A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit

An issue was discovered in the Linux kernel through 5.6.11

OCSP stapling bypass with GnuTLS

TLS certificate check bypass with mbedTLS

curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms

gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value,…

QUIC certificate check bypass with wolfSSL

REXML is an XML toolkit for Ruby

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations

When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly

An issue was discovered in the Linux kernel through 5.16.11

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and…

Vim is an open source command line text editor

Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI)

The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space

Vulnerability in Oracle Java SE (component: Compiler)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)

Vim is an open source, command line text editor

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling

A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not…

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198

REXML is an XML toolkit for Ruby