xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted…

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been…

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a…

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper

xmldom allows multiple root nodes in a DOM

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate…

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js

A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable

Remote code execution in HyperSQL DataBase

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via…

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple…

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability

Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in received_data to execute code

This affects the package thenify before 3.3.1

An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final…

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

Bottle before 0.12.20 mishandles errors during early request binding

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability

In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection

Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control

An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13

A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4

PJSIP is a free and open source multimedia communication library written in C

OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies,…

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

PJSIP is a free and open source multimedia communication library written in C language

In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and…

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types

image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

A flaw was found in mbsync versions prior to 1.4.4