Open Source Vulnerabilities

irssi

When using an incomplete variable argument, Irssi before 1

graphicsmagick

MagickRealloc function in memory

libgit2

remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

wpa_supplicant

implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns

openjpeg

OpenJPEG 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script which would have run arbitrary code after ...

irssi

When the channel topic is set without specifying a sender, Irssi before 1

mariadb, zlib-bootstrap, minizip

zlib before 1

graphicsmagick

MagickMalloc function in magick/memory

wpa_supplicant

implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns

libgit2

tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'

openjpeg

In OpenJPEG 2

librewolf, librewolf, librewolf, librewolf, librewolf

By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab wa...

irssi

When using incomplete escape codes, Irssi before 1

graphicsmagick

ReadPCXImage function in coders/pcx

libgit2

remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

qt5-qtwebengine, qt6-qtwebengine, minizip

MiniZip in zlib through 1

libebml

libebml before 1

openjpeg

In OpenJPEG 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants the new version the new requested permissions

irssi

Irssi before 1

graphicsmagick

ReadSCTImage function in coders/sct

libgit2

remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

openjpeg

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi

libebml

flaw was found in libebml before 1

irssi

Irssi before 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory

graphicsmagick

WPG format reader in GraphicsMagick 1

libgit2

issue was found in Git before v2

openjpeg

In OpenJPEG 2

wpa_supplicant

In p2p_copy_client_info of p2p

libebml

In libebml before 1

irssi

In Irssi before 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95

graphicsmagick

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1

libgit2

Git for Windows is a fork of Git containing Windows-specific patches

openjpeg

opj_t1_clbl_decode_processor in openjp2/t1

wpa_supplicant

vulnerability was discovered in how p2p/p2p_pd

irssi

In certain cases, Irssi before 1

graphicsmagick

Integer underflow in the parse8BIM function in coders/meta

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 an...

libgit2

Git is a distributed revision control system

openjpeg

OpenJPEG through 2

icingaweb2

Icinga Web 2 is an open source monitoring web interface, framework, and command-line interface

irssi

In Irssi before 1

librewolf, librewolf, librewolf, librewolf, librewolf

By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged pr...

graphicsmagick

GraphicsMagick 1

libgit2

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application

icingaweb2

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface

openjpeg

jp2/opj_decompress