The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the…

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems

There is an issue on grub2 before version 2.06 at function read_section_as_string()

A flaw was found in Booth, a cluster ticket manager

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant

Glibc: potential use-after-free in getaddrinfo()

Glibc: potential use-after-free in gaih_inet()

A flaw was found in the way samba implemented SMB1 authentication

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to…

An issue was discovered in OpenSSH 7.9

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)

The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied…

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of…

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows…

Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending…

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)

A heap overflow flaw was found in 389-ds-base

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory…

Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for…

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit)

fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive…

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from…

A flaw was found in pacemaker up to and including version 2.0.1

The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak

An issue was discovered in sd-bus in systemd 239

In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check

In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf

An issue was discovered in elfutils 0.175

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a…

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference…

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges)

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and…

net-snmp provides various tools relating to the Simple Network Management Protocol

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend…

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound)

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient