Open Source Vulnerabilities

lout

Lout 3

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application

perl-dbi

issue was discovered in the DBI module through 1

lout

Lout 3

webkit2gtk

This issue was addressed with improved iframe sandbox enforcement

librewolf, librewolf, librewolf, librewolf, librewolf

iframe sandbox element with the allow-popups flag could be bypassed when using noopener links

zoneminder

ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "t...

perl-dbi

buffer overflow was found in perl-DBI < 1

webkit2gtk

issue existed in the drawing of web page elements

librewolf, librewolf, librewolf, librewolf, librewolf

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect

zoneminder

ZoneMinder before 1

perl-dbi

untrusted pointer dereference flaw was found in Perl-DBI < 1

ytnef

In ytnef 1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Inappropriate implementation in WebRTC in Google Chrome prior to 84

zoneminder

Stored XSS in the Filters page (Name field) in ZoneMinder 1

taglib

TagLib::Ogg::FLAC::File::scan function in oggflacfile

sphinx

issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, ...

webkit2gtk

logic issue was addressed with improved state management

ytnef

In ytnef 1

librewolf, librewolf, librewolf, librewolf, librewolf

Use after free in ANGLE in Google Chrome prior to 81

zoneminder

ZoneMinder through 1

taglib

In TagLib 1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

zoneminder

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox for Android 79

webkit2gtk

vulnerability was found in WebKit

w3m

w3m through 0

librewolf, librewolf, librewolf, librewolf, librewolf

lock was missing when accessing a data structure and importing certificate information into the trust database

zoneminder

Log Injection exists in ZoneMinder through 1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

perl-email-address

parse() method in the Email::Address module through 1

w3m

w3m through 0

zoneminder

Session fixation exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution

klibc

issue was discovered in klibc before 2

webkit2gtk

logic issue was addressed with improved state management

w3m

w3m through 0

librewolf, librewolf, librewolf, librewolf, librewolf

When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc

zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1

klibc

issue was discovered in klibc before 2

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

zoneminder

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page

w3m

There is an out-of-bounds write in checkType located in etc

jhead

jhead through 3

klibc

issue was discovered in klibc before 2

netatalk

Netatalk before 3