Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2023-7142
    No fix available
    Packages

    Summary

    Published
    29 Dec 2023
    CVE-2023-7141
    No fix available
    Packages

    Summary

    Published
    29 Dec 2023
    CVE-2023-50104
    No fix available
    Packages

    Summary

    Published
    29 Dec 2023
    OSV-2023-1370
    Fix available
    Packages

    htslib

    Summary

    Heap-buffer-overflow in process_one_read

    Published
    29 Dec 2023
    CVE-2023-52085
    Fix available
    Packages

    Summary

    Winter CMS Local File Inclusion through Server Side Template Injection

    Published
    29 Dec 2023
    DLA-3697-1
    Fix available
    Packages

    firefox-esr

    Summary

    firefox-esr - security update

    Published
    29 Dec 2023
    CVE-2023-50572
    Fix available
    Packages

    Summary

    Published
    29 Dec 2023
    Packages

    sqlite3, sqlite3, sqlite3

    Summary

    Published
    29 Dec 2023
    DLA-3698-1
    Fix available
    Packages

    thunderbird

    Summary

    thunderbird - security update

    Published
    29 Dec 2023
    CVE-2023-23634
    No fix available
    Packages

    Summary

    Published
    29 Dec 2023
    CVE-2023-50069
    Fix available
    Packages

    Summary

    Published
    29 Dec 2023
    CVE-2023-50559
    No fix available
    Packages

    Summary

    Published
    29 Dec 2023
    CVE-2023-50570
    No fix available
    Packages

    Summary

    Published
    29 Dec 2023
    CVE-2023-50571
    No fix available
    Packages

    Summary

    Published
    29 Dec 2023
    CVE-2023-7140
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-7139
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    GHSA-43w4-4j3c-jx29
    Fix available
    Packages

    winter/wn-backend-module

    Summary

    Winter CMS Stored XSS through Backend ColorPicker FormWidget

    Published
    28 Dec 2023
    GHSA-4wvw-75qh-fqjp
    Fix available
    Packages

    winter/wn-system-module

    Summary

    Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming

    Published
    28 Dec 2023
    CVE-2023-52084
    Fix available
    Packages

    Summary

    Winter CMS Stored XSS through Backend ColorPicker FormWidget

    Published
    28 Dec 2023
    CVE-2023-7138
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-7137
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2022-36399
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-52083
    Fix available
    Packages

    Summary

    Stored XSS through privileged upload of Media Manager file followed by renaming

    Published
    28 Dec 2023
    GHSA-488m-w9fp-5mm2
    Fix available
    Packages

    org.infinispan.protostream:protostream

    Summary

    Infinispan circular object references causes out of memory errors

    Published
    28 Dec 2023
    GHSA-jpvw-p8pr-9g2x
    Fix available
    Packages

    ansible

    Summary

    Ansible symlink attack vulnerability

    Published
    28 Dec 2023
    GHSA-wpmx-564x-h2mh
    Fix available
    Packages

    github.com/ewen-lbh/ffcss

    Summary

    ewen-lbh/ffcss Late-Unicode normalization vulnerability

    Published
    28 Dec 2023
    GHSA-7hpj-7hhx-2fgx
    Fix available
    Packages

    msgpackr

    Summary

    msgpackr's conversion of property names to strings can trigger infinite recursion

    Published
    28 Dec 2023
    CVE-2023-7136
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-7135
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-7134
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50839
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50838
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50847
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50846
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50845
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50844
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50843
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50842
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50841
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-50840
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    GHSA-xhvv-3jww-c487
    Fix available
    Packages

    activeadmin

    Summary

    ActiveAdmin CSV Injection leading to sensitive information disclosure

    Published
    28 Dec 2023
    GHSA-gg57-587f-h5v6
    Fix available
    Packages

    org.infinispan:infinispan-core, org.infinispan:infinispan-core, org.infinispan:infinispan-commons, org.infinispan:infinispan-commons, org.infinispan:infinispan-hotrod, org.infinispan:infinispan-hotrod, org.infinispan:infinispan-client-hotrod, org.infinispan:infinispan-client-hotrod, org.infinispan:infinispan-cachestore-jdbc-common, org.infinispan:infinispan-cachestore-jdbc-common, org.infinispan:infinispan-cachestore-remote, org.infinispan:infinispan-cachestore-remote, org.infinispan:infinispan-cachestore-sql, org.infinispan:infinispan-cachestore-sql, org.infinispan:infinispan-cachestore-jdbc, org.infinispan:infinispan-cachestore-jdbc

    Summary

    Infinispan caches credentials in clear text

    Published
    28 Dec 2023
    Packages

    openssh, openssh-askpass, openssh-clients, openssh-ldap, openssh-server, pam_ssh_agent_auth

    Summary

    openssh: Fix of CVE-2023-51385

    Published
    28 Dec 2023
    Packages

    openssh, openssh-askpass, openssh-clients, openssh-keycat, openssh-server, openssh-sk-dummy, pam_ssh_agent_auth

    Summary

    openssh: Fix of CVE-2023-51385

    Published
    28 Dec 2023
    Packages

    openssh, openssh-askpass, openssh-clients, openssh-ldap, openssh-server, pam_ssh_agent_auth

    Summary

    openssh: Fix of CVE-2023-51385

    Published
    28 Dec 2023
    CVE-2023-7133
    No fix available
    Packages

    Summary

    y_project RuoYi HTTP POST Request login cross site scripting

    Published
    28 Dec 2023
    CVE-2023-7132
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    CVE-2023-7131
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023
    GHSA-cw2r-4p82-qv79
    Fix available
    Packages

    jwcrypto

    Summary

    DoS with algorithms that use PBKDF2 due to unbounded PBES2 Count value

    Published
    28 Dec 2023
    CVE-2023-7163
    No fix available
    Packages

    Summary

    Published
    28 Dec 2023