An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU

There's a flaw in urllib's AbstractBasicAuthHandler class

Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions

Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as…

Sqlite: use-after-free bug in jsonparseaddnodearray

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c

An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18

A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58

A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c

A vulnerability was found in ImageMagick

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault

A heap buffer overflow issue was found in ImageMagick

In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list

An issue was discovered in uriparser before 0.9.6

An issue was discovered in uriparser before 0.9.6

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations

Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection

H5P metadata automatically populated the author with the user's username, which could be sensitive information

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions

Students in "Only see own membership" groups could see other students in the group, which should be hidden

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they…