Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)

A vulnerability was found in GNU Binutils 2.43

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access…

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified,…

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that…

A flaw was found in glib before version 2.63.6

An issue was discovered in the Linux kernel through 5.18.14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Netty is an open-source, asynchronous event-driven network application framework

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file

An issue was discovered in the Linux kernel before 5.16.12

A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception

Nullptr dereference when a null char is present in a proto symbol

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags

A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)

Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles)

An issue was discovered in the Linux kernel through 5.6.11

An issue was discovered in the Linux kernel before 5.4.17

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)

The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical…

An issue was discovered in the Linux kernel 5.4 and 5.5 through 5.5.6 on the AArch64 architecture

ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka…

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound…

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in…

relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion

In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to…

Improper Input Validation vulnerability in Apache POI

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query…