Open Source Vulnerabilities

zeromq

pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4

spamassassin

denial of service vulnerability was identified that exists in Apache SpamAssassin before 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Side-channel information leakage in graphics in Google Chrome prior to 87

podofo

In PoDoFo 0

otrs

In jQuery versions greater than or equal to 1

webkit2gtk

code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2

zeromq

In ZeroMQ libzmq before 4

oniguruma

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

spamassassin

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Enc...

podofo

In PoDoFo 0

freetype, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Heap buffer overflow in Freetype in Google Chrome prior to 86

otrs

In jQuery starting with 1

fastd

receive

webkit2gtk

use after free issue was addressed with improved memory management

zeromq

In ZeroMQ before version 4

spamassassin

In Apache SpamAssassin before 3

podofo

PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject

otrs

issue was discovered in Open Ticket Request System (OTRS) 5

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 83

webkit2gtk

exploitable use-after-free vulnerability exists in WebKitGTK browser version 2

spamassassin

In Apache SpamAssassin before 3

podofo

Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser

otrs

issue was discovered in Open Ticket Request System (OTRS) 5

webkit2gtk

logic issue was addressed with improved restrictions

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78

spamassassin

command execution issue was found in Apache SpamAssassin prior to 3

podofo

function PdfPagesTree::GetPageNodeFromArray in PdfPageTree

otrs

Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e

webkit2gtk

This issue was addressed with improved iframe sandbox enforcement

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with a...

libde265

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1

spamassassin

command execution issue was found in Apache SpamAssassin prior to 3

podofo

PoDoFo 0

prosody

It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in parsed XML data

plib

Buffer overflow in the ulSetError function in util/ulError

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

webkit2gtk

port redirection issue was addressed with additional port validation

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When an extension with the proxy permission registered to receive <all_urls>, the proxy

libde265

issue has been found in libde265 v1

podofo

function TextExtractor::ExtractText in TextExtractor

spamassassin

In Apache SpamAssassin before 3

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

plib

Stack-based buffer overflow in the error function in ssg/ssgParser

prosody

muc

webkit2gtk

type confusion issue was addressed with improved state handling

librewolf, librewolf, librewolf, librewolf, librewolf

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the...

libde265

stack-buffer-overflow exists in libde265 v1

podofo

PdfFontFactory

otrs

issue was discovered in Open Ticket Request System (OTRS) 7

webkit2gtk

This issue was addressed with improved iframe sandbox enforcement