Open Source Vulnerabilities

gnome-gmail

ffmpeg

poppler, poppler, poppler

jhead, jhead, jhead, jhead

ffmpeg, ffmpeg, ffmpeg

CVE-2021-3236 does not affect BellSoft software

CVE-2020-36023 does not affect BellSoft software

iotjs, iotjs

gnome-gmail, gnome-gmail, gnome-gmail, gnome-gmail

poppler, poppler, poppler

qpdf, qpdf, qpdf

qt4-x11, qt4-x11, qtsvg-opensource-src, qt4-x11, qtsvg-opensource-src, qt6-svg, qt6-svg, qt6-svg, qt6-svg

fastdds

fastdds

fastdds

fastdds

fastdds

fastdds

fluent-bit

Invalid-free in reset_context

libxml2

Heap-use-after-free in __xmlRaiseError

apache-poi

Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren

Improper validation of sequence numbers leading to remotely reachable assertion failure

Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds

Another heap overflow in push_back_helper

Heap overflow in push_back_helper due to a CDR message

Malformed serialized data in a data submessage leads to unhandled exception

postgresql-15

postgresql, postgresql, postgresql13, postgresql13, postgresql14, postgresql14, postgresql14, postgresql14, postgresql15, postgresql15, postgresql15, postgresql15

postgresql, postgresql, postgresql13, postgresql13, postgresql14, postgresql14, postgresql14, postgresql14, postgresql15, postgresql15, postgresql15, postgresql15

pgextwlist, pgextwlist, pgextwlist, postgresql-15

postgresql

CVE-2023-39417 affecting package postgresql for versions less than 14.10-1

postgresql-9.3, postgresql-9.5, postgresql-10, postgresql-12, postgresql-14

Malformed GAP submessage triggers assertion failure