VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

Underflow in PHP-FPM can lead to RCE

Adobe Flash Player Remote Code Execution Vulnerability

Adobe Flash Player Arbitrary Code Execution Vulnerability

Oracle Java SE and JRockit Unspecified Vulnerability

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe Flash Player Memory Corruption Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Adobe Flash Player Integer Underflow Vulnerablity

Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

PHP-CGI Query String Parameter Vulnerability

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC…

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update…

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue

A flaw was found in X.Org server

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass…

Gnome Pango 1.42 and later is affected by: Buffer Overflow

A flaw was found in the Linux kernel

A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4…

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of…

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3

Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection

In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter

In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code…

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations

Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption…

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory…

An issue was discovered in Artifex Ghostscript before 9.26

Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring

A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored

A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1

It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode