Open Source Vulnerabilities

opensearch-dashboards-3-fips-dashboards-notifications

patchwork

Cross Site Scripting (XSS) vulnerability exists in the template tag used to render message ids in Patchwork v1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 80

gzip

arbitrary file write vulnerability was found in GNU gzip's zgrep utility

zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1

netatalk

Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78

zoneminder

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1

netatalk

combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files

webkit2gtk

use after free issue was addressed with improved memory management

libupnp

Portable UPnP SDK (aka libupnp) 1

zoneminder

Self - Stored XSS exists in ZoneMinder through 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Use after free in WebRTC in Google Chrome prior to 86

nethack

NetHack 3

webkit2gtk

WebKitGTK through 2

sleuthkit

In version 4

zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 81

libzip

_zip_read_eocd64 function in zip_open

libspf2

Stack buffer overflow in libspf2 versions below 1

nethack

NetHack is a single player dungeon exploration game

webkit2gtk

use-after-free issue exists in WebKitGTK before 2

sleuthkit

In version 4

zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78

nfdump

nfdump 1

libspf2

Security fix for CVE-2021-33914 applied in: libspf2 1.2.11-r0

webkit2gtk

input validation issue was addressed with improved input validation

zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in

nfdump

nfdump 1

webkit2gtk

logic issue was addressed with improved restrictions

libspf2

libspf2 before 1

zoneminder

Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1

libsoup

exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2

librewolf, librewolf, librewolf, librewolf, librewolf

When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potenti...

webkit2gtk

input validation issue was addressed with improved input validation

libspf2

libspf2 before 1

zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler

libsoup

libsoup from versions 2

libwebp

There exists a use after free/double free in libwebp

webkit2gtk

memory corruption issue was addressed with improved state management

libspf2

Exim libspf2 Integer Underflow Remote Code Execution Vulnerability

zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1

librewolf, librewolf, librewolf, librewolf, librewolf

Crossbeam is a set of tools for concurrent programming

qt5-qtwebengine, libwebp, qt5-qtimageformats

Heap buffer overflow in libwebp in Google Chrome prior to 116

webkit2gtk

memory corruption issue was addressed with improved state management