WebKitGTK Memory Corruption Vulnerability

Mozilla Firefox Security Feature Bypass Vulnerability

Adobe Flash Player Double Free Vulnerablity

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Adobe Flash Player Incorrect Default Permissions Vulnerability

Adobe Flash Player Code Execution Vulnerability

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g

Glibc: buffer overflow in ld.so leading to privilege escalation

Linux Kernel Privilege Escalation Vulnerability

Linux Kernel Improper Authentication Vulnerability

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Apache HTTP Server Privilege Escalation Vulnerability

Linux Kernel Integer Overflow Vulnerability

Artifex Ghostscript Type Confusion Vulnerability

Linux Kernel Privilege Escalation Vulnerability

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe Reader Buffer Overflow Vulnerability

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

OpenSSL Information Disclosure Vulnerability

Adobe Flash Player Memory Corruption Vulnerability

net-snmp provides various tools relating to the Simple Network Management Protocol

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification

A flaw was found in the WebKitGTK package

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

A privilege escalation flaw was found in Podman

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes…

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP…

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur

Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by…

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation

An issue was discovered in Squid 4.0.23 through 4.7

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are…

A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2

An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a…

Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd

NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site

A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the…

An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash

A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element