Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing…

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in…

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code

An issue was discovered in zsh before 5.6

An issue was discovered in zsh before 5.6

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference

libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it…

mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no…

An issue was discovered in libX11 through 1.6.5

An issue was discovered in libX11 through 1.6.5

_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which…

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption

camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client…

WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and…

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data…

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents…

An issue was discovered in MP4Box in GPAC 0.7.1

An issue was discovered in MP4Box in GPAC 0.7.1

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap…

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not…

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated…

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass

Mozilla developers backported selected changes in the Skia library

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths

Memory safety bugs were reported in Firefox 59

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one

Memory safety bugs were reported in Firefox ESR 52.6

A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations

Memory safety bugs were reported in Firefox 58

A potential integer overflow in the "DoCrypt" function of WebCrypto was identified

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash