The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local…

Glib: integer overflow in in g_escape_uri_string()

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)

A flaw was found in grub2 in versions prior to 2.06

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

Libtiff: null pointer dereference in tif_dirinfo.c

Kernel: null pointer dereference in __nvmet_req_complete

Kernel: null pointer dereference in nvmet_tcp_execute_request

Kernel: null pointer dereference in nvmet_tcp_build_iovec

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native…

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is…

A vulnerability was found in MariaDB

A flaw was found in Keylime

A vulnerability was found in the libreswan library

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions

A flaw was found in grub2 in versions prior to 2.06

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled

Apache HTTP Server versions 2.4.20 to 2.4.43

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet

There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6

runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount…

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)

A denial of service flaw was found in the way BIND handled DNSSEC validation

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a…

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt

A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

Failure to properly clean up closed OMAPI connections can exhaust available sockets

Improper fetch cleanup sequencing in the resolver can cause named to crash

A malicious client can overflow a reference counter in ISC dhcpd

A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized…

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly

A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling