CVE-2017-5331

CVE-2017-5331 affects icoutils prior to 0.31.1, caused by an overflow/out-of-bounds issue in wrestool’s check_offset logic that can lead to DoS and arbitrary code execution via crafted binaries. Affected component: icoutils (wrestool) with root cause described as an integer/size check failure in ...

CVE-2016-1676

CVE-2016-1676 affects Google Chrome/Chromium before 51.0.2704.63. The issue is a cross-origin bypass in extension bindings (bindings.js) caused by improper prototype handling in the extensions framework, enabling remote bypass of Same Origin Policy via unspecified vectors. Debian security advisor...

CVE-2016-2790

The CVE-2016-2790 issue is in Graphite 2 prior to 1.3.6 (graphite2) used by Firefox/Firefox ESR. The root cause is uninitialized memory in Graphite’s TtfUtil::GetTableInfo, enabling a remote attacker to cause a denial of service or potentially other impact via a crafted Graphite font. Impact is t...

CVE-2016-8578

CVE-2016-8578 affects QEMU, specifically the 9p filesystem (9pfs) implementation. The vulnerability is a NULL pointer dereference in v9fs_iov_vunmarshal, triggered by sending an empty string parameter to a 9P operation. This can allow a local privileged attacker (local OS administrator) to crash ...

CVE-2019-9776

CVE-2019-9776 is a vulnerability in GNU LibreDWG (LibreDWG/libredwg) where a NULL pointer dereference occurs in the DWF/DXF handling path (dwg_dxf_LTYPE). Publicly discussed fixes are delivered via libredwg updates in openSUSE/SLE backports: release 0.9.3 (and related 0.9.x series) includes fixes...

CVE-2016-2801

CVE-2016-2797 describes a vulnerability in Graphite2 where the TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6 can be triggered by a crafted Graphite font, used by Firefox before 45.0 and ESR before 38.7, leading to a denial of service via a buffer over-read. The issue is due to...

CVE-2016-5159

CVE-2016-5159 covers multiple integer overflows in OpenJPEG as used by PDFium in Google Chrome, exploitable via crafted JPEG2000 data that is mishandled during opj_aligned_malloc in dwt.c and t1.c. Affected: Chrome before 53.0.2785.89 on Windows/macOS and before 53.0.2785.92 on Linux. Consequence...

CVE-2016-7800

GraphicsMagick 1.3.25 and earlier are affected by CVE-2016-7800 due to an integer underflow in the parse8BIM function (coders/meta.c), which can be triggered by a crafted 8BIM chunk to cause a heap-based buffer overflow and a denial of service (application crash). Several connected advisories con...

CVE-2016-8577

CVE-2016-8577 entry is rejected/not used; duplicates CVE-2020-2891 (CVE-2020-25707).

CVE-2016-9101

CVE-2016-9101 affects QEMU’s i8255x (PRO100) NIC emulation in hw/net/eepro100.c. A memory leak can be triggered by repeatedly unplugging the NIC, causing memory consumption and QEMU process crash (DoS) from a local privileged user. Public advisories (Debian, SUSE, IBM PowerKVM) confirm the issue ...

CVE-2015-4807

CVE-2015-4807 is an unspecified vulnerability in Oracle MySQL Server affecting Windows, listed for versions 5.5.45 and earlier and 5.6.26 and earlier. The vulnerability can be exploited by remote authenticated users to affect availability via unknown vectors related to the Server: Query Cache. Th...

CVE-2016-1494

The CVE-2016-1494 issue affects the Python-RSA library’s verify function prior to version 3.3, enabling a Bleichenbacher ’06 style attack to forge signatures with a small public exponent via crafted padding (BERserk). This can allow an attacker to spoof valid signatures for the affected RSA keys....

CVE-2016-1688

CVE-2016-1688 is an out-of-bounds read in the V8 JavaScript library used by Google Chrome/Chromium prior to 51.0.2704.63. The root cause involves mishandling external string sizes, enabling a remote attacker to trigger a denial of service via crafted JavaScript. Remediation: upgrade to Chrome/Chr...

CVE-2016-5104

CVE-2016-5104 affects libimobiledevice and libusbmuxd. The issue is in socket_create (common/socket.c) enabling an IPv4 TCP socket connection that lets remote attackers bypass access controls and communicate with services on iOS devices. Public advisories note sockets listening on INADDR_ANY as t...

CVE-2016-7995

CVE-2016-7995 affects QEMU: a memory leak in ehci_process_itd (hw/usb/hcd-ehci.c) allows a local privileged user in the guest to cause a denial of service via memory consumption by crafting many PG indexes. CVSS shows 6.0 (3.1) with local access and high privileges required. Remediation evidenced...

CVE-2016-8688

CVE-2016-8688 affects the libarchive 3.2.1 mtree reader. The vulnerability arises because the mtree bidder does not track line sizes when extending the read-ahead, leading to an invalid read in archive_read_support_format_mtree.c (detect_form/bid_entry) and a potential remote denial of service (c...

CVE-2017-5333

The CVE-2017-5333 issue affects icoutils, specifically the wrestool component. A local integer overflow in the extract_group_icon_cursor_resource path can be triggered by parsing crafted executables, leading to memory corruption and potential code execution or a crash. Public advisories (e.g., Re...

CVE-2016-0610

CVE-2016-0610 affects Oracle MySQL <=5.6.27 and MariaDB <=10.0.22 / 10.1.x

CVE-2016-0668

CVE-2016-0668 affects Oracle MySQL 5.6.28 and earlier, 5.7.10 and earlier, and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12. The vulnerability is described as an unspecified issue related to InnoDB that can allow local users to affect availability. Remediation stated in the sources inc...

CVE-2016-2791

Summary: CVE-2016-2791 affects the Graphite 2 font library (graphite2) shipped with Graphite-based builds and Mozilla Firefox. The issue is in graphite2::GlyphCache::glyph, where a crafted Graphite font can trigger a buffer over-read, potentially allowing a denial of service and other unspecified...

CVE-2016-2802

Summary: CVE-2016-2802 affects Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7. The flaw resides in graphite2::TtfUtil::CmapSubtable4NextCodepoint and can be exploited to trigger a crash via a crafted Graphite font (buffer over-read), causing a denial...

CVE-2017-6542

CVE-2017-6542 affects PuTTY before 0.68. The vulnerability lies in the ssh_agent_channel_data function processing forwarded SSH agent messages; a large length value can trigger a heap-based buffer overflow, potentially enabling remote code execution or other impact when agent forwarding is used. ...

CVE-2015-7223

CVE-2015-7223 affects Mozilla Firefox before 43.0 (and related ESR lines in some advisories) via the WebExtension APIs. Root cause: unsafe handling in WebExtension APIs that can grant privileges to a crafted site. Impact: remote attackers could gain privileges, access sensitive information, or en...

CVE-2016-2825

CVE-2016-2825 affects Mozilla Firefox up to version 47.0. The flaw allows a partial bypass of the Same-Origin Policy by setting location.host via an invalid data: URL, enabling a remote attacker to bypass some SOP protections. Remediation in the referenced openSUSE advisories is to update Firefox...

CVE-2022-31252

CVE-2022-31252 describes an Incorrect Authorization in chkstat where group-writable path components aren’t checked, allowing local attackers with group write access to influence path resolution for a privileged binary. Affected: SLES 12-SP5 (permissions versions prior to 20170707); openSUSE Leap ...

CVE-2016-1629

Google Chrome before 48.0.2564.116 is affected by CVE-2016-1629, a vulnerability in the Blink/Same Origin Policy and sandbox where a remote attacker could bypass SOP and escape the sandbox via unspecified vectors. The issue is mitigated by upgrading to Chrome 48.0.2564.116 or later (as reflected ...

CVE-2016-1691

CVE-2016-1691 affects the Skia library used by Google Chrome prior to 51.0.2704.63. The issue arises from mishandling of coincidence runs in SkOpCoincidence.cpp and SkPathOpsCommon.cpp, enabling a remote attacker to trigger a heap-based buffer overflow and cause a denial of service (with possible...

CVE-2016-1677

CVE-2016-1677 refers to a type confusion in the V8 JavaScript engine used by Google Chrome/Chromium prior to version 51.0.2704.63. The flaw could allow a remote attacker to obtain sensitive information by calling decodeURI, via the affected V8 bindings, as part of the Chromium/Chrome stack. The c...

CVE-2016-2041

CVE-2016-2041 affects phpMyAdmin 4.0.x (before 4.0.10.13), 4.4.x (before 4.4.15.3), and 4.5.x (before 4.5.4). The issue is that libraries/common.inc.php does not use a constant‑time comparison for CSRF tokens, enabling timing analysis to bypass access restrictions as described in the initial desc...

CVE-2016-2794

The CVE-2016-2794 entry concerns Graphite 2 prior to version 1.3.6. The vulnerable function is graphite2::TtfUtil::CmapSubtable12NextCodepoint, used by Mozilla Firefox (before 45.0) and Firefox ESR 38.x (before 38.7). A crafted Graphite font can cause a buffer over-read, leading to a denial of se...

CVE-2016-7447

GraphicsMagick (before 1.3.25) is affected by a heap-based buffer overflow in the EscapeParenthesis function. The CVE-2016-7447 entry notes remote, unspecified impact via unknown vectors. Multiple external advisories indicate fixes in newer releases (e.g., 1.3.25 per openSUSE/SUSE notes; Debian a...

CVE-2014-2525

CVE-2014-2525 : LibYAML's yaml_parser_scan_uri_escapes() has a heap-based buffer overflow when parsing percent-encoded text in a URI within YAML documents. The issue affects LibYAML before 0.1.6 and can allow arbitrary code execution via a crafted YAML file. Affected products use libyaml librarie...

CVE-2015-7744

CVE-2015-7744 affects wolfSSL (formerly CyaSSL) before 3.6.8. The flaw is in handling faults during the CRT-based RSA key exchange when performing ephemeral key exchange on servers with limited memory, enabling remote attackers to extract private RSA keys from TLS handshakes (Lenstra attack). Pub...

CVE-2016-1672

CVE-2016-1672 affects Google Chrome up to version 51.0.2704.63, where the ModuleSystem::RequireForJsInner function in extension bindings mishandles properties, enabling remote cross-origin bypass via unspecified vectors. Public advisories and vendor fixes (e.g., Chromium 51.0.2704.63) address the...

CVE-2016-6214

CVE-2016-6214 affects the GD Graphics Library (libgd) up to version 2.2.3, where gd_tga.c mishandles TGA input, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service. Root cause: improper boundary handling in TGA parsing. Affected versions: libgd ≤ 2.2.2 (befor...

CVE-2017-5934

CVE-2017-5934 affects MoinMoin GUI editor’s link dialogue prior to version 1.9.10, where input sanitization weaknesses allow remote XSS. The issue arises in the GUI editor’s link dialogue, enabling an attacker to inject arbitrary script/HTML via unspecified vectors. Public references across advis...

CVE-2019-11811

CVE-2019-11811 affects the Linux kernel up to version 5.0.4 (pre-5.0.4). The issue is a use-after-free on read access to /proc/ioports after the ipmi_si driver is removed, tied to ipmi_si_intf.c, ipmi_si_mem_io.c, and ipmi_si_port_io.c. Impact: local privilege/escalation risk if an attacker can u...

CVE-2016-8568

CVE-2016-8568 affects libgit2 prior to 0.24.3, where the git_commit_message function in oid.c can trigger an out-of-bounds read via a crafted object file when a cat-file command is processed. This has been publicly documented across multiple advisories and feeds (NVD entry and vendor-focused noti...

CVE-2015-8980

CVE-2015-8980 affects php-gettext up to version 1.0.11, where the plural form in ngettext calls can be exploited to execute arbitrary code. The root cause is mishandling of input in Gettext, leading to remote code execution. Affected advisories reference Ubuntu USN-4779-1, Mageia MGASA-2017-0038,...

CVE-2016-6855

Eye of GNOME (eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, is vulnerable to a denial-of-service/possible code execution via invalid UTF-8 passed to GMarkup. The root cause is handling of invalid UTF-8 strings leading to an out-of-...

CVE-2016-9830

CVE-2016-9830 affects GraphicsMagick 1.3.25 and earlier; MagickRealloc in memory.c can trigger a denial of service crash when processing JPEGs with large dimensions. Several advisories (e.g., Mageia MGASA-2017-0229, Debian DSA-3746, Amazon ALAS-2017-820) indicate upstream fixes in newer GraphicsM...

CVE-2017-5332

The CVE-2017-5332 issue affects icoutils (wrestool) with a memory access error in extract_group_icon_cursor_resource/extract.c. Exploitation could crash the process and, in crafted inputs, allow arbitrary code execution. Public advisories across Debian, Mageia, CentOS/Red Hat and Fedora describe ...

CVE-2014-9846

CVE-2014-9846 involves a buffer overflow in the ReadRLEImage function (coders/rle.c) of ImageMagick, exposed in at least ImageMagick 6.8.9.9. Remote, unauthenticated attackers could trigger an overflow, with impact described as unspecified in the CVE record. The connected OpenVAS/Nessus entries c...

CVE-2015-7542

CVE-2015-7542 affects libgwenhywfar up to version 4.12.0, caused by the use of outdated bundled CA certificates. Multiple sources (NVD entry and downstream advisories) confirm the vulnerability exists due to trust store handling in the library. Exploitation details are not provided in the documen...

CVE-2016-1698

In CVE-2016-1698, Google Chrome’s extensions/renderer/resources/binding.js createCustomType did not validate module types, causing an information disclosure via a poisoned definition. Affected is Chrome before 51.0.2704.79; the issue could allow loading arbitrary modules or exposing sensitive dat...

CVE-2016-7994

CVE-2016-7994 affects QEMU’s virtio-gpu resource handling. The issue is a memory leak in virtio_gpu_resource_create_2d (hw/display/virtio-gpu.c) that can be triggered by a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands, allowing a local privileged guest administrator to induce memory ...

CVE-2016-9597

CVE-2016-9597 is a regression for CVE-2016-3705 where Red Hat/JBoss RHSA-2016:2957 did not include the fix for libxml2, leaving a denial-of-service risk via a stack overflow. The connected records confirm libxml2 as the affected library and document multiple publisher advisories (RHSA-2016:1292, ...

CVE-2016-1254

Tor before 0.2.8.12 is affected by CVE-2016-1254. The vulnerability arises from parsing hidden service descriptors and can cause a denial-of-service client crash. Affected products are Tor releases prior to 0.2.8.12; exploitation details are not provided beyond the crash condition. Remediation is...

CVE-2016-3068

Mercurial before 3.7.3 is vulnerable to remote code execution via a crafted git ext:: URL when cloning a subrepository, enabling an attacker to run arbitrary code. Public advisories (ALAS-2016-697; CentOS/RH/Fedora updates) confirm this CVE-2016-3068 issue and indicate the fix is mercurial 3.7.3....

CVE-2016-7448

CVE-2016-7448 affects GraphicsMagick (Utah RLE reader) up to version 1.3.25. The vulnerability allows remote attackers to cause a denial of service via header information and file size handling, leading to CPU consumption or large memory allocations. This is caused by improper handling in the Uta...