SaltStack Salt Authentication Bypass Vulnerability

OpenSMTPD Remote Code Execution Vulnerability

Underflow in PHP-FPM can lead to RCE

Exim Out-of-bounds Write Vulnerability

Exim Mail Transfer Agent (MTA) Improper Input Validation

Exim Buffer Overflow Vulnerability

Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if…

Oracle Java SE and JRockit Unspecified Vulnerability

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Oracle JRE Remote Code Execution Vulnerability

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Exim Heap-Based Buffer Overflow Vulnerability

Oracle JRE Unspecified Vulnerability

Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be…

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC…

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB…

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default

CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection

WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52

The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or…

It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC

Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7

dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check

libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value

An issue was discovered in Squid before 5.0.2

An issue was discovered in Squid through 4.7

An issue was discovered in Squid through 4.7

Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary…

OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies

An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions

An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with…

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover

sysstat through 12.2.0 has a double free in check_file_actlst in sa_common.c