An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data…

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname

scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents…

An issue was discovered in MP4Box in GPAC 0.7.1

An issue was discovered in MP4Box in GPAC 0.7.1

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap…

exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not…

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated…

Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass

Mozilla developers backported selected changes in the Skia library

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths

Memory safety bugs were reported in Firefox 59

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7

A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one

Memory safety bugs were reported in Firefox ESR 52.6

A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations

Memory safety bugs were reported in Firefox 58

A potential integer overflow in the "DoCrypt" function of WebCrypto was identified

WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash

A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support

A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash

A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially…

A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content

A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM

A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch…

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers

Memory safety bugs were reported in Firefox 57

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4

Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp

In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the…

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might…

An issue was discovered in Liblouis 3.5.0

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable…