Open Source Vulnerabilities

opendkim

test suite in libopendkim in OpenDKIM through 2

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) that support 802

dotstatsuite-supercore

dotstatsuite-supercore

dotstatsuite-supercore

webkit2gtk

issue was discovered in certain Apple products

privoxy

vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination

librewolf, librewolf, librewolf, librewolf, librewolf

When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block could allow an attacker to inject arbitrary styles, bypassing the intent of the ...

sox

issue was discovered in SoX 14

dotstatsuite-supercore

dotstatsuite-supercore

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) that support 802

webkit2gtk

issue was discovered in certain Apple products

privoxy

vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

first time AirPods are connected to an iPhone, they become named after the user's name by default (e

sox

issue was discovered in SoX 14

pcmanfm

PCManFM 1

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, dec...

webkit2gtk

issue was discovered in certain Apple products

aws-cli-1

sox

issue was discovered in SoX 14

aws-cli-1

aws-cli-1

aws-cli-1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init

webkit2gtk

issue was discovered in certain Apple products

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802

sox

In the startread function in xa

snmptt

SNMPTT before 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802

sox

Security fix for CVE-2017-13642 applied in: sox 14.4.2-r5

librewolf, librewolf, librewolf, librewolf, librewolf

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode

webkit2gtk

logic issue was addressed with improved validation

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access poin...

lxterminal

unixsocket

sox

There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm

librewolf, librewolf, librewolf, librewolf, librewolf

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files

webkit2gtk

memory corruption issue was addressed with improved memory handling

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802

sox

wavwritehdr function in wav

librewolf, librewolf, librewolf, librewolf, librewolf

When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

mujs

In Artifex MuJS through 1

wpa_supplicant, hostapd

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access point...

sox

startread function in wav

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been executed after the stream was destroyed, causing a use-after-free and a potenti...

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

mujs

compile in regexp