Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    SUSE-SU-2024:0228-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    25 Jan 2024
    SUSE-SU-2024:0224-1
    Fix available
    Packages

    apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-sshd, apache-parent, apache-sshd

    Summary

    Security update for apache-parent, apache-sshd

    Published
    25 Jan 2024
    CVE-2023-33760
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2023-33759
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2023-33758
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2023-33757
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    Packages

    linux, linux, linux

    Summary

    Published
    25 Jan 2024
    CVE-2024-23307
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    AZL-34876
    Fix available
    Packages

    kernel

    Summary

    CVE-2024-23307 affecting package kernel for versions less than 6.6.35.1-4

    Published
    25 Jan 2024
    AZL-34004
    No fix available
    Packages

    kernel

    Summary

    CVE-2024-23307 affecting package kernel 5.15.200.1-1

    Published
    25 Jan 2024
    Packages

    linux, linux, linux

    Summary

    Published
    25 Jan 2024
    CVE-2024-22099
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.5, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.5, linux-nvidia, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-riscv-6.5, linux-starfive-5.19, linux-starfive-6.2, linux-starfive-6.5, linux-xilinx-zynqmp, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oem-6.8, linux-oracle, linux-raspi, linux-riscv, linux-raspi-realtime, linux-realtime

    Summary

    Published
    25 Jan 2024
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.5, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.5, linux-nvidia, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-riscv-6.5, linux-starfive-5.19, linux-starfive-6.2, linux-starfive-6.5, linux-xilinx-zynqmp, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-raspi-realtime

    Summary

    Published
    25 Jan 2024
    CVE-2023-50785
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    BELL-CVE-2024-0727
    Fix available
    Packages

    openssl, openssl, openssl, openssl

    Summary

    Published
    25 Jan 2024
    BELL-CVE-2023-40551
    Fix available
    Packages

    shim, shim-signed, shim, shim-signed

    Summary

    Published
    25 Jan 2024
    BELL-CVE-2023-40550
    Fix available
    Packages

    shim, shim-signed, shim, shim-signed

    Summary

    Published
    25 Jan 2024
    BELL-CVE-2023-40549
    Fix available
    Packages

    shim, shim-signed, shim, shim-signed

    Summary

    Published
    25 Jan 2024
    BELL-CVE-2023-40548
    Fix available
    Packages

    shim, shim-signed, shim, shim-signed

    Summary

    Published
    25 Jan 2024
    BELL-CVE-2023-40546
    Fix available
    Packages

    shim, shim-signed, shim, shim-signed

    Summary

    Published
    25 Jan 2024
    BELL-CVE-2023-40547
    Fix available
    Packages

    shim, shim-signed, shim, shim-signed

    Summary

    Published
    25 Jan 2024
    CVE-2024-23985
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2024-0625
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2024-0617
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2024-0688
    Fix available
    Packages

    Summary

    WebSub (FKA. PubSubHubbub) <= 3.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    Published
    25 Jan 2024
    CVE-2024-0624
    No fix available
    Packages

    Summary

    Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update

    Published
    25 Jan 2024
    OSV-2024-39
    Fix available
    Packages

    simdutf

    Summary

    Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32

    Published
    25 Jan 2024
    OSV-2024-38
    Fix available
    Packages

    libredwg

    Summary

    Heap-buffer-overflow in json_HEADER

    Published
    25 Jan 2024
    CVE-2023-52251
    Fix available
    Packages

    Summary

    Published
    25 Jan 2024
    DLA-3721-1
    Fix available
    Packages

    xorg-server

    Summary

    xorg-server - security update

    Published
    25 Jan 2024
    DLA-3718-1
    Fix available
    Packages

    php-phpseclib

    Summary

    php-phpseclib - security update

    Published
    25 Jan 2024
    CVE-2024-22635
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2024-22636
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    CVE-2023-52046
    No fix available
    Packages

    Summary

    Published
    25 Jan 2024
    ALSA-2024:0477
    Fix available
    Packages

    frr, frr-selinux

    Summary

    Moderate: frr security update

    Published
    25 Jan 2024
    ALSA-2024:0474
    Fix available
    Packages

    tomcat, tomcat-admin-webapps, tomcat-docs-webapp, tomcat-el-3.0-api, tomcat-jsp-2.3-api, tomcat-lib, tomcat-servlet-4.0-api, tomcat-webapps

    Summary

    Moderate: tomcat security update

    Published
    25 Jan 2024
    ALSA-2024:0468
    Fix available
    Packages

    grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot, grub2-efi-aa64-modules, grub2-efi-x64, grub2-efi-x64-cdboot, grub2-efi-x64-modules, grub2-pc, grub2-pc-modules, grub2-ppc64le, grub2-ppc64le-modules, grub2-tools, grub2-tools-efi, grub2-tools-extra, grub2-tools-minimal

    Summary

    Moderate: grub2 security update

    Published
    25 Jan 2024
    ALSA-2024:0466
    Fix available
    Packages

    python-unversioned-command, python3, python3-debug, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

    Summary

    Moderate: python3.9 security update

    Published
    25 Jan 2024
    ALSA-2024:0465
    Fix available
    Packages

    sqlite, sqlite-devel, sqlite-libs

    Summary

    Moderate: sqlite security update

    Published
    25 Jan 2024
    ALSA-2024:0464
    Fix available
    Packages

    python3-urllib3

    Summary

    Moderate: python-urllib3 security update

    Published
    25 Jan 2024
    ALSA-2024:0463
    Fix available
    Packages

    python3-rpm, rpm, rpm-apidocs, rpm-build, rpm-build-libs, rpm-cron, rpm-devel, rpm-libs, rpm-plugin-audit, rpm-plugin-fapolicyd, rpm-plugin-ima, rpm-plugin-selinux, rpm-plugin-syslog, rpm-plugin-systemd-inhibit, rpm-sign, rpm-sign-libs

    Summary

    Moderate: rpm security update

    Published
    25 Jan 2024
    DLA-3719-1
    Fix available
    Packages

    phpseclib

    Summary

    phpseclib - security update

    Published
    25 Jan 2024
    DLA-3720-1
    Fix available
    Packages

    thunderbird

    Summary

    thunderbird - security update

    Published
    25 Jan 2024
    GHSA-2cvg-w29m-j8xc
    No fix available
    Packages

    processwire/processwire

    Summary

    Arbitrary Code Execution in Processwire

    Published
    24 Jan 2024
    CVE-2024-22751
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    GHSA-r64r-5h43-26qv
    Fix available
    Packages

    lemmy_server

    Summary

    Any authenticated user may obtain private message details from other users on the same instance

    Published
    24 Jan 2024
    GHSA-mrqg-mwh7-q94j
    Fix available
    Packages

    pimcore/admin-ui-classic-bundle

    Summary

    Host header injection in the password reset

    Published
    24 Jan 2024
    GHSA-cwx6-4wmf-c6xv
    Fix available
    Packages

    pimcore/admin-ui-classic-bundle

    Summary

    SQL Injection in Admin download files as zip

    Published
    24 Jan 2024
    GHSA-7g9j-g5jg-3vv3
    Fix available
    Packages

    snow

    Summary

    Unauthenticated Nonce Increment in snow

    Published
    24 Jan 2024