OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname

An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16

libmysofa is vulnerable to Heap-based Buffer Overflow

Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used

ap_escape_quotes() may write beyond the end of a buffer when given malicious input

An issue was discovered in the Oauth extension for MediaWiki through 1.35.2

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF…

Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys

crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust

Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer…

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application

Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow

A flaw was found in the ZeroMQ server in versions before 4.3.3

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free

aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap

A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow

Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values

A flaw was found in libmicrohttpd

In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is vulnerable to an Arbitrary Code Execution attack

A flaw was found in http-proxy-agent, prior to version 2.1.0

Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated

A flaw was found in gnutls

A flaw was found in gnutls

A flaw was found in newlib in versions prior to 4.0.0

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1

An issue was discovered in SaltStack Salt before 3002.5

An issue was discovered in SaltStack Salt before 3002.5

An issue was discovered in through SaltStack Salt before 3002.5

An issue was discovered in through SaltStack Salt before 3002.5

A flaw was found in keylime 5.8.1 and older

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact…

Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option)

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept…

A signature verification vulnerability exists in crewjam/saml

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow