Open Source Vulnerabilities

thunderbird

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed

xen, xen, xen

Xen through 4

thunderbird

By downloading a file with the

xen, xen, xen

VMFUNC emulation in Xen 4

thunderbird

When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash

nmap

Nmap through 7

xen, xen, xen

Xen through 4

eco-jess

eco-jess

eco-jess

thunderbird

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible

nmap

nse_libssh2

xen, xen, xen

Xen through 4

thunderbird

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location

element-desktop, element-desktop

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript

openscad

vulnerbiility was found in Openscad, where a

xen, xen, xen

Xen through 4

logrotate

vulnerability was found in logrotate in how the state file is created

element-desktop, element-desktop

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript

openscad

vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import()

xen, xen, xen

Xen through 4

xen, xen, xen

Xen through 4

element-desktop, element-desktop

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

xen, xen, xen

CMPXCHG8B emulation in Xen 3

element-desktop, element-desktop

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

element-desktop, element-desktop

Matrix JavaScript SDK is the Matrix Client-Server software development kit (SDK) for JavaScript

xen, xen, xen

pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in t...

npm-12, npm-12

npm-12, npm-12

rtl_433

rtl_433 21

element-desktop, element-desktop

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript

xen, xen, xen

pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes a...

rtl_433

Off-by-one Error occurs in cmr113_decode of rtl_433 21

xen, xen, xen

Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability

element-desktop, element-desktop

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript

rtl_433

rtl_433 21

njs

njs through 0

xen, xen, xen

Xen 4

procps-ng

Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap

njs

njs through 0

xen, xen, xen

Xen 4

element-desktop, element-desktop

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page

njs

njs through 0

xen, xen, xen

Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execut...

njs

njs through 0

xen, xen, xen

Xen 4

xen, xen, xen

x86 segment base write emulation functionality in Xen 4

xen, xen, xen

Xen 4

xen, xen, xen

x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/l...

thunderbird

By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays