VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

Underflow in PHP-FPM can lead to RCE

Oracle Java SE and JRockit Unspecified Vulnerability

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

mod_proxy SSRF

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC…

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass…

Gnome Pango 1.42 and later is affected by: Buffer Overflow

A flaw was found in the Linux kernel

A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4…

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an…

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress

The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT)…

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5

FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve…

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization

Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3

When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of…

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code…

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption…

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory…

keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in…

Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring

A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored

A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing…

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16

Mozilla developers backported selected changes in the Skia library

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7

Memory safety bugs were reported in Firefox ESR 52.6

procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues