Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

ProFTPD Improper Access Control Vulnerability

Argument Injection in PHP-CGI

Roundcube Webmail SQL Injection Vulnerability

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

SaltStack Salt Shell Injection Vulnerability

Apache Tomcat Improper Privilege Management Vulnerability

OpenSMTPD Remote Code Execution Vulnerability

VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

Underflow in PHP-FPM can lead to RCE

Exim Out-of-bounds Write Vulnerability

PHP-CGI Query String Parameter Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium Visuals Use-After-Free Vulnerability

Google Skia Integer Overflow Vulnerability

Google Chrome Skia Integer Overflow Vulnerability

Google Chromium Mojo Insufficient Data Validation Vulnerability

Google Chromium Portals Use-After-Free Vulnerability

Google Chromium Indexed DB API Use-After-Free Vulnerability

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

mod_proxy SSRF

Rust is a programming language

Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9

sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution

Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl

pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code

A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command

XStream is vulnerable to a Remote Command Execution attack

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to…

An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22

A heap-based buffer overflow vulnerability exists in the LookupTable::SetLUT functionality of Mathieu Malaterre Grassroot DICOM 3.0.23

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FreeRDP is a free implementation of the Remote Desktop Protocol

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c

pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API