Open Source Vulnerabilities

opensc

double free when handling responses from an HSM Card in sc_pkcs15emu_sc_hsm_init in libopensc/pkcs15-sc-hsm

vim

Untrusted Search Path in GitHub repository vim/vim prior to 9

virtualbox-guest-additions, virtualbox-guest-additions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)

freeradius

It was discovered freeradius up to and including version 3

opensc

double free when handling responses in read_file in tools/egk-tool

vim

Out-of-bounds Write in GitHub repository vim/vim prior to 9

virtualbox-guest-additions, virtualbox-guest-additions

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)

opensc

double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc

thunderbird

When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible

vim

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9

opensc

single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid

vim

Use After Free in GitHub repository vim/vim prior to 9

opensc

Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

opensc

Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003

opensc

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool

vim

Use After Free in GitHub repository vim/vim prior to v9

opensc

buffer overflow when handling string concatenation in util_acl_to_str in tools/util

vim

Vim is an open source command line text editor

tcpreplay

issue was discovered in tcpreplay tcpprep v4

opensc

Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1

vim

Vim is a UNIX editor that, prior to version 9

libass

check_allocations function in libass/ass_shaper

tcpreplay

issue was discovered in tcpreplay tcpprep v4

opensc

Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos

vim

Vim is an open source command line text editor

libass

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

opensc

Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle

tcpreplay

issue was discovered in Tcpreplay 4

vim

Vim is an open source command line text editor

libass

Buffer overflow in the calc_coeff function in libass/ass_blur

opensc

issue was discovered in OpenSC through 0

tcpreplay

issue was discovered in Tcpreplay 4

thunderbird

It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message

vim

UNIX editor Vim prior to version 9

libass

wrap_lines_smart function in ass_render

opensc

issue was discovered in OpenSC through 0

tcpreplay

issue was discovered in Tcpreplay 4

thunderbird

use of hard-coded password vulnerability may allow authentication abuse

vim

Vim is an improved version of the unix vi text editor

opensc

issue was discovered in OpenSC through 0

tcpreplay

tcpreplay 4

keycloak-26.7

vim

Vim is an open source command line text editor

thunderbird

Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was changed to download them to <code>/tmp</code> where th...

opensc

OpenSC before 0

keycloak-26.7

keycloak-26.7

keycloak-26.7

tcpreplay

tcpreplay 4