Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the…

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling)

QUIC certificate check bypass with wolfSSL

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not properly clean the security…

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)

In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an…

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library

OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected)

An exploitable denial-of-service vulnerability exists in Systemd 245

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging)

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method

A vulnerability was found in Hibernate-Validator

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc)

An issue was discovered in libexpat before 2.6.4

nscd: Null pointer crashes after notfound response

Glibc: potential use-after-free in gaih_inet()

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due…

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles"

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

A flaw was found in Undertow

A flaw was found in undertow

Incorrect MAC key used in the RC4-MD5 ciphersuite

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)

NULL pointer deref in signature_algorithms processing

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)

The X.509 GeneralName type is a generic type for representing different types of names

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached)

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)

0-byte record padding oracle

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE)