Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file

A flaw was found in X.Org server

An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2

A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17

paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML…

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license

An issue was discovered in FRRouting FRR 9.0

An XML External Entity (XXE) issue was discovered in Python through 3.9.1

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35

In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may…

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled

GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function…

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch

A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP)

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted…

When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been…

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a…

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper

xmldom allows multiple root nodes in a DOM

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate…

Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js

A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable

Remote code execution in HyperSQL DataBase