Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device

After tar_close(), libtar.c releases the memory pointed to by pointer t

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and…

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted…

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a…

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of…

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics

Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate…

Exim DMARC dmarc.c dmarc_dns_lookup use after free

Puppetlabs-apt Command Injection

A limited SQL injection risk was identified in the "browse list of users" site administration page

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement

Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file

Redis is an in-memory database that persists on disk

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via…

The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple…

The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code

This affects the package thenify before 3.3.1

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final…

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable

Bottle before 0.12.20 mishandles errors during early request binding

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria

nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP)

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files

OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies,…

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow

In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow

Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark

A flaw was found in mbsync versions prior to 1.4.4

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and…