Redhat

Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of me

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurrin

A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in t

A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and writ

A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache

If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords

When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be

A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that i

A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption a

Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text i

dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forwa

Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/

An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a f

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system

NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin PO

A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting

An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) sc

A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by foc

A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dyn

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in t

A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) v

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported ver

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported vers

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions t

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported vers

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported version

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators

Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving err

An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.1

qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause

Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.

Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-ho

It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug she

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before R

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerabilit

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a r

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does no

A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in th

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive func

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all fi

In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, s

Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap co