An exploitable denial-of-service vulnerability exists in Systemd 245

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging)

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method

A vulnerability was found in Hibernate-Validator

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc)

An issue was discovered in libexpat before 2.6.4

nscd: Null pointer crashes after notfound response

Glibc: potential use-after-free in gaih_inet()

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due…

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles"

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)

A flaw was found in Undertow

A flaw was found in undertow

Incorrect MAC key used in the RC4-MD5 ciphersuite

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)

NULL pointer deref in signature_algorithms processing

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)

The X.509 GeneralName type is a generic type for representing different types of names

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached)

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)

0-byte record padding oracle

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access…

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified,…

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that…

A flaw was found in glib before version 2.63.6

An issue was discovered in the Linux kernel through 5.18.14

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)

Netty is an open-source, asynchronous event-driven network application framework

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)