A flaw was found in the Linux kernel

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an…

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress

The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT)…

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5

FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve…

FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization

In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or…

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations

An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3

postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER

An issue was discovered in GNU gettext 0.19.8

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing…

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code

mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no…

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which…

A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers

A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document

A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element

A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use

A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished

A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash

A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID)

A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements

A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM

A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed

A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash

A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM

A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell

A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists

Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1

Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially…

A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message

An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives

A use-after-free vulnerability during changes in style when manipulating DOM elements

A use-after-free vulnerability when holding a selection during scroll events

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when…

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters