Apache Solr DataImportHandler Code Injection Vulnerability

ALSA: usb-audio: Fix out of bounds reads when finding clock sources

Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

Double Free in net/packet/af_packet.c leading to priviledge escalation

Linux Kernel Race Condition Vulnerability

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Google Chromium Information Disclosure Vulnerability

SaltStack Salt Path Traversal Vulnerability

Mozilla Firefox Information Disclosure Vulnerability

Android Kernel Race Condition Vulnerability

Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

Google Chromium Intents Improper Input Validation Vulnerability

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Potential XSS vulnerability in jQuery

HID: core: zero-initialize the report buffer

Netlogon Elevation of Privilege Vulnerability

Linux Kernel Race Condition Vulnerability

Stored XSS vulnerability in Roundcube

Possible view of the setup pages by unauthenticated users if config file already exists

VMware Tools Authentication Bypass Vulnerability

Flatpak is a Linux application sandboxing and distribution framework

A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC…

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class…

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB…

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level

XStream is vulnerable to a Remote Command Execution attack

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update…

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue

An issue was discovered in Xen 4.7 through 4.10.x

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group )

xrdp is an open source RDP server

net-snmp is a SNMP application library, tools and daemon

pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired…

There exists a heap buffer overflow vulnerable in Abseil-cpp

Redis' Lua library commands may lead to remote code execution

GStreamer is a library for constructing graphs of media-handling components

Unchecked Error Condition vulnerability in Apache Tomcat

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support

In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first…

libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel