Exim DMARC dmarc.c dmarc_dns_lookup use after free

Puppetlabs-apt Command Injection

A limited SQL injection risk was identified in the "browse list of users" site administration page

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement

Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file

Redis is an in-memory database that persists on disk

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via…

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple…

The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code

This affects the package thenify before 3.3.1

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final…

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable

Bottle before 0.12.20 mishandles errors during early request binding

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria

nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files

OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies,…

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark

A flaw was found in mbsync versions prior to 1.4.4

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and…

Twig is an open source template language for PHP

pgjdbc is the offical PostgreSQL JDBC Driver

The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the…

A flaw was found in mbsync in isync 1.4.0 through 1.4.3

An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit…

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell…

The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json