Open Source Vulnerabilities
hermes
out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further...
hermes
out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further...
xen, xen, xen
Buffer overflow in Xen 4
hermes
logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or...
hermes
logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or...
libreswan
Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integri...
libreswan
Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integri...
xen, xen, xen
get_page_from_l3e function in arch/x86/mm
xen/ xen/ xen
get_page_from_l3e function in arch/x86/mm
libreswan
out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3
libreswan
out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3
xen, xen, xen
virtqueue_pop function in hw/virtio/virtio
xen/ xen/ xen
virtqueue_pop function in hw/virtio/virtio
libraw
Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common
libraw
Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common
thunderbird
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68
thunderbird
Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68
libraw
There is a floating point exception in the kodak_radc_load_raw function in dcraw_common
libraw
There is a floating point exception in the kodak_radc_load_raw function in dcraw_common
libreswan
issue was discovered in Libreswan 3
xen, xen, xen
PV pagetable code in arch/x86/mm
libraw
error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common
libraw
error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common
gsoap
code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2
gsoap
code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2
libreswan
issue was discovered in Libreswan before 4
xen, xen, xen
Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen
xen/ xen/ xen
Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen
libraw
error within the "parse_sinar_ia()" function (internal/dcraw_common
libraw
error within the "parse_sinar_ia()" function (internal/dcraw_common
libreswan
issue was discovered in Libreswan before 4
xen, xen, xen
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
xen/ xen/ xen
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access
thunderbird
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sen...
thunderbird
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sen...
libraw
error within the "parse_rollei()" function (internal/dcraw_common
libraw
error within the "parse_rollei()" function (internal/dcraw_common
xen, xen, xen
issue was discovered in the Linux kernel through 5
xen/ xen/ xen
issue was discovered in the Linux kernel through 5
libreswan
Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line
libreswan
Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line
libraw
type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0
libraw
type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0
xen, xen, xen
issue was discovered in Xen through 4
libreswan
Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection...
libreswan
Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys (authby=secret) and the connection...
ngircd
Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function
ngircd
Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function
libraw
LibRaw::raw2image() in libraw_cxx
libraw
LibRaw::copy_bayer in libraw_cxx
libraw
LibRaw::raw2image in libraw_cxx
thunderbird
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte
thunderbird
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte
libraw
In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony
libraw
In LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()" function (libraw\src\metadata\sony
