Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Corosync: corosync: denial of service and information disclosure via crafted udp packet

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility

Gnutls: vulnerability in gnutls othername san export

Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel

This CVE exists because of an incomplete fix for CVE-2021-3750

A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU

A flaw was found in the QXL display device emulation in QEMU

A flaw was found in the QXL display device emulation in QEMU

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes…

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags

NGINX ngx_http_rewrite_module vulnerability

Openssh: regresshion - race condition in ssh allows rce/dos

A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL…

A flaw was found in the way Samba maps domain users to local users

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of…

squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography…

A flaw was found in pki-core

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write

php-symfony2-Validator has loss of information during serialization

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length…

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in…

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D)

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D)

A vulnerability was found in mod_auth_mellon before v0.14.2

In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3

A weakness was found in postgresql-jdbc before version 42.2.5

A vulnerability was found in ipa before 4.4

A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain

In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the…