Open Source Vulnerabilities

webkit2gtk

use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2

libde265

libde265 v1

screen

encoding

nodejs-23, nodejs18, nodejs18

c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was c...

otrs

Agents are able to list appointments in the calendars without required permissions

librewolf, librewolf, librewolf, librewolf, librewolf

ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory

webkit2gtk

In WebKitGTK before 2

libde265

libde265 v1

otrs

Agents are able to list customer user emails without required permissions in the bulk action screen

screen

socket

nodejs-23, nodejs18, nodejs18

Node

librewolf, librewolf, librewolf, librewolf, librewolf

browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks

webkit2gtk

use after free issue was addressed with improved memory management

libde265

libde265 v1

otrs

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

libde265

libde265 v1

otrs

jQuery Validation Plugin provides drop-in validation for your existing forms

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 86

webkit2gtk

memory corruption issue was addressed with improved memory handling

libde265

libde265 v1

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

otrs

jQuery-UI is the official jQuery user interface library

webkit2gtk

out-of-bounds read was addressed with improved input validation

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78

libde265

libde265 v1

otrs

jQuery-UI is the official jQuery user interface library

net-snmp

net-snmp provides various tools relating to the Simple Network Management Protocol

nodejs-23, nodejs-current, nodejs18, nodejs18

Node

webkit2gtk

use after free issue was addressed with improved memory management

librewolf, librewolf, librewolf, librewolf, librewolf

malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL

libde265

libde265 v1

otrs

jQuery-UI is the official jQuery user interface library

net-snmp

net-snmp provides various tools relating to the Simple Network Management Protocol

librewolf, librewolf, librewolf, librewolf, librewolf

If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could have been enabled in a way that was un...

nodejs-23, nodejs-current, nodejs18, nodejs18

HTTP parser in all current versions of Node

webkit2gtk

In WebKitGTK before 2

libde265

libde265 v1

net-snmp

net-snmp provides various tools relating to the Simple Network Management Protocol

otrs

Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7

webkit2gtk

In WebKitGTK before 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

malicious extension could have opened a popup window lacking an address bar

nodejs-23, nodejs-current, nodejs18, nodejs18

`'path'` module in the Node

libde265

libde265 v1

net-snmp

net-snmp provides various tools relating to the Simple Network Management Protocol

webkit2gtk

issue existed in the specification for the resource timing API

librewolf, librewolf, librewolf, librewolf, librewolf

By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash

libde265

libde265 v1