In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting)

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY…

Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a…

An out-of-bounds memory access flaw was found in the X.Org server

A vulnerability was found in perl 5.30.0 through 5.38.0

A flaw was found in xorg-server

A vulnerability was found in insights-client

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being…

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID

A flaw was found in the Emacs text editor

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel

A vulnerability was found in X.Org

An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive

An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write()

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file

There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of…

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial…

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer…

libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled

In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of…

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory…

Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image

Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds…

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly…

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to…

The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address…

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a…

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses…

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

A flaw was found in the Linux kernel's NVMe driver

A flaw was found in the Linux kernel's NVMe driver

A flaw was found in the Linux kernel's NVMe driver

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API

A flaw was found in xorg-server