Linux Kernel Improper Privilege Management Vulnerability

The merge-deep library before 3.0.3 for Node.js can be tricked into overwriting properties of Object.prototype or adding new properties to it

Prototype Pollution

A flaw was found in gnutls

Grafana is an open-source platform for monitoring and observability

Grafana is an open-source platform for monitoring and observability

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Grafana plugin signature bypass vulnerability

A flaw was found in glibc

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts

An issue was discovered in Python before 3.11.1

Grafana is an open-source platform for monitoring and observability

Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server

The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame

Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector)

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used…

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4

Segmentation fault in SSL_check_chain

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)

NULL pointer deref in signature_algorithms processing

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)

Grafana is an open-source platform for monitoring and observability

Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed…

ws is an open source WebSocket client and server library for Node.js

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)

In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to…

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server)

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)

Grafana is an open-source platform for monitoring and observability

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)