Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gkeop, linux-kvm, linux-oracle, linux-raspi, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-fips, linux-fips, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-intel-iot-realtime, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2, linux-raspi-realtime

    Summary

    Published
    29 Feb 2024
    UBUNTU-CVE-2021-47057
    No fix available
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2

    Summary

    Published
    29 Feb 2024
    UBUNTU-CVE-2021-47059
    No fix available
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2

    Summary

    Published
    29 Feb 2024
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-hwe-edge, linux-kvm, linux-oracle, linux-fips, linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gkeop, linux-kvm, linux-oracle, linux-raspi, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-fips, linux-fips, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-intel-iot-realtime, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2, linux-raspi-realtime

    Summary

    Published
    29 Feb 2024
    UBUNTU-CVE-2021-47062
    No fix available
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2

    Summary

    Published
    29 Feb 2024
    UBUNTU-CVE-2021-47064
    No fix available
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2

    Summary

    Published
    29 Feb 2024
    CVE-2024-27294
    Fix available
    Packages

    Summary

    dp-golang Go installation could be owned by wrong user

    Published
    29 Feb 2024
    GHSA-pcfx-g2j2-f6f6
    Fix available
    Packages

    docassemble-webapp

    Summary

    Docassemble HTML and javascript injection

    Published
    29 Feb 2024
    GHSA-7wxf-r2qv-9xwr
    Fix available
    Packages

    docassemble-webapp

    Summary

    Docassemble open redirect

    Published
    29 Feb 2024
    GHSA-jq57-3w7p-vwvv
    Fix available
    Packages

    docassemble-webapp, docassemble-base

    Summary

    Docassemble unauthorized access through URL manipulation

    Published
    29 Feb 2024
    CVE-2024-27292
    Fix available
    Packages

    Summary

    Docassemble unauthorized access through URL manipulation

    Published
    29 Feb 2024
    CVE-2024-27291
    Fix available
    Packages

    Summary

    Docassemble open redirect

    Published
    29 Feb 2024
    CVE-2024-27290
    Fix available
    Packages

    Summary

    Docassemble HTML and javascript injection

    Published
    29 Feb 2024
    CVE-2024-2009
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27662
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27661
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27660
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27659
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27658
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27657
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27656
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-27655
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-26548
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    Packages

    qpdf, qpdf, qpdf

    Summary

    Published
    29 Feb 2024
    CVE-2024-1595
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    CVE-2024-0068
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    Packages

    qpdf

    Summary

    Published
    29 Feb 2024
    GHSA-9vx6-7xxf-x967
    Fix available
    Packages

    @openzeppelin/contracts, @openzeppelin/contracts-upgradeable, @openzeppelin/contracts, @openzeppelin/contracts-upgradeable

    Summary

    OpenZeppelin Contracts base64 encoding may read from potentially dirty memory

    Published
    29 Feb 2024
    CVE-2024-2007
    No fix available
    Packages

    Summary

    OpenBMB XAgent Privileged Mode sandbox

    Published
    29 Feb 2024
    CVE-2024-27094
    Fix available
    Packages

    Summary

    OpenZeppelin Contracts base64 encoding may read from potentially dirty memory

    Published
    29 Feb 2024
    CVE-2023-6132
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    MGASA-2024-0052
    Fix available
    Packages

    sympa

    Summary

    Updated sympa packages fix security vulnerabilities

    Published
    29 Feb 2024
    GO-2024-2554
    Fix available
    Packages

    helm.sh/helm/v3

    Summary

    Path traversal in helm.sh/helm/v3

    Published
    29 Feb 2024
    CVE-2024-20765
    No fix available
    Packages

    Summary

    Published
    29 Feb 2024
    USN-6671-1
    Fix available
    Packages

    php-nyholm-psr7

    Summary

    php-nyholm-psr7 vulnerability

    Published
    29 Feb 2024
    USN-6670-1
    Fix available
    Packages

    php-guzzlehttp-psr7, php-guzzlehttp-psr7

    Summary

    php-guzzlehttp-psr7 vulnerabilities

    Published
    29 Feb 2024
    CVE-2024-26620
    Fix available
    Packages

    , Kernel

    Summary

    s390/vfio-ap: always filter entire AP matrix

    Published
    29 Feb 2024
    CVE-2024-26619
    Fix available
    Packages

    , Kernel

    Summary

    riscv: Fix module loading free order

    Published
    29 Feb 2024
    CVE-2024-26618
    Fix available
    Packages

    , Kernel

    Summary

    arm64/sme: Always exit sme_alloc() early with existing storage

    Published
    29 Feb 2024
    CVE-2024-26617
    Fix available
    Packages

    , Kernel

    Summary

    fs/proc/task_mmu: move mmu notification mechanism inside mm lock

    Published
    29 Feb 2024
    CVE-2024-26616
    Fix available
    Packages

    , Kernel

    Summary

    btrfs: scrub: avoid use-after-free when chunk length is not 64K aligned

    Published
    29 Feb 2024
    CVE-2024-26615
    Fix available
    Packages

    , Kernel

    Summary

    net/smc: fix illegal rmb_desc access in SMC-D connection dump

    Published
    29 Feb 2024
    CVE-2024-26614
    Fix available
    Packages

    , Kernel

    Summary

    tcp: make sure init the accept_queue's spinlocks once

    Published
    29 Feb 2024
    CVE-2024-26612
    Fix available
    Packages

    , Kernel

    Summary

    netfs, fscache: Prevent Oops in fscache_put_cache()

    Published
    29 Feb 2024
    CVE-2024-26611
    Fix available
    Packages

    , Kernel

    Summary

    xsk: fix usage of multi-buffer BPF helpers for ZC XDP

    Published
    29 Feb 2024
    CVE-2024-26610
    Fix available
    Packages

    , Kernel

    Summary

    wifi: iwlwifi: fix a memory corruption

    Published
    29 Feb 2024
    CVE-2024-26608
    Fix available
    Packages

    , Kernel

    Summary

    ksmbd: fix global oob in ksmbd_nl_policy

    Published
    29 Feb 2024
    CVE-2023-52498
    Fix available
    Packages

    , Kernel

    Summary

    PM: sleep: Fix possible deadlocks in core system-wide PM code

    Published
    29 Feb 2024
    CVE-2023-52497
    Fix available
    Packages

    , Kernel

    Summary

    erofs: fix lz4 inplace decompression

    Published
    29 Feb 2024
    CVE-2023-52495
    Fix available
    Packages

    , Kernel

    Summary

    soc: qcom: pmic_glink_altmode: fix port sanity check

    Published
    29 Feb 2024