VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

Underflow in PHP-FPM can lead to RCE

Oracle Java SE and JRockit Unspecified Vulnerability

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

mod_proxy SSRF

WebKitGTK Memory Corruption Vulnerability

Mozilla Firefox Security Feature Bypass Vulnerability

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g

Glibc: buffer overflow in ld.so leading to privilege escalation

Linux Kernel Privilege Escalation Vulnerability

Linux Kernel Improper Authentication Vulnerability

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Apache HTTP Server Privilege Escalation Vulnerability

Linux Kernel Integer Overflow Vulnerability

Artifex Ghostscript Type Confusion Vulnerability

OpenSSL Information Disclosure Vulnerability

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

ImageMagick Arbitrary File Deletion Vulnerability

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC…

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass…

Gnome Pango 1.42 and later is affected by: Buffer Overflow

A flaw was found in the Linux kernel

A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4…

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an…

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress

The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT)…

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5

FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve…

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization

Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of…

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code…

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption…

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory…

keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in…

Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring