CVE-2019-10163

PowerDNS Authoritative Server (v4.0.x before 4.0.8 and v4.1.x before 4.1.9) is affected. A remote, authorized master server can send a flood of NOTIFY messages that causes high CPU load and can prevent updates to slave zones. Only servers configured as slaves are affected. The issue is mitigated ...

CVE-2019-5805

CVE-2019-5805 involves a use-after-free in the PDFium component of the Chromium/Google Chrome stack, prior to version 74.0.3729.108. The vulnerability could permit a remote attacker to potentially execute heap corruption via a crafted PDF file. Affected products include Google Chrome/Chromium (de...

CVE-2019-19950

CVE-2019-19950 affects GraphicsMagick. Connected sources confirm a use-after-free in magick/error.c (ThrowException/ThrowLoggedException) and related memory handling issues, leading to potential memory corruption. Multiple advisories (Debian DSA-4640-1, Mageia MGASA-2020-0102, Ubuntu USN-5190-1, ...

CVE-2019-19953

GraphicsMagick 1.4 snapshot-20191208 Q8 is affected by CVE-2019-19953 due to a heap-based buffer over-read in EncodeImage (coders/pict.c). The issue is confirmed in multiple disclosures (Debian/Mageia advisories and Ubuntu/DSA/Nessus plugins) as part of a set of GraphicsMagick vulnerabilities, wi...

CVE-2019-5814

CVE-2019-5814 affects Google Chrome/Chromium Blink: an insufficient policy enforcement in Blink allowed a remote attacker to leak cross-origin data via a crafted HTML page (CORS bypass). Impact: cross-origin data disclosure. Affected versions are before 74.0.3729.108. Remediation: upgrade to 74.0...

CVE-2019-5807

CVE-2019-5807 is a memory corruption issue in the V8 JavaScript engine in Google Chrome/Chromium prior to 74.0.3729.108. The vulnerability exists in V8’s handling of crafted HTML pages, potentially enabling heap corruption and remote code execution through a page load. Remediation across affected...

CVE-2019-5835

CVE-2019-5835 describes an object lifecycle issue in the SwiftShader component of Google Chrome/Chromium prior to 75.0.3770.80 that could allow a remote attacker to perform out-of-bounds memory access via a crafted HTML page. Public advisories and trackers consistently tie this CVE to Chrome/Chro...

CVE-2019-20053

UPX 3.95 contains an invalid memory address dereference in canUnpack (p_mach.cpp) when processing crafted Mach-O files, leading to a crash/denial of service. Multiple advisories note this CVE-2019-20053 and show that fixes were released in UPX 3.96 (and backported updates in related advisories). ...

CVE-2019-5840

CVE-2019-5840 is a vulnerability tied to Google Chrome/Chromium where an incorrect security UI in the iOS popup blocker allowed bypassing navigation restrictions via a crafted HTML page. Public sources in Debian/Gentoo advisories specify that fixes were delivered by updating Chromium/Chrome to ne...

CVE-2019-13730

CVE-2019-13730 is a type confusion in Google Chrome's V8 JavaScript engine (Chromium-derived) that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is in the JavaScript engine (V8) and is one of multiple Chromium/Chrome issues disclosed for CVE-2...

CVE-2019-13705

CVE-2019-13705 is a Chromium/Google Chrome extension permission bypass vulnerability. The assigned CVE refers to insufficient policy enforcement in extensions prior to 78.0.3904.70, allowing a user-lacative attacker who tricks a user into installing a malicious extension to leak cross-origin data...

CVE-2019-5804

CVE-2019-5804 affects Google Chrome (Chromium) prior to 73.0.3683.75. It arises from incorrect command line processing, enabling a local attacker to spoof domains via a crafted domain name. OpenSUSE/Nessus references confirm the remediation in Chrome releases up to 73.0.3683.75 and later. The vul...

CVE-2019-5837

CVE-2019-5837 affects Blink in Google Chrome (Chromium-based) prior to 75.0.3770.80, allowing an remote attacker to leak cross-origin data via a crafted HTML page (information disclosure). Debian security advisories indicate fixes in Chromium packages to 76.0.3809.100+; upgrade to the latest Chro...

CVE-2019-13711

CVE-2019-13711 is an information-disclosure vulnerability affecting Chromium/Google Chrome prior to version 78.0.3904.70. The connected sources describe a cross-context information leak in Chromium/Chrome (before 78.0.3904.70), with Debian/Mageia/Arch advisories noting fixes in 78.0.3904.70-1 or ...

CVE-2020-15803

CVE-2020-15803 affects Zabbix frontend across multiple branches: stored XSS in the URL Widget present in versions before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x–4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1. Impact is stored XSS via the URL widget, enabling script execution in the frontend conte...

CVE-2019-5801

The CVE-2019-5801 entry corresponds to a vulnerability in Google Chrome’s Omnibox on iOS, where incorrect URL eliding allowed domain spoofing via a crafted HTML page. Connected documents confirm this CVE was fixed in Chromium/Chrome updates (e.g., openSUSE and Fedora advisories) by upgrading to v...

CVE-2019-16709

CVE-2019-16709 affects ImageMagick; it is a memory leak in the coders/dps.c code path, demonstrated by XCreateImage. The Initial Description specifies the leak in ImageMagick 7.0.8-35. The Connected Documents list numerous ImageMagick advisories but do not provide additional technical details abo...

CVE-2020-10938

CVE-2020-10938 affects GraphicsMagick prior to 1.3.35, caused by an integer overflow that leads to a heap-based buffer overflow in the HuffmanDecodeImage path (magick/compress.c). The issue can be triggered by processing crafted images and has been fixed in 1.3.35 and later per multiple advisorie...

CVE-2018-19873

CVE-2018-19873 affects Qt up to version 5.11.2 (before 5.11.3): QBmpHandler can overflow a buffer when processing BMP data, leading to a potentially exploitable crash or arbitrary code execution as implied by the CVE entry. Public mentions across advisories (e.g., F5 K08037765, K42941419, Debian/...

CVE-2019-13707

CVE-2019-13707 is an information-disclosure vulnerability in Chromium/Google Chrome (Android) caused by insufficient validation of untrusted input in intents, allowing a local attacker to leak files via a crafted application. It affects Chrome/Chromium versions prior to 78.0.3904.70; the issue ha...

CVE-2019-5806

The CVE-2019-5806 entry concerns Google Chrome/Chromium on Windows prior to 74.0.3729.108. A concrete flaw is an integer overflow in the ANGLE library, which can lead to heap corruption via a crafted HTML page. The issue is actionable in the browser context where remote attackers could exploit it...

CVE-2019-5816

CVE-2019-5816 : A process lifetime issue in Google Chrome on Android (pre-74.0.3729.108) could allow a remote attacker to persist an exploited process via a crafted HTML page. The vulnerability is addressed in Chromium/Chrome updates (e.g., Chrome for Android and related Chromium patches such as ...

CVE-2019-5823

CVE-2019-5823 corresponds to a forced navigation from a service worker vulnerability in Chromium/Google Chrome, allowing navigation restriction bypass via a crafted HTML page. Affected products include Chromium/Chrome before version 74.0.3729.108. The issue is described as an access restriction b...

CVE-2020-6452

CVE-2020-6452 affects Chromium/Google Chrome prior to 80.0.3987.162 (and related Chromium builds). Root cause: heap/buffer overflow in the Media component (and related use-after-free issues in WebAudio per connected records). Impact: remote attacker could potentially execute arbitrary code by ent...

CVE-2020-6432

CVE-2020-6432 : Affected software is Chromium/Google Chrome prior to 81.0.4044.92. Description: an insufficient policy enforcement in navigations vulnerability could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. Impact per documents: potential bypass of naviga...

CVE-2021-45082

CVE-2021-45082 affects Cobbler prior to 3.3.1. The issue resides in templar.py, where the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring (only lines starting with #import are blocked). This could enable unintended module ...

CVE-2020-6442

CVE-2020-6442 affects Chromium/Google Chrome prior to 81.0.4044.92. The issue is an implementation error in the page cache that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact: potential cross-origin data exposure without user interaction beyond visiting a ...

CVE-2020-6445

CVE-2020-6445 discusses an insufficient policy enforcement vulnerability in the trusted types component of the Chromium/Chrome browser before version 81.0.4044.92, enabling a remote attacker to bypass Content Security Policy via a crafted HTML page. Public references in Debian/Arch/Fedora advisor...

CVE-2020-6435

CVE-2020-6435 describes a policy enforcement error in extensions that affects Google Chrome/Chromium prior to 81.0.4044.92. The issue, rooted in insufficient policy enforcement within the extensions component, could allow a remote attacker who has achieved renderer access to bypass navigation res...

CVE-2018-20177

CVE-2018-20177 affects the rdesktop X11/CLI client (up to v1.8.3). The issue is an Integer Overflow in the rdp_in_unistr() path that causes a Heap-Based Buffer Overflow, leading to memory corruption and potential remote code execution. Several connected sources confirm the vulnerability in rdesktop

CVE-2019-5819

CVE-2019-5819 corresponds to a vulnerability in Chromium/Google Chrome's Developer Tools. The root cause is insufficient data validation in the Developer Tools before version 74.0.3729.108, allowing a local attacker to execute arbitrary code by processing a crafted string copied to the clipboard....

CVE-2020-10592

Tor is affected by CVE-2020-10592 (CPU consumption DoS) and CVE-2020-10593 (circuit padding memory leak) in versions before 0.3.5.10/0.4.x before 0.4.1.9/0.4.2.x before 0.4.2.7. Public advisories indicate upgrades to Tor 0.3.5.12 or later (e.g., 0.3.5.12, and later 0.3.5.x lines) address these is...

CVE-2019-5163

CVE-2019-5163 affects Shadowsocks-libev 3.3.2’s UDPRelay when using a Stream Cipher and a local_address; sending arbitrary UDP packets can trigger a FATAL error path and exit, constituting a denial-of-service. The issue is mitigated by upgrading to Shadowsocks-libev 3.3.3, as referenced by severa...

CVE-2019-15624

CVE-2019-15624: Nextcloud Server 15.0.7 is affected by improper input validation that allows group admins to create users with IDs of system folders. The issue is confirmed in CVE-2019-15624 and is addressed in security advisories accompanying Nextcloud updates to 15.0.14 (NC-SA-2020-015/openSUSE...

CVE-2019-5459

VLC Media Player (versions

CVE-2020-0561

CVE-2020-0561: Improper initialization in the Intel SGX SDK before v2.6.100.1 may allow an authenticated local user to escalate privileges. The description identifies a local, authenticated attack with partial confidentiality/integrity/availability impact. No explicit remediation/version in the p...

CVE-2019-15613

CVE-2019-15613 affects Nextcloud Server 17.0.1, where a bug causes workflow rules to depend on the file extension when checking MIME types. This can impact all three security properties (confidentiality, integrity, availability) per CVSS metrics (NVD: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H; base sco...

CVE-2020-5202

CVE-2020-5202 affects apt-cacher-ng (

CVE-2019-5460

CVE-2019-5460 is a VLC double-free vulnerability reported for

CVE-2019-11328

CVE-2019-11328 affects Singularity 3.1.0–3.2.0-rc2, where insecure permissions in /run/singularity/instances/sing// could allow a local attacker to influence starter-suid and escalate privileges on the host. Public documents indicate a remediation path via upgrading to a newer Singularity release...

CVE-2020-14983

The CVE-2020-14983 issue affects Chocolate Doom 3.0.0 (and Crispy Doom 5.8.0 in the report) where the server does not validate the user-controlled num_players value, causing a stack-based buffer overflow. The vulnerability is in the networking code and can lead to server stack overwrite, with the...

CVE-2019-18899

The CVE-2019-18899 issue affects openSUSE Leap 15.1 where apt-cacher-ng operations run in the user-owned directory /run/apt-cacher-ng with root privileges, enabling local attackers to influence operation outcomes. Publicly referenced advisories confirm this vulnerability in apt-cacher-ng versions...

CVE-2021-46141

CVE-2021-46141 affects uriparser prior to 0.9.6, with invalid free operations in uriFreeUriMembers and uriMakeOwner. Multiple advisories (Debian, Fedora, ALAS) indicate potential DoS or arbitrary code execution, mitigated by upgrading to 0.9.6 or later; some advisories specify version updates (e....

CVE-2019-7443

CVE-2019-7443 affects KDE KAuth before 5.55. The issue arises from passing parameters of arbitrary types to helpers via DBus over DBusHelperProxy.cpp, allowing plugin code to run with root privileges and potentially increasing impact of a plugin vulnerability. Documented impact includes crashes a...

CVE-2021-46142

The CVE concerns uriparser before 0.9.6, which performs invalid free operations in uriNormalizeSyntax. Connected advisories confirm this affects uriparser across multiple distributions and versions, with fixes provided in version 0.9.6 and later. Impact noted in Debian advisories includes potenti...

CVE-2020-6610

CVE-2020-6610 affects GNU LibreDWG 0.9.3.2564 via an attempted memory allocation overflow in read_sections_map (decode_r2007.c). The issue is documented across multiple sources (NVD entry for CVE-2020-6610 and related OSV/OpenSUSE advisories) and is mitigated by updating libredwg to release 0.10,...

CVE-2019-14524

CVE-2019-14524 is a local, heap-based overflow in Schism Tracker’s MTM loader (fmt_mtm_load_song in fmt/mtm.c) triggered by a large number of song patterns. Affects Schism Tracker up to 20190722. Public advisories (openSUSE GLSA-202107-12 and OpenSUSE-SU-2019:1994) report a fix in patches release...