Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    UBUNTU-CVE-2023-51887
    No fix available
    Packages

    mathtex, mathtex, mathtex, mathtex, mathtex

    Summary

    Published
    24 Jan 2024
    UBUNTU-CVE-2023-51886
    No fix available
    Packages

    mathtex, mathtex, mathtex, mathtex, mathtex

    Summary

    Published
    24 Jan 2024
    UBUNTU-CVE-2023-51885
    No fix available
    Packages

    mathtex, mathtex, mathtex, mathtex, mathtex

    Summary

    Published
    24 Jan 2024
    CVE-2024-23641
    Fix available
    Packages

    Summary

    Sending a GET or HEAD request with a body crashes SvelteKit

    Published
    24 Jan 2024
    Packages

    orthanc, orthanc, orthanc

    Summary

    Published
    24 Jan 2024
    CVE-2024-22725
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22651
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2023-44281
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    UBUNTU-CVE-2024-22725
    No fix available
    Packages

    orthanc, orthanc, orthanc, orthanc

    Summary

    Published
    24 Jan 2024
    DRUPAL-CONTRIB-2024-006
    No fix available
    Packages

    drupal/swiftmailer

    Summary

    Published
    24 Jan 2024
    Packages

    drupal/social

    Summary

    Published
    24 Jan 2024
    Packages

    drupal/social

    Summary

    Published
    24 Jan 2024
    Packages

    drupal/tfa

    Summary

    Published
    24 Jan 2024
    GHSA-mg2x-mggj-6955
    Fix available
    Packages

    apache-airflow, apache-airflow-providers-cncf-kubernetes

    Summary

    Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service

    Published
    24 Jan 2024
    GHSA-c3c6-f2ww-xfr2
    Fix available
    Packages

    apache-airflow

    Summary

    Apache Airflow: pickle deserialization vulnerability in XComs

    Published
    24 Jan 2024
    GHSA-vm5m-qmrx-fw8w
    Fix available
    Packages

    apache-airflow

    Summary

    Apache Airflow: Bypass permission verification to read code of other dags

    Published
    24 Jan 2024
    CVE-2024-22141
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    SUSE-SU-2024:0212-1
    Fix available
    Packages

    xwayland, xwayland

    Summary

    Security update for xwayland

    Published
    24 Jan 2024
    GHSA-g5m6-hxpp-fc49
    Fix available
    Packages

    @sveltejs/kit, @sveltejs/adapter-node, @sveltejs/adapter-node, @sveltejs/adapter-node

    Summary

    Sending a GET or HEAD request with a body crashes SvelteKit

    Published
    24 Jan 2024
    GHSA-fq23-g58m-799r
    Fix available
    Packages

    label-studio

    Summary

    Cross-site Scripting Vulnerability on Data Import

    Published
    24 Jan 2024
    GHSA-q68h-xwq5-mm7x
    Fix available
    Packages

    label-studio

    Summary

    Cross-site Scripting Vulnerability on Avatar Upload

    Published
    24 Jan 2024
    CVE-2023-6697
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22154
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    PYSEC-2024-14
    Fix available
    Packages

    apache-airflow

    Summary

    Published
    24 Jan 2024
    PYSEC-2024-13
    Fix available
    Packages

    apache-airflow

    Summary

    Published
    24 Jan 2024
    SUSE-SU-2024:0211-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    24 Jan 2024
    SUSE-SU-2024:0210-1
    Fix available
    Packages

    erlang, erlang, erlang, erlang, erlang, erlang, erlang, erlang, erlang, erlang, erlang, erlang

    Summary

    Security update for erlang

    Published
    24 Jan 2024
    CVE-2023-50944
    Fix available
    Packages

    Summary

    Apache Airflow: Bypass permission verification to read code of other dags

    Published
    24 Jan 2024
    CVE-2023-50943
    Fix available
    Packages

    Summary

    Apache Airflow: Potential pickle deserialization vulnerability in XComs

    Published
    24 Jan 2024
    CVE-2023-51702
    Fix available
    Packages

    Summary

    Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service

    Published
    24 Jan 2024
    SUSE-SU-2024:0209-1
    Fix available
    Packages

    tomcat, tomcat, tomcat

    Summary

    Security update for tomcat

    Published
    24 Jan 2024
    SUSE-SU-2024:0208-1
    Fix available
    Packages

    tomcat10, tomcat10

    Summary

    Security update for tomcat10

    Published
    24 Jan 2024
    SUSE-SU-2024:0206-1
    Fix available
    Packages

    tomcat, tomcat

    Summary

    Security update for tomcat

    Published
    24 Jan 2024
    Packages

    cacti, cacti-spine, cacti, cacti-spine, cacti, cacti-spine

    Summary

    Security update for cacti, cacti-spine

    Published
    24 Jan 2024
    SUSE-SU-2024:0205-1
    Fix available
    Packages

    python-Pillow, python-Pillow, python-Pillow, python-Pillow, python-Pillow, python-Pillow

    Summary

    Security update for python-Pillow

    Published
    24 Jan 2024
    SUSE-SU-2024:0204-1
    Fix available
    Packages

    bluez, bluez, bluez, bluez, bluez, bluez, bluez, bluez, bluez, bluez

    Summary

    Security update for bluez

    Published
    24 Jan 2024
    CVE-2024-22309
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22308
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22301
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22294
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22152
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22135
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2024-22134
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2023-52221
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    SUSE-SU-2024:0203-1
    Fix available
    Packages

    java-11-openjdk, java-11-openjdk

    Summary

    Security update for java-11-openjdk

    Published
    24 Jan 2024
    RUSTSEC-2024-0012
    Fix available
    Packages

    serde-json-wasm

    Summary

    Stack overflow during recursive JSON parsing

    Published
    24 Jan 2024
    CVE-2024-22284
    Fix available
    Packages

    Summary

    WordPress Asgaros Forum Plugin <= 2.7.2 is vulnerable to PHP Object Injection

    Published
    24 Jan 2024
    USN-6596-1
    Fix available
    Packages

    libapache-session-ldap-perl, libapache-session-ldap-perl, libapache-session-ldap-perl

    Summary

    libapache-session-ldap-perl vulnerability

    Published
    24 Jan 2024
    CVE-2024-0854
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024
    CVE-2023-44001
    No fix available
    Packages

    Summary

    Published
    24 Jan 2024