Underflow in PHP-FPM can lead to RCE

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

mod_proxy SSRF

Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

ipv6: fix possible UAF in icmpv6_rcv()

netfilter: conntrack: remove sprintf usage

Samba: remote code execution in samr

Gnutls: gnutls: authentication bypass via nul character in username

Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Rsync: heap buffer overflow in rsync due to improper checksum length handling

A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory

A vulnerability was found in ImageMagick

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria

A flaw was found in mbsync versions prior to 1.4.4

Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions…

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF…

A flaw was found in the ZeroMQ server in versions before 4.3.3

A flaw was found in libwebp in versions before 1.0.1

A flaw was found in libwebp in versions before 1.0.1

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()

A flaw was found in libmicrohttpd

A flaw was found in http-proxy-agent, prior to version 2.1.0

A flaw was found in gnutls

A flaw was found in gnutls

A signature verification vulnerability exists in crewjam/saml

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script…

SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute…

The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a…

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons

HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref"

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits"

The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname…

A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions

An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the…

gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw

An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11

The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code

An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass…

Gnome Pango 1.42 and later is affected by: Buffer Overflow