Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegatio…
Use After Free in GitHub repository vim/vim prior to 9.0.0579.
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552.
Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There is only a risk in conjunction …
Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack…
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must displ…
A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.2…
Use After Free in GitHub repository vim/vim prior to 9.0.0530.
By sending specific queries to the resolver, an attacker can cause named to crash.
The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field t…
The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a ch…
The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass. A client can issue an HTTP Accept header field containing an optiona…
The OWASP ModSecurity Core Rule Set (CRS) is affected by a response body bypass to sequentially exfiltrate small and undetectable sections of data by…
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a …
Use After Free in GitHub repository vim/vim prior to 9.0.0490.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483.
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure…
KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache.
An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in ord…
.NET Core and Visual Studio Denial of Service Vulnerability
cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malic…
Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby (Docker Engine) where supplementary gro…
Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a.
An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which …
An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows a…
Use After Free in GitHub repository vim/vim prior to 9.0.0360.
libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.