WebRTC Heap Buffer Overflow Vulnerability

The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the…

A vulnerability was found in ImageMagick

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and…

A limited SQL injection risk was identified in the "browse list of users" site administration page

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection

A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle

In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual…

A remote code execution risk was identified in the IMSCP activity

A remote code execution risk was identified in the Lesson activity

Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to…

Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit…

Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

An SQL injection risk was identified in Badges code relating to configuring criteria

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution

Out-of-bounds write in GraphicsMagick PCD decoder

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data

A vulnerability was found in cri-o

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41

A vulnerability was found in ImageMagick

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is…

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is…

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or…

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey

A flaw was found in keepass

client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients

This affects the package celery before 5.2.2

An issue was discovered in Pure-FTPd 1.0.49

A flaw was found in mbsync before v1.3.5 and v1.4.1

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU

There's a flaw in urllib's AbstractBasicAuthHandler class

Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as…

Sqlite: use-after-free bug in jsonparseaddnodearray

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c

An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick