Glib: integer overflow in in g_escape_uri_string()

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)

Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Use-after-free in the JavaScript Engine component

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component

Use-after-free in the WebRTC component

Use-after-free in the DOM: Core & HTML component

.NET and Visual Studio Denial of Service Vulnerability

.NET Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET Spoofing Vulnerability

jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

Unexpected work during chain building in crypto/x509

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

Go JOSE affect by a panic in JWE decryption

Corosync: corosync: denial of service via integer overflow in join message validation

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

FreeRDP: ClearCodec resize_vbar_entry() Heap OOB Write

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses…

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory

Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage

ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response

Squid vulnerable to Denial of Service in ICP Request handling

Squid has Denial of Service in ICP Response handling

NGINX ngx_mail_auth_http_module vulnerability

Incorrect boundary conditions in the Layout: Text and Fonts component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the Audio/Video: Web Codecs component

Incorrect boundary conditions, integer overflow in the Graphics component

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Graphics: Canvas2D component

Incorrect boundary conditions in the Graphics: Canvas2D component

Race condition, use-after-free in the Graphics: WebRender component

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

nghttp2 Denial of service: Assertion failure due to the missing state validation

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions

ASP.NET Core Denial of Service Vulnerability

Incorrect parsing of IPv6 host literals in net/url

Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown…

The issue was addressed with improved memory handling

Memory exhaustion in query parameter parsing in net/url

Denial of Service in Python Protobuf

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`