WebRTC Heap Buffer Overflow Vulnerability

A remote code execution risk was identified in the IMSCP activity

A remote code execution risk was identified in the Lesson activity

Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to…

Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit…

Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

An SQL injection risk was identified in Badges code relating to configuring criteria

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution

Out-of-bounds write in GraphicsMagick PCD decoder

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data

A vulnerability was found in cri-o

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41

A vulnerability was found in ImageMagick

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is…

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is…

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or…

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey

A flaw was found in keepass

client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients

This affects the package celery before 5.2.2

An issue was discovered in Pure-FTPd 1.0.49

A flaw was found in mbsync before v1.3.5 and v1.4.1

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages

Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load