Open Source Vulnerabilities

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

perl-data-validate-ip

Data::Validate::IP module through 0

hivex

flaw was found in the hivex library in versions before 1

zoneminder

Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to inst...

jhead

jhead through 3

w3m

out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep

klibc

issue was discovered in klibc before 2

netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

zoneminder

CSRF check issue exists in ZoneMinder through 1

gitolite

commands/rsync in Gitolite before 3

librewolf, librewolf, librewolf, librewolf, librewolf

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater

w3m

out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str

netatalk

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

zoneminder

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1

nss, librewolf, librewolf, librewolf, librewolf, librewolf

During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data

netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

webkit2gtk

logic issue was addressed with improved state management

zoneminder

Reflected XSS exists in ZoneMinder through 1

nss, librewolf, librewolf, librewolf, librewolf, librewolf

When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack

netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

zoneminder

Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1

seatd

seatd-launch in seatd 0

nss, librewolf, librewolf, librewolf, librewolf, librewolf

When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation

netatalk

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

zoneminder

POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1

perl-app-cpanminus

App::cpanminus package 1

netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

librewolf, librewolf, librewolf, librewolf, librewolf

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free

samurai

samurai 1

zoneminder

Reflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

netatalk

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager

librewolf, librewolf, librewolf, librewolf, librewolf

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open r...

zoneminder

POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1

samurai

samurai 1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contentedita...

perl-convert-asn1

perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0

netatalk

Netatalk through 3

zoneminder

POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1

swaylock

swaylock before 1

webkit2gtk

use after free issue was addressed with improved memory management

librewolf, librewolf, librewolf, librewolf, librewolf

When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash

netatalk

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

zoneminder

Self - Stored XSS exists in ZoneMinder through 1