Open Source Vulnerabilities

radare2

Stack-buffer-overflow in io_memory_read

hdf5

Heap-buffer-overflow in H5O__shared_decode

checkstyle

Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Improper Access Control vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Uncontrolled Resource Consumption vulnerability

apache-superset

Apache Superset Cross-site Scripting vulnerability

apache-superset

Apache Superset has Incorrect Default Permissions

apache-superset

Duplicate Advisory: Apache Superset - Elevation of Privilege

org.apache.dolphinscheduler:dolphinscheduler-api

Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Improper Access Control vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Injection vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Uncontrolled Resource Consumption vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Uncontrolled Resource Consumption vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost Open Redirect vulnerability

libnbd, libnbd

libnbd, libnbd, libnbd

xerces-c, xerces-c, xerces-c, xerces-c, xerces-c, xerces-c, xerces-c, xerces-c, xerces-c

Security update for xerces-c

Libnbd: malicious nbd server may crash libnbd

Apache Superset: Stored XSS on API endpoint

Apache Superset: Unnecessary read permissions within the Gamma role

Apache Superset: Privilege escalation with default examples database

otrs2, otrs2, otrs2, otrs2, znuny, znuny

Apache DolphinScheduler: Information Leakage Vulnerability

Open redirect in /oauth/<service>/mobile_login?redirect_to=

Insecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost Boards

Permalink previews displayed for posts in archived channels even if users are disallowed to view archived channels

Log Flooding due to specially crafted requests in different endpoints

HTML injection via channel autocomplete

Denial of Service via specially crafted block fields in Mattermost Boards

Denial of Service via Board Import Zip Bomb

Users full name disclosure through Mattermost Boards with Show Full Name Option disabled

Username and Icon override can be used by members when Hardened Mode is enabled

slurm_22_05

Security update for slurm_22_05

slurm_22_05

Security update for slurm_22_05

slurm_22_05

Security update for slurm_22_05

slurm_22_05, slurm_22_05, slurm_22_05, slurm_22_05, slurm_22_05

Security update for slurm_22_05

slurm, slurm, slurm

Security update for slurm

xrdp, xrdp, xrdp, xrdp

Security update for xrdp

sqlite3, sqlite3, sqlite3

Security update for sqlite3

gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad

Security update for gstreamer-plugins-bad

gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad

Security update for gstreamer-plugins-bad

openvswitch, openvswitch, openvswitch, openvswitch, openvswitch, openvswitch

Security update for openvswitch

java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm, java-1_8_0-ibm

Security update for java-1_8_0-ibm

openvswitch, openvswitch, openvswitch, openvswitch

Security update for openvswitch

CVE-2023-47039 does not affect BellSoft software