Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Google Chromium V8 Out-of-Bounds Read Vulnerability

Mozilla Firefox Security Feature Bypass Vulnerability

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

ImageMagick Improper Input Validation Vulnerability

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g

crypto: algif_aead - Revert to operating out-of-place

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Linux Kernel Use-After-Free Vulnerability

Glibc: buffer overflow in ld.so leading to privilege escalation

Linux Kernel Improper Ownership Management Vulnerability

Linux Kernel Improper Authentication Vulnerability

Red Hat Polkit Incorrect Authorization Vulnerability

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Linux Kernel Privilege Escalation Vulnerability

Android Kernel Use-After-Free Vulnerability

Linux Kernel Improper Privilege Management Vulnerability

Apache HTTP Server Privilege Escalation Vulnerability

Linux Kernel Integer Overflow Vulnerability

Linux Kernel Privilege Escalation Vulnerability

Exim Privilege Escalation Vulnerability

Linux Kernel Improper Input Validation Vulnerability

ISC BIND Data Processing Errors Vulnerability

OpenSSL Information Disclosure Vulnerability

Linux Kernel Race Condition Vulnerability

When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the…

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP…

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES)

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data

snapd 2.54.2 did not properly validate the location of the snap-confine binary

The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when…

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0

JIT optimizations involving the Javascript arguments object could confuse later optimizations

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash

When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition

Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash

Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash

A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing…

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a…

In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes around a certain location on the heap…

In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite…

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website