4.14.x describes a race condition when migrating timers between x86 HVM vCPUs. The locking model can allow a second vCPU of the same guest to release a lock it did not acquire, potentially causing a hang or crash (DoS) of the hypervisor. Affected: all Xen versions on x...

CVE-2020-25675

CVE-2020-25675 : ImageMagick’s CropImage() and CropImageToTiles() perform rounding on unconstrained pixel offsets, causing undefined behavior via integer overflow/out-of-range values when processing untrusted input. The upstream patch constrains pixel offsets to prevent these issues. Affected: Im...

CVE-2020-27767

CVE-2020-27767 entry is rejected/not used; not an active vulnerability.

CVE-2020-6474

CVE-2020-6474 is a use-after-free in Blink/WebKit within Chromium/Google Chrome before version 83.0.4103.61. The issue can allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected component is Blink/WebKit (Chromium-based browsers). The connected sources co...

CVE-2020-6528

CVE-2020-6528 affects Google Chrome/iOS with a vulnerability in basic authentication that allowed spoofing the Omnibox. The issue is fixed in Chrome 84.0.4147.89 (stable channel); update to that release or newer. Other connected advisories confirm a fix in the corresponding Chromium/Chrome releas...

CVE-2020-6568

CVE-2020-6568 affects Google Chrome on Android prior to 85.0.4183.83, where insufficient policy enforcement in the intent handling could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue is tied to Chrome/Chromium ecosystem; Debian/Fedora advisories refe...

CVE-2021-38171

CVE-2021-38171 affects FFmpeg 4.4 and is described as adts_decode_extradata in libavformat/adtsenc.c not checking the return value of init_get_bits; the second argument to init_get_bits can be crafted. The connected documents confirm this as the root cause, noting that a crafted input could explo...

CVE-2021-4184

Wireshark CVE-2021-4184 is an infinite-loop DoS in the BitTorrent DHT dissector. Affected: Wireshark 3.6.0 and 3.4.0–3.4.10. Root cause: BitTorrent DHT parser infinite loop leading to application halt/crash via crafted capture files or packet injections. Publicly stated fixes exist in later Wires...

CVE-2022-23519

CVE-2022-23519 affects rails-html-sanitizer. Prior to version 1.4.4, if an application overrides the sanitizer’s allowed tags to include both “math” and “style” or both “svg” and “style”, an XSS vector may be exploitable. The issue is fixed in version 1.4.4. Affected deployments should upgrade to...

CVE-2022-3169

CVE-2022-3169 - Linux kernel NVMe host driver. A denial-of-service condition may occur when NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET are issued in sequence via the device file, potentially causing a PCIe link disconnect. Affected component is the Linux kernel’s NVMe host/driver pathway; the f...

CVE-2023-1818

CVE-2023-1818 is a use-after-free in Vulkan within Google Chrome’s rendering stack prior to version 112.0.5615.49, enabling potential heap corruption via a crafted HTML page. The vulnerability affects Chrome’s Vulkan-related code paths and has been reflected across multiple advisories (Debian DSA...

CVE-2023-1822

CVE-2023-1822 : A vulnerability in Chromium/Google Chrome’s navigation UI allowed domain spoofing via a crafted HTML page. Affected: Chromium/Chrome before version 112.0.5615.49. Root cause: incorrect security UI in Navigation. Impact: remote attacker could spoof domain; user interaction required...

CVE-2023-2461

CVE-2023-2461 affects Google Chrome/Chromium OS Inputs on ChromeOS before 113.0.5672.63. Root cause: use-after-free in OS Inputs leading to heap corruption via crafted UI interaction after user engagement. Impact per sources: remote attacker could exploit via user interaction; CVSS v3.1 indicates...

CVE-2024-26851

CVE-2024-26851: Linux kernel nf_conntrack_h323 decoding bug fixed. UBSAN reported negative/out-of-bounds shifts when decoding Ras messages due to abnormal skb->data; patch adds protection to keep extension bitmap length

CVE-2015-2559

CVE-2015-2559 affects Drupal 6.x before 6.35 and 7.x before 7.35, enabling a remote authenticated user to reset another user’s password by exploiting a crafted password‑reset URL and matching password hashes. Connected advisories confirm this as part of broader Drupal fixes and, in some records (...

CVE-2015-7236

CVE-2015-7236 describes a use-after-free in rpcbind (xprt_set_caller in rpcb_svc_com.c) affecting rpcbind 0.2.1 and earlier. The vulnerability can be triggered by crafted PMAP_CALLIT packets over TCP/UDP, enabling a remote attacker to cause a denial-of-service (daemon crash). Connected sources do...

CVE-2015-7497

CVE-2015-7497 affects libxml2 prior to 2.9.3, due to a heap-based buffer overflow in dict.c (xmlDictComputeFastQKey). Exploitation leads to a denial of service via crafted XML data. The vulnerability is part of multiple libxml2 issues disclosed in 2015; affected products are libraries linked agai...

CVE-2015-7499

CVE-2015-7499 (libxml2) involves a heap-based buffer overflow in the xmlGROW function of parser.c, affecting libxml2 prior to 2.9.3. The consequence described is memory disclosure/leakage under certain crafted XML inputs. The Amazon Linux 2 advisory ALAS2-2019-1220 confirms libxml2 exposure and l...

CVE-2015-7703

CVE-2015-7703: ntpd remote configuration feature exposes a file overwrite risk via the :config command when remote configuration is enabled and the attacker knows the configuration password. Affected: ntpd 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77. Connected documents confirm this as a real vu...

CVE-2015-8776

The CVE-2015-8776 issue affects the GNU C Library (glibc) strftime() function. The vulnerability, present in glibc versions before 2.23, allows context-dependent attackers to cause a denial of service (application crash) and, in some disclosures, potentially obtain sensitive information via out-o...

CVE-2016-1000343

CVE-2016-1000343 affects the Bouncy Castle JCE Provider (1.55 and earlier). When the JCA key pair generator is not explicitly initialised with DSA parameters, it may generate a weak private key by assuming a 1024-bit key size. Publicly available documents confirm this issue and recommend either e...

CVE-2016-10741

CVE-2016-10741 – Linux kernel local DoS (xfs_aops race) Affected: Linux kernel before 4.9.3. Issue: a race between direct I/O and memory-mapped I/O (hole handling) in fs/xfs/xfs_aops.c is incorrectly handled with BUG_ON, leading to a system crash under local access. Impact: denial of service via ...

CVE-2016-1568

CVE-2016-1568 is a use-after-free in QEMU’s AHCI emulation (hw/ide/ahci.c) when IDE AHCI Emulation is enabled. A guest user can cause a denial of service (QEMU process crash) and potentially execute arbitrary code via an invalid AHCI NCQ AIO command. The issue is triggered by use-after-free in NC...

CVE-2016-5424

CVE-2016-5424 affects PostgreSQL up to version 9.5.x: remote authenticated users with CREATEDB or CREATEROLE can gain superuser privileges by supplying mishandled special characters (" , \, carriage return, or newline) in a database or role name during an administrative operation. Affected versio...

CVE-2016-5440

CVE-2016-5440 is an unspecified vulnerability in Oracle MySQL Server and MariaDB that can impact availability via Server: RBR. Affected are MySQL 5.5.49 and earlier, 5.6.30 and earlier, 5.7.12 and earlier, and MariaDB before 5.5.50; newer upstream fixes exist for MariaDB (e.g., 5.5.50, 10.0.26, 1...

CVE-2017-0902

CVE-2017-0902 is the RubyGems DNS hijacking vulnerability affecting RubyGems 2.6.12 and earlier. The issue allows a MITM attacker to redirect the RubyGems client to download and install gems from a server the attacker controls. Public advisories (e.g., ALAS-2017-915) document the vulnerability cl...

CVE-2017-12424

The CVE-2017-12424 issue affects the shadow package (notably the newusers tool) across multiple distributions. A malformed input could cause internal data-structure corruption that leads to crashes or memory corruption, potentially crossing privilege boundaries in certain configurations (e.g., ho...

CVE-2017-5432

CVE-2017-5432 is a use-after-free in Firefox < 53 that can trigger a potentially exploitable crash during certain text-input selection. The vulnerability also affects related Mozilla products in older ESR/thunderbird branches (e.g., Thunderbird < 52.1; ESR

CVE-2017-6301

CVE-2017-6301 affects ytnef (libytnef) up to 1.9.0; the issue is an out-of-bounds read in the TNEF parsing path described as part of the patch set (4 of 9). Multiple sources (MGASA-2017-0174, USN-4615-1, OSV entries) describe this family of vulnerabilities as heap-related with potential crashes/D...

CVE-2018-12896

CVE-2018-12896 affects the Linux kernel up to version 4.17.3, specifically the POSIX timers path (kernel/time/posix-timers.c). An integer overflow in the overrun accounting is caused by the timer overrun values being computed with int-based accounting, which can exceed INT_MAX depending on interv...

CVE-2019-14778

CVE-2019-14778 affects VideoLAN VLC media player 3.0.7.1, where the mkv::virtual_segment_c::seek method in demux/mkv/virtual_segment.cpp has a use-after-free. Connected sources confirm this vulnerability in VLC’s MKV demuxer and note that remediation from multiple advisories is to upgrade VLC to ...

CVE-2019-14970

CVE-2019-14970 affects VLC media player (3.0.7.1 and earlier). The vulnerability is in the MKV demuxer code path, specifically mkv::event_thread_t, allowing a crafted .mkv file to trigger a heap-based buffer overflow. Public disclosures across multiple advisories confirm VLC 3.0.8 fixes this and ...

CVE-2019-18424

Xen vulnerability CVE-2019-18424 affects the Xen hypervisor (4.12.x) where, when PCI pass-through is used, deassignment of a PCI device from an untrusted domain can allow in-flight DMA to target host memory, risking host-OS privilege escalation. The issue arises because devices reassigned to dom0...

CVE-2019-9325

The CVE-2019-9325 issue affects the libvpx library (VP8/VP9 SDK) and is described as an out-of-bounds read caused by a missing bounds check. According to the provided documents, this could lead to remote information disclosure with no inherent execution privileges, and exploitation requires user ...

CVE-2020-10955

GitLab CE/EE 11.1–12.9 is affected by a parameter-tampering flaw in an upload feature that allows an unauthorized user to read content from certain folders. root cause: input validation flaw enabling access to restricted content. Impact: information disclosure. Remediation: upgrade to patched rel...

CVE-2020-11046

CVE-2020-11046 affects FreeRDP: an out-of-bounds seek in update_read_synchronize can lead to a later out-of-bounds read. Public advisories and Nessus/OS vendor records confirm this vulnerability in FreeRDP versions after 1.0 up to before 2.0.0. The connected advisories indicate remediation by upg...

CVE-2020-25600

The connected XSA-342 advisory provides concrete details for CVE-2020-25600: Xen 2-level event channel model mismanages the per-guest limit, causing 32-bit x86 domains (including Domain 0) to observe successful allocations that should fail, risking corruption of the shared info structure and enab...

CVE-2020-27841

CVE-2020-27841 affects the OpenJPEG2 library (openjpeg2) prior to version 2.4.0. The flaw occurs when an attacker provides crafted input to be processed by the OpenJPEG encoder, potentially causing an out-of-bounds read and impacting availability. The issue is evidenced in multiple connected advi...

CVE-2020-6472

CVE-2020-6472 affects Chromium-based browsers (e.g., Chrome/Chromium) through the developer tools policy enforcement component. Affected version lineage is before 83.0.4103.61, per multiple advisories. The vulnerability is a policy enforcement error in the developer tools that could allow an atta...

CVE-2021-20228

CVE-2021-20228 affects Ansible Engine 2.9.18 where sensitive info is not masked by default and not protected by no_log when using the basic.py sub-option, impacting confidentiality. Multiple connected advisories confirm the issue and note updates/patches: IBM ESS (fix to 6.0.2.1), Debian security...

CVE-2021-20272

Privoxy (before 3.0.32) is affected by an assertion-failure vulnerability that can cause a server crash when processing constructed CGI requests (CVE-2021-20272). Multiple connected advisories confirm this issue and link it to crafted CGI inputs that trigger crashes (and related CVEs in the same ...

CVE-2021-3392

CVE-2021-3392 is a use-after-free vulnerability in the QEMU MegaRAID emulator. It occurs when processing SCSI I/O requests during an error path in mptsas_free_request() where the request object may not be dequeued from the pending queue, allowing a privileged guest to crash the host QEMU process ...

CVE-2021-37963

Technical details about CVE-2021-37963 are not publicly provided in the connected documents. The sources reiterate the same description without specifics on affected products/versions beyond Chrome prior to 94.0.4606.54. Monitor for updates.

CVE-2022-24808

Net-snmp is affected by CVE-2022-24808. A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference in versions prior to 5.9.2. The issue has a patch in 5.9.2. Remediation is to upgrade net-snmp to 5.9.2+ or newer (or apply vendor-specific updates as ap...

CVE-2022-27635

CVE-2022-27635 affects Intel PROSet/Wireless WiFi and Killer WiFi software. The root cause is improper access control, which may allow a privileged local user to escalate privileges. Public entries in connected documents confirm impacts as local escalation with high confidentiality/integrity/avai...

CVE-2023-1819

CVE-2023-1819 is an information-disclosure flaw in Google Chrome/Chromium Accessibility: an out-of-bounds memory read via a crafted HTML page. Affected: Google Chrome/Chromium (Accessibility component). Root cause: out-of-bounds read. Impact: potential confidential data exposure (C: High, I/N). E...

CVE-2023-2467

Google Chrome on Android prior to 113.0.5672.63 is affected by CVE-2023-2467 due to an inappropriate implementation in Prompts, which could allow a remote attacker to bypass permissions restrictions via a crafted HTML page. The impact is a permissions bypass without other code execution details p...