Todo Lists

Integer overflow in xmlBuf (buf.c) and xmlBuffer (tree.c) can lead to out-of-bounds memory...

usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1...

Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla...

In unusual circumstances, selecting text could cause text selection caching to behave...

When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was...

SVG's <use> element could have been used to load unexpected content that could have...

The sourceMapURL feature in devtools was missing security checks that would have allowed a...

By using a link with rel="localization" a use-after-free could have been triggered by...

An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof...

An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the...

An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a...

Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several...

Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally...

A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows...

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and...

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission...

tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in...

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c

tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c

libcurl would reuse a previously created connection even when a TLS or SSH related option...

libcurl provides the `CURLOPT_CERTINFO` option to allow applications to request details to...

The curl URL parser wrongly accepts percent-encoded URL separators like '/' when decoding...

libcurl wrongly allows HTTP cookies to be set for Top Level Domains (TLDs) if the host name...

If curl adds a number to not "clobber" the output and an error occurs during transfer, the...

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c...

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint...

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows...

drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket...

st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel...

When installing an add-on, Thunderbird verified the signature before prompting the user;...

Previously Thunderbird for macOS and Linux would download temporary files to a...

If an attacker could control the contents of an iframe sandboxed with allow-popups but not...

When resizing a popup after requesting fullscreen access, the popup would not display the...

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...

A heap-based buffer overflow flaw was found in the Fribidi package and affects the...

An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in...

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.

waitress behind a proxy that does not properly validate the incoming HTTP request matches...

The rust regex crate did not properly prevent crafted regular expressions from taking an...

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames...

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

containers launched through containerd’s CRI implementation with a specially-crafted image...

Use-after-free of ID and IDREF attributes in valid.c

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such...

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization...

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path

A logic issue was addressed with improved state management. A malicious website may cause...

possible double-free vulnerability in the OLE2 file parser

possible NULL-pointer dereference crash in the scan verdict cache check

possible multi-byte heap buffer overflow write vulnerability in the signature database load module

A concurrency use-after-free was found in the Linux kernel.

Use after free in Web UI Diagnostics.

Use after free in Sharing.

Use after free in ANGLE.

Heap buffer overflow in V8 Internationalization.

Inappropriate implementation in Web Contents.

Use after free in Performance APIs.

Use after free in Permission Prompts.

Use after free in Browser UI.

Use after free in Sharesheet.

A NULL pointer dereference flaw in the implementation of the X.25 set of standardized...

GitLab all versions starting from 13.9 before 14.8.6, all versions starting from 14.9...

GitLab all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before...

Missing invalidation of Markdown caching causes potential payloads from a previously...

GitLab all versions starting from 12.10 before 14.8.6, all versions starting from 14.9...

GitLab all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all...

GitLab from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions...

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions...

Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before...

Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all...

Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before...

Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6,...

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux...

Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all...

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before...

The c_rehash script does not properly sanitise shell metacharacters to prevent command...

There are NPD and use-after-free vulnerabilities in net/ax25/ax25_timer.c of linux that...

There are use-after-free vulnerabilities in net/ax25/af_ax25.c of linux that allow attacker...

There are null-ptr-deref vulnerability and use-after-free vulnerabilities in...

There are use-after-free vulnerabilities in drivers/net/hamradio/6pack.c of linux that...

When importing a revoked key that specified key compromise as the revocation reason,...

After a VR Process is destroyed, a reference to it may have been retained and used, leading...

A use-after-free vulnerability was found in drivers/net/hamradio in the Linux kernel. In...

Null Pointer Dereference Caused Segmentation Fault in gpac prior to 2.1.0-DEV

Linux Kernel v5.2+: x86/kvm: cmpxchg_gpte can write to pfns outside the userspace region

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions...

use after free in mrb_vm_exec in mruby prior to 3.2

It is a type confusion weakness in the Chrome V8 JavaScript engine. Google is aware that an...

race condition in snd_pcm_hw_free leading to use-after-free

CVE-2022-1016 pertains to uninitialized stack data in the nft_do_chain routine....

CVE-2022-1015 pertains to an out of bounds access in nf_tables expression evaluation due to...

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls...

Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory...

A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in...

A kernel information leak flaw was identified in the scsi_ioctl function in...

In the QEMU virtio-fs shared file system daemon (virtiofsd) a local guest user can create...

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info...

In the QXL display device emulation in QEMU. A double fetch of guest controlled values...

An unprivileged write to the file handler flaw in the Linux kernel's control groups and...

An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker...

An integer overflow in the cursor_alloc() function of the QXL display device emulation can...

In the QXL display device emulation in QEMU. A double fetch of guest controlled values...

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete...

In the QEMU virtio-fs shared file system daemon (virtiofsd) a local guest user can create...

A kernel information leak flaw was identified in the scsi_ioctl function in...

A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in...

A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls...

A vulnerability was found in PackageKit in the way some of the methods exposed by the...

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user...

use after free in mrb_vm_exec in mruby prior to 3.2

Null Pointer Dereference Caused Segmentation Fault in gpac prior to 2.1.0-DEV

Format string vulnerability in evdev device handling

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before...

A concurrency use-after-free was found in the Linux kernel.

path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path

path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization...

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such...

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames...

A flaw was found in the Linux kernel. When an application tries to open a directory (using...

A flaw was found in rsyslog's reception TCP modules. This flaw allows an attacker to craft...

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.

An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in...

A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an...

A heap-based buffer overflow flaw was found in the Fribidi package and affects the...

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...

the fix for CVE-2021-3748 forgot to unmap the cached virtqueue elements on error, leading...

In case of error in the vhost-vsock device, an invalid element was not detached from the...

drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket...

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows...

In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint...

tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c

tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in...

tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c