Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation

Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service

Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

undici WebSocket client vulnerable to denial of service via fragment count bypass

Dracut: dracut: root code execution via dhcp options command injection

ASP.NET Core Denial of Service Vulnerability

389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser

Apache HTTP Server: mod_http2 denial of service

Apache HTTP Server: mod_xml2enc heap overflow

Apache HTTP Server: mod_proxy_html buffer overflow

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Invalid handling of CLASS != IN

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

libyang: lyb_read_string() integer overflow → heap buffer overflow

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

ASP.NET Core Denial of Service Vulnerability

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

A use-after-free issue was addressed with improved memory management

The issue was addressed with improved memory handling

The issue was addressed with improved memory handling

No description published yet

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

Quadratic string concatentation in consumeComment in net/mail

Crash when handling long CNAME response in net

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Prometheus: remote read endpoint allows denial of service via crafted snappy payload

Prometheus Azure AD remote write OAuth client secret exposed via config API

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec

Information disclosure due to incorrect boundary conditions in the Audio/Video component

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Use-after-free in the JavaScript Engine component

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component

Use-after-free in the WebRTC component

Use-after-free in the DOM: Core & HTML component

.NET and Visual Studio Denial of Service Vulnerability

.NET Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability