Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    DLA-3665-1
    Fix available
    Packages

    node-json5

    Summary

    node-json5 - security update

    Published
    25 Nov 2023
    GHSA-7pvx-4585-hqww
    Fix available
    Packages

    sequelize-typescript

    Summary

    sequelize-typescript Prototype Pollution vulnerability

    Published
    24 Nov 2023
    CVE-2023-6293
    Fix available
    Packages

    Summary

    Prototype Pollution in robinbuschmann/sequelize-typescript

    Published
    24 Nov 2023
    Packages

    tiff, tiff, tiff

    Summary

    Published
    24 Nov 2023
    CVE-2023-6277
    No fix available
    Packages

    Summary

    Published
    24 Nov 2023
    Packages

    zfs, zfs, zfs, zfs, zfs, zfs, zfs-lts, zfs-lts, zfs-lts, zfs-lts, zfs-lts, zfs-lts, zfs-rpi, zfs-rpi, zfs-rpi, zfs-rpi, zfs-rpi, zfs-rpi

    Summary

    Published
    24 Nov 2023
    Packages

    zfs-linux, zfs-linux, zfs-linux

    Summary

    Published
    24 Nov 2023
    AZL-34953
    Fix available
    Packages

    libtiff

    Summary

    CVE-2023-6277 affecting package libtiff for versions less than 4.6.0-3

    Published
    24 Nov 2023
    AZL-44511
    No fix available
    Packages

    openjpeg2

    Summary

    CVE-2023-6277 affecting package openjpeg2 2.3.1-12

    Published
    24 Nov 2023
    AZL-43624
    No fix available
    Packages

    openjpeg2

    Summary

    CVE-2023-6277 affecting package openjpeg2 2.3.1-12

    Published
    24 Nov 2023
    AZL-32049
    Fix available
    Packages

    libtiff

    Summary

    CVE-2023-6277 affecting package libtiff for versions less than 4.6.0-3

    Published
    24 Nov 2023
    BELL-CVE-2023-6277
    No fix available
    Packages

    tiff, tiff, tiff, tiff

    Summary

    Published
    24 Nov 2023
    Packages

    zfs-linux, zfs-linux, zfs-linux, zfs-linux, zfs-linux

    Summary

    Published
    24 Nov 2023
    Packages

    tiff, tiff, tiff, tiff, tiff

    Summary

    Published
    24 Nov 2023
    Packages

    libsmbclient, libsmbclient-devel, samba, samba-client, samba-common, samba-doc, samba-domainjoin-gui, samba-glusterfs, samba-swat, samba-winbind, samba-winbind-clients, samba-winbind-devel, samba-winbind-krb5-locator

    Summary

    samba: Fix of CVE-2023-3961

    Published
    24 Nov 2023
    CVE-2023-48707
    Fix available
    Packages

    Summary

    Cleartext Storage of Sensitive Information in codeigniter4/shield

    Published
    24 Nov 2023
    CVE-2023-48708
    Fix available
    Packages

    Summary

    Insertion of Sensitive Information into Log in codeigniter4/shield

    Published
    24 Nov 2023
    CVE-2023-48312
    Fix available
    Packages

    Summary

    Authentication bypass using an empty token in capsule-proxy

    Published
    24 Nov 2023
    CVE-2023-48711
    Fix available
    Packages

    Summary

    Server-Side Request Forgery (SSRF) Vulnerability in google-translate-api-browser

    Published
    24 Nov 2023
    CVE-2023-48712
    Fix available
    Packages

    Summary

    User authorization bug leading to privilege escalation in warpgate

    Published
    24 Nov 2023
    GHSA-v4v2-8h88-65qj
    Fix available
    Packages

    uptime-kuma

    Summary

    Attribute Injection leading to XSS(Cross-Site-Scripting)

    Published
    24 Nov 2023
    GHSA-rqr8-pxh7-cq3g
    Fix available
    Packages

    eth-abi

    Summary

    Ethereum ABI decoder DoS when parsing ZST

    Published
    24 Nov 2023
    GHSA-fpvw-6m5v-hqfp
    Fix available
    Packages

    github.com/projectcapsule/capsule-proxy, github.com/clastix/capsule-proxy

    Summary

    Capsule Proxy Authentication bypass using an empty token

    Published
    24 Nov 2023
    CVE-2023-6276
    No fix available
    Packages

    Summary

    Published
    24 Nov 2023
    SUSE-SU-2023:4566-1
    Fix available
    Packages

    slurm_23_02, slurm_23_02, slurm_23_02, slurm_23_02

    Summary

    Security update for slurm_23_02

    Published
    24 Nov 2023
    SUSE-SU-2023:4565-1
    Fix available
    Packages

    slurm_23_02

    Summary

    Security update for slurm_23_02

    Published
    24 Nov 2023
    SUSE-SU-2023:4564-1
    Fix available
    Packages

    slurm_23_02

    Summary

    Security update for slurm_23_02

    Published
    24 Nov 2023
    SUSE-SU-2023:4563-1
    Fix available
    Packages

    slurm_23_02

    Summary

    Security update for slurm_23_02

    Published
    24 Nov 2023
    SUSE-SU-2023:4562-1
    Fix available
    Packages

    poppler, poppler, poppler, poppler, poppler

    Summary

    Security update for poppler

    Published
    24 Nov 2023
    SUSE-SU-2023:4561-1
    Fix available
    Packages

    webkit2gtk3-soup2, webkit2gtk3-soup2, webkit2gtk3, webkit2gtk3, webkit2gtk4, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4

    Summary

    Security update for webkit2gtk3

    Published
    24 Nov 2023
    SUSE-SU-2023:4560-1
    Fix available
    Packages

    vim, vim

    Summary

    Security update for vim

    Published
    24 Nov 2023
    SUSE-SU-2023:4559-1
    Fix available
    Packages

    webkit2gtk3, webkit2gtk3, webkit2gtk3

    Summary

    Security update for webkit2gtk3

    Published
    24 Nov 2023
    SUSE-SU-2023:4558-1
    Fix available
    Packages

    webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3

    Summary

    Security update for webkit2gtk3

    Published
    24 Nov 2023
    SUSE-SU-2023:4557-1
    Fix available
    Packages

    vim, vim, vim, vim

    Summary

    Security update for vim

    Published
    24 Nov 2023
    GHSA-9jjc-grg5-67gj
    Fix available
    Packages

    github.com/layer5io/meshery

    Summary

    SQL injection vulnerability in Meshery

    Published
    24 Nov 2023
    CVE-2023-6275
    No fix available
    Packages

    Summary

    Published
    24 Nov 2023
    Packages

    ctdb, libnss-winbind, libpam-winbind, libparse-pidl-perl, libsmbclient, libsmbclient-dev, libwbclient-dev, libwbclient0, python-samba, registry-tools, samba, samba-common, samba-common-bin, samba-dev, samba-dsdb-modules, samba-libs, samba-testsuite, samba-vfs-modules, smbclient, winbind

    Summary

    Fix CVE(s): CVE-2023-3961

    Published
    24 Nov 2023
    CVE-2023-6274
    No fix available
    Packages

    Summary

    Published
    24 Nov 2023
    Packages

    ctdb, libnss-winbind, libpam-winbind, libparse-pidl-perl, libsmbclient, libsmbclient-dev, libwbclient-dev, libwbclient0, python-samba, registry-tools, samba, samba-common, samba-common-bin, samba-dev, samba-dsdb-modules, samba-libs, samba-testsuite, samba-vfs-modules, smbclient, winbind

    Summary

    Fix CVE(s): CVE-2023-3961

    Published
    24 Nov 2023
    Packages

    libsmbclient, libsmbclient-devel, samba, samba-client, samba-common, samba-doc, samba-domainjoin-gui, samba-glusterfs, samba-swat, samba-winbind, samba-winbind-clients, samba-winbind-devel, samba-winbind-krb5-locator

    Summary

    samba: Fix of CVE-2023-3961

    Published
    24 Nov 2023
    Packages

    ctdb, libsmbclient, libsmbclient-devel, libwbclient, libwbclient-devel, python3-samba, python3-samba-devel, python3-samba-test, samba, samba-client, samba-client-libs, samba-common, samba-common-libs, samba-common-tools, samba-devel, samba-krb5-printing, samba-libs, samba-pidl, samba-test, samba-test-libs, samba-vfs-iouring, samba-winbind, samba-winbind-clients, samba-winbind-krb5-locator, samba-winbind-modules, samba-winexe

    Summary

    samba: Fix of CVE-2023-3961

    Published
    24 Nov 2023
    Packages

    ctdb, ctdb-tests, libsmbclient, libsmbclient-devel, libwbclient, libwbclient-devel, python3-samba, python3-samba-devel, python3-samba-test, samba, samba-client, samba-client-libs, samba-common, samba-common-libs, samba-common-tools, samba-devel, samba-krb5-printing, samba-libs, samba-pidl, samba-test, samba-test-libs, samba-vfs-glusterfs, samba-winbind, samba-winbind-clients, samba-winbind-krb5-locator, samba-winbind-modules, samba-winexe

    Summary

    samba: Fix of CVE-2023-3961

    Published
    24 Nov 2023
    OSV-2023-1208
    Fix available
    Packages

    libavc

    Summary

    Heap-buffer-overflow in ih264d_format_convert

    Published
    24 Nov 2023
    OSV-2023-1207
    Fix available
    Packages

    libavc

    Summary

    Heap-buffer-overflow in isvcd_start_of_pic

    Published
    24 Nov 2023
    OSV-2023-1206
    Fix available
    Packages

    libavc

    Summary

    Heap-buffer-overflow in ih264d_format_convert

    Published
    24 Nov 2023
    OSV-2023-1205
    Fix available
    Packages

    libavc

    Summary

    Heap-buffer-overflow in isvcd_populate_res_prms

    Published
    24 Nov 2023
    OESA-2023-1856
    Fix available
    Packages

    python-pillow, python-pillow, python-pillow, python-pillow, python-pillow

    Summary

    python-pillow security update

    Published
    24 Nov 2023
    OESA-2023-1854
    Fix available
    Packages

    python-aiohttp, python-aiohttp, python-aiohttp, python-aiohttp, python-aiohttp

    Summary

    python-aiohttp security update

    Published
    24 Nov 2023
    OESA-2023-1857
    Fix available
    Packages

    libtiff, libtiff, libtiff, libtiff, libtiff

    Summary

    libtiff security update

    Published
    24 Nov 2023
    OESA-2023-1855
    Fix available
    Packages

    microcode_ctl, microcode_ctl, microcode_ctl, microcode_ctl, microcode_ctl

    Summary

    microcode_ctl security update

    Published
    24 Nov 2023