CVE-2015-6937

The CVE-2015-6937 issue is in the Linux kernel (net/rds/connection.c: __rds_conn_create) and allows a local user to trigger a NULL pointer dereference and DoS by using an unbound socket. CVE-2015-7990 is a related race condition in net/rds/sendmsg.c (rds_sendmsg) that can cause DoS; both rely on ...

CVE-2016-0755

CVE-2016-0755 affects libcurl's lib/url.c ConnectionExists handling for NTLM-authenticated proxy connections. The issue allows a remote attacker to reuse proxy connections authenticated as different users, potentially authenticating as another user via a crafted request. Public advisories confirm...

CVE-2016-3521

CVE-2016-3521 affects multiple MySQL/MariaDB releases with an unspecified vulnerability in the Server: Types component that can allow remote authenticated users to affect availability. Affected: MySQL 5.5.49 and earlier, 5.6.30 and earlier, 5.7.12 and earlier; MariaDB before 5.5.50; 10.0.x before...

CVE-2016-5290

CVE-2016-5290: Memory safety bugs in Firefox 49 and Firefox ESR 45.4 (affecting Thunderbird <45.5, Firefox ESR <45.5, and Firefox

CVE-2017-14166

CVE-2017-14166 affects libarchive and causes a denial of service via a heap-based buffer over-read in the atol8 handling inside archive_read_support_format_xar.c when processing crafted XAR files. This is evidenced across multiple advisories (IBM App Connect Enterprise/Bulletin, IBM MQ/Operator b...

CVE-2017-5204

tcpdump (IPv6 parser) is affected by a buffer overflow in ip6_print() prior to version 4.9.0, allowing potential arbitrary code execution or crash via crafted input. The public details consistently reference CVE-2017-5204 and indicate the issue is mitigated by upgrading tcpdump to 4.9.0 or later....

CVE-2017-5579

CVE-2017-5579 entry rejected/not used; this CVE ID is not active.

CVE-2017-7753

CVE-2017-7753 is an out-of-bounds read in the rendering path when applying style rules to pseudo-elements (e.g., ::first-line) using cached style data. Affected products/versions include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2017-9462

CVE-2017-9462 affects Mercurial prior to 4.1.3. When using the hg serve --stdio server, remote authenticated users could trigger the Python debugger by passing a repository name that uses --debugger, enabling execution of arbitrary code. Public advisories confirm this vulnerability and reference ...

CVE-2018-10537

CVE-2018-10537 affects WavPack 5.1.0 and earlier. The issue lies in the W64 parser: ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks, enabling a memory write vulnerability. CVSS metrics indicate impact: CVSS2 (Partial confidentiality, integrity, and availability; network...

CVE-2018-10539

CVE-2018-10539 affects WavPack 5.1.0 and earlier for DSDiff input. The vulnerability stems from ParseDsdiffHeaderConfig not validating unknown chunk sizes before memory allocation, with lack of integer-overflow protection in a bytes_to_copy calculation leading to insufficient allocation and poten...

CVE-2018-14617

CVE-2018-14617 affects the Linux kernel up to 4.17.10. A NULL pointer dereference and panic occur in hfsplus_lookup() when opening a file in an HFS+ filesystem with malformed catalog data mounted read-only without a metadata directory, potentially causing a kernel panic. Connected Nessus entry co...

CVE-2018-15909

CVE-2018-15909 affects Artifex Ghostscript 9.23 (pre-2018-08-24). A type confusion in the .shfill PostScript operator can be triggered by specially crafted PostScript data, allowing an attacker to crash the Ghostscript interpreter or potentially execute arbitrary code. The vulnerability is docume...

CVE-2018-19540

CVE-2018-19540 : In JasPer, there is a heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input (libjasper/base/jas_icc.c). Reported vulnerable versions include 1.900.8–1.900.31 and 2.0.0–2.0.16. The connected documents do not provide an explicit exploit path or patch details wit...

CVE-2018-20748

CVE-2018-20748 affects LibVNCServer/LibVNCClient prior to version 0.9.12, with multiple heap out-of-bounds writes in libvncclient/rfbproto.c. The vulnerability is described among a set where the fix for CVE-2018-20019 was incomplete. Several Nessus/RHEL advisories indicate unpatched status or unp...

CVE-2018-7253

CVE-2018-7253 affects WavPack 5.1.0, where ParseDsdiffHeaderConfig (cli/dsdiff.c) can cause a heap-based buffer over-read and possibly heap overwrite via a malicious DSDIFF file, leading to denial of service. The issue is confirmed in multiple advisories (e.g., Debian DSA entries) and FreeBSD/vux...

CVE-2018-8798

CVE-2018-8798 affects the rdesktop RDP client up to version 1.8.3, where rdpsnd_process_ping() contains an out-of-bounds read that leads to information leakage. Public sources in the connected documents confirm the vulnerability class as an information disclosure issue in rdesktop prior to 1.8.4....

CVE-2019-13746

CVE-2019-13746 affects Google Chrome Omnibox: Insufficient policy enforcement in Omnibox prior to 79.0.3945.79 allows a remote attacker to spoof the URL bar via a crafted HTML page. Affected: Chrome/Chromium Omnibox (policy enforcement in URL bar). Impact: spoofing of Omnibox contents; no other i...

CVE-2020-13959

CVE-2020-13959 affects Apache Velocity Tools before 3.1. The vulnerability lies in the default VelocityView error page which reflects back the vm file entered in the URL, enabling an attacker to supply an XSS payload via the vm parameter. When a user clicks a crafted URL, the payload can execute ...

CVE-2020-16303

CVE-2020-16303 : A use-after-free in xps_finish_image_path() (devices/vector/gdevxps.c) of Artifex Software GhostScript v9.50 can let a remote attacker escalate privileges via a crafted PDF. The issue is fixed in Ghostscript v9.51. Affected product: Ghostscript (Artifex). Remediation: upgrade to ...

CVE-2020-27754

ImageMagick vulnerability CVE-2020-27754 stems from overflow-prone calls to PixelPacketIntensity() in IntensityCompare() within magick/quantize.c. A crafted input could return overflowed pixel intensities to callers; the patch fixes this by introducing ConstrainPixelIntensity() to clamp values wi...

CVE-2020-6466

CVE-2020-6466 is a use-after-free vulnerability in Google Chrome’s media component (pre-83.0.4103.61). The issue could allow a remote attacker who has renderer access to potentially execute arbitrary code or escape the sandbox via a crafted HTML page. Debian/Arch advisories confirm mitigation by ...

CVE-2021-28697

CVE-2021-28697 concerns Xen grant table v2 status pages: race conditions in freeing/deallocation of grant-table pages can allow a guest to retain access to a memory page after it has been freed, potentially enabling memory access after switches between v2 and v1. The issue is caused by racing gue...

CVE-2021-32815

CVE-2021-32815 affects Exiv2 (command-line and library) where an assertion failure occurs when modifying metadata of a crafted image file. This could allow a denial of service if a victim runs Exiv2 on a crafted image. The issue is triggered specifically by metadata modification and not by readin...

CVE-2021-37620

Exiv2 (the command-line utility and C++ library) has an out-of-bounds read vulnerability in versions ≤ 0.27.4 when reading metadata from crafted images, which could lead to denial of service. The issue is fixed in version 0.27.5. Affected users should upgrade to 0.27.5 or later to remediate. The ...

CVE-2021-37977

CVE-2021-37977 is a use-after-free in the Garbage Collection of the Chromium browser engine (pre-94.0.4606.81). Exploitation could enable remote code execution via a crafted HTML page, with heap corruption as the underlying risk. The vulnerability affects Google Chrome/Chromium prior to the patch...

CVE-2021-37981

CVE-2021-37981 is a Chrome/Chromium vulnerability: a heap buffer overflow in the Skia component prior to 95.0.4638.54 allows a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. The connected documents confirm the flaw lies in Skia, affects Chromium-ba...

CVE-2021-38001

CVE-2021-38001 is a type confusion in V8 of the Chromium engine (Chromium-based browsers) prior to version 95.0.4638.69. The issue could allow a remote attacker to trigger heap corruption via crafted HTML, potentially enabling arbitrary code execution. Publicly documented impact includes remote c...

CVE-2021-4181

CVE-2021-4181 is a crash in the Wireshark Sysdig Event dissector (affects Wireshark 3.6.0 and 3.4.0–3.4.10) that could cause denial of service via crafted capture files or packet injections. Connected documents confirm a DoS impact with a crash/infinite loop in dissectors. Public details do not s...

CVE-2021-45942

CVE-2021-45942 affects OpenEXR 3.1.x prior to 3.1.4. The issue is a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute, triggered when called from the IlmThread_3_1 thread pool (NullThreadPoolProvider::addTask / ThreadPool::addGlobalTask). The public description notes this vulnerab...

CVE-2022-24859

CVE-2022-24859 affects PyPDF2 prior to 1.27.5. The issue is an infinite loop triggered when a malicious PDF is processed because the ContentStream._readInlineImage loop does not terminate unless it encounters an EI token, failing to detect end-of-stream. This can cause unbounded processing time d...

CVE-2023-0330

CVE-2023-0330 affects qemu via the lsi53c895a DMA-MMIO reentrancy, potentially causing memory corruption such as stack overflow or use-after-free. Public advisories (including Debian LTS and Amazon ALAS) indicate a fix with updated qemu packages; apply the vendor-provided update to mitigate. If d...

CVE-2023-2465

CVE-2023-2465 affects Google Chrome / Chromium. The issue is an inappropriate CORS implementation that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected component: Chromium-based browsers (Chrome/Chromium); root cause is flawed CORS handling leading to data...

CVE-2023-4353

CVE-2023-4353 affects ANGLE in Google Chrome up to version 116.0.5845.96. The vulnerability is a heap buffer overflow in ANGLE that can lead to heap corruption via a crafted HTML page, enabling a remote attacker to potentially exploit the browser. Affected software is Google Chrome/Chromium with ...

CVE-2024-27053

The Linux kernel contains a vulnerability in the wifi: wilc1000 driver where an RCU pointer is dereferenced outside of an RCU critical section during the connect path. This issue occurs when parsing target BSS parameters, specifically triggering a suspicious RCU usage warning when lockdep is enab...

CVE-2025-37778

CVE-2025-37778 is a Linux kernel vulnerability in ksmbd’s krb_authenticate path. The root cause is a use-after-free: krb_authenticate frees sess->user and may not NULL it; if ksmbd_krb5_authenticate does not reinitialize sess->user, smb2_sess_setup may later access freed memory. Several adv...

CVE-2008-2371

CVE-2008-2371 describes a heap-based buffer overflow in the PCRE library (version 7.7) specifically in pcre_compile.c. This vulnerability can be triggered by a context-dependent attacker via a regular expression that begins with an option and contains multiple branches, potentially causing a deni...

CVE-2014-0453

CVE-2014-0453 is an IBM/Oracle Java vulnerability affecting IBM Runtime Environment Java Technology Edition (and IBM Java SDK/JRE bundles used in IBM products such as QRadar, Rational, and WebSphere-related tools). The vulnerability is described as an unspecified issue in the Security component w...

CVE-2015-3196

OpenSSL CVE-2015-3196 affects multi-threaded clients where the PSK identity hint is written to the wrong data structure, allowing a remote server to cause a denial of service via a crafted ServerKeyExchange message (race condition and double free). Affected releases include OpenSSL 1.0.0 before 1...

CVE-2016-3822

CVE-2016-3822 affects jhead/libjhead (exif.c) across Android 4.x before 4.4.4, 5.x before 5.0.2/5.0.x, 5.1.x before 5.1.1, and 6.x before 2016-08-01. The issue is an out-of-bounds access via crafted EXIF data, enabling remote code execution or a denial of service. Public advisories and vendor upd...

CVE-2017-15105

CVE-2017-15105 affects unbound prior to version 1.6.8. The vulnerability arises from improper validation of wildcard-synthesized NSEC records, enabling an attacker to prove the non-existence (NXDOMAIN) of an existing wildcard record or to trick Unbound into accepting a NODATA proof. The connected...

CVE-2017-2888

SDL2 versions affected: SDL 2.0.x with vulnerable code path when creating a new RGB Surface (notably in 2.0.5). Root cause: integer overflow during surface allocation due to crafted image input, leading to too little memory allocation, a subsequent buffer overflow, and potential code execution. P...

CVE-2017-5433

CVE-2017-5433 is a use-after-free in SMIL animation functions. Affected software includes Mozilla Firefox builds before 53 and Thunderbird before 52.1 ESR; the underlying issue arises when pointers to animation elements in an array are dropped from the animation controller while still in use, lea...

CVE-2017-6814

CVE-2017-6814 affects WordPress

CVE-2018-16643

CVE-2018-16643 affects ImageMagick 7.0.8-4 where ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage fail to check the return value of fputc, enabling a remote denial of service via a crafted image file. The vulnerability arises from not validating fputc results during image writing path...

CVE-2018-6086

CVE-2018-6086 is a use-after-free in Google Chrome’s Networking Disk Cache caused by a double-eviction in Incognito mode. The issue affects Chrome/Chromium prior to version 66.0.3359.117 (fixed in the 66.0.3359.117 release, per Debian security advisories and the Chrome stable-channel blog). A rem...

CVE-2019-14433

The CVE-2019-14433 issue affects OpenStack Nova (versions before 17.0.12, 18.x before 18.2.2, 19.x before 19.0.2). It allows authenticated API requests that fault to leak environment details in responses, potentially exposing sensitive configuration data (partial confidentiality impact). Red Hat ...

CVE-2019-19583

CVE-2019-19583 describes a denial-of-service vulnerability in Xen’s VMX VMEntry path. When a VM is in a specific state (DB interception with single stepping and STI/MovSS active), the VMEntry checks can fail fatally for the guest, potentially crashing an HVM/PVH guest and causing guest DoS. The i...

CVE-2019-5429

CVE-2019-5429 affects FileZilla and is caused by an untrusted search path that allows privilege escalation via a malicious ‘fzsftp’ binary placed in a user’s home directory. The vulnerability impacts FileZilla versions before 3.41.0-rc1 and is described in multiple sources (e.g., Debian DLA-3026-...

CVE-2020-16295

Ghostscript v9.50 contains a null pointer dereference in clj_media_size() (devices/gdevclj.c) that allows remote attackers to cause a denial of service via crafted PDF files. The issue affects Artifex Ghostscript 9.50 and is fixed in version 9.51. Mitigation: upgrade to 9.51 or newer. The CVE is ...