Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    SUSE-SU-2023:4649-1
    Fix available
    Packages

    openssl-3, openssl-3, openssl-3, openssl-3, openssl-3, openssl-3

    Summary

    Security update for openssl-3

    Published
    6 Dec 2023
    SUSE-SU-2023:4648-1
    Fix available
    Packages

    frozen, libetonyek, libixion, liborcus, libreoffice, mdds-2_1, libetonyek, libixion, liborcus, libreoffice

    Summary

    Security update for libreoffice

    Published
    6 Dec 2023
    SUSE-SU-2023:2760-2
    Fix available
    Packages

    dnsdist, luajit, dnsdist, luajit, dnsdist, luajit

    Summary

    Security update for dnsdist

    Published
    6 Dec 2023
    SUSE-SU-2023:2760-1
    Fix available
    Packages

    dnsdist, luajit, luajit, luajit, luajit, luajit, dnsdist, luajit, dnsdist, luajit

    Summary

    Security update for dnsdist

    Published
    6 Dec 2023
    USN-6463-2
    Fix available
    Packages

    open-vm-tools, open-vm-tools

    Summary

    open-vm-tools vulnerabilities

    Published
    6 Dec 2023
    SUSE-SU-2023:4647-1
    Fix available
    Packages

    haproxy, haproxy, haproxy, haproxy, haproxy, haproxy, haproxy, haproxy, haproxy

    Summary

    Security update for haproxy

    Published
    6 Dec 2023
    SUSE-SU-2023:4646-1
    Fix available
    Packages

    haproxy

    Summary

    Security update for haproxy

    Published
    6 Dec 2023
    GHSA-63cv-4pc2-4fcf
    Fix available
    Packages

    github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8

    Summary

    Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

    Published
    6 Dec 2023
    GHSA-7664-hcp7-f497
    Fix available
    Packages

    github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server

    Summary

    Mattermost Injection vulnerability

    Published
    6 Dec 2023
    CVE-2023-6514
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-6273
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49248
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49247
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49246
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49245
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49244
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49243
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49242
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49241
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49240
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-49239
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-46773
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-44113
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-44099
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-34439
    Fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-46688
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-45210
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-48849
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-6459
    Fix available
    Packages

    Summary

    Public endpoint /metrics of Calls plugin reveals channel IDs

    Published
    6 Dec 2023
    CVE-2023-6458
    Fix available
    Packages

    Summary

    Client side path traversal due to lack of route parameters validation

    Published
    6 Dec 2023
    CURL-CVE-2023-46219
    Fix available
    Packages

    Summary

    HSTS long filename clears contents

    Published
    6 Dec 2023
    CURL-CVE-2023-46218
    Fix available
    Packages

    Summary

    cookie mixed case PSL bypass

    Published
    6 Dec 2023
    CVE-2023-49897
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    Packages

    qemu, qemu, qemu

    Summary

    Published
    6 Dec 2023
    AZL-35167
    Fix available
    Packages

    qemu

    Summary

    CVE-2023-2861 affecting package qemu for versions less than 8.2.0-1

    Published
    6 Dec 2023
    AZL-32127
    Fix available
    Packages

    qemu

    Summary

    CVE-2023-2861 affecting package qemu for versions less than 6.2.0-23

    Published
    6 Dec 2023
    Packages

    curl

    Summary

    Published
    6 Dec 2023
    Packages

    curl, curl, curl, curl

    Summary

    Published
    6 Dec 2023
    GHSA-5844-q3fc-56rh
    Fix available
    Packages

    pubnub, com.pubnub:pubnub-kotlin, com.pubnub:pubnub, github.com/pubnub/go/v7, github.com/pubnub/go, github.com/pubnub/go/v6, github.com/pubnub/go/v5, Pubnub, github.com/pubnub/swift, pubnub, pubnub, pubnub/pubnub, pubnub, pubnub

    Summary

    pubnub Insufficient Entropy vulnerability

    Published
    6 Dec 2023
    CVE-2023-2861
    Fix available
    Packages

    ,

    Summary

    Qemu: 9pfs: improper access control on special files

    Published
    6 Dec 2023
    CVE-2023-6527
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-22524
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-22523
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-22522
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-26154
    Fix available
    Packages

    Summary

    Published
    6 Dec 2023
    OSV-2023-1259
    No fix available
    Packages

    pcapplusplus

    Summary

    Use-of-uninitialized-value in std::__1::__stdoutbuf<char>::xsputn

    Published
    6 Dec 2023
    CVE-2023-40053
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023
    CVE-2023-41268
    No fix available
    Packages

    Summary

    Possible stack overflow due to insufficient input validation

    Published
    6 Dec 2023
    Packages

    chromium, chromium, chromium

    Summary

    Published
    6 Dec 2023
    CVE-2023-6512
    No fix available
    Packages

    Summary

    Published
    6 Dec 2023