Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2023-27793
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-27792
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-45819
    Fix available
    Packages

    Summary

    Cross-site Scripting vulnerability in TinyMCE notificationManager.open API

    Published
    19 Oct 2023
    CVE-2023-45815
    Fix available
    Packages

    Summary

    ArchiveBox: Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context

    Published
    19 Oct 2023
    CVE-2023-45823
    Fix available
    Packages

    Summary

    Arbitrary file read in Artifact Hub

    Published
    19 Oct 2023
    CVE-2023-45822
    Fix available
    Packages

    Summary

    Unsafe rego built-in allowed in Artifact Hub

    Published
    19 Oct 2023
    CVE-2023-45821
    Fix available
    Packages

    Summary

    Incorrect Docker Hub registry check in Artifact Hub

    Published
    19 Oct 2023
    USN-6442-1
    Fix available
    Packages

    linux-bluefield

    Summary

    linux-bluefield vulnerabilities

    Published
    19 Oct 2023
    CVE-2023-45376
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-43492
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-40145
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-38584
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-30633
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-27791
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    USN-6441-1
    Fix available
    Packages

    linux-aws-5.4, linux-azure-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux, linux-aws, linux-azure, linux-gcp, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-xilinx-zynqmp

    Summary

    linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

    Published
    19 Oct 2023
    GHSA-hmgw-9jrg-hf2m
    Fix available
    Packages

    directus

    Summary

    Directus crashes on invalid WebSocket message

    Published
    19 Oct 2023
    CLSA-2023-1697744819
    Fix available
    Packages

    linux-buildinfo-4.15.0-219-tuxcare.els7-generic, linux-buildinfo-4.15.0-219-tuxcare.els7-lowlatency, linux-cloud-tools-4.15.0-219-tuxcare.els7, linux-cloud-tools-4.15.0-219-tuxcare.els7-generic, linux-cloud-tools-4.15.0-219-tuxcare.els7-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.15.0-219-tuxcare.els7, linux-headers-4.15.0-219-tuxcare.els7-generic, linux-headers-4.15.0-219-tuxcare.els7-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.15.0-219-tuxcare.els7-generic, linux-image-unsigned-4.15.0-219-tuxcare.els7-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.15.0-219-tuxcare.els7-generic, linux-modules-4.15.0-219-tuxcare.els7-lowlatency, linux-modules-extra-4.15.0-219-tuxcare.els7-generic, linux-source, linux-source-4.15.0, linux-tools-4.15.0-219-tuxcare.els7, linux-tools-4.15.0-219-tuxcare.els7-generic, linux-tools-4.15.0-219-tuxcare.els7-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

    Summary

    Fix of 8 CVEs

    Published
    19 Oct 2023
    CLSA-2023-1697744683
    Fix available
    Packages

    linux-buildinfo-4.15.0-219-tuxcare.els7-generic, linux-buildinfo-4.15.0-219-tuxcare.els7-lowlatency, linux-cloud-tools-4.15.0-219-tuxcare.els7, linux-cloud-tools-4.15.0-219-tuxcare.els7-generic, linux-cloud-tools-4.15.0-219-tuxcare.els7-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.15.0-219-tuxcare.els7, linux-headers-4.15.0-219-tuxcare.els7-generic, linux-headers-4.15.0-219-tuxcare.els7-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.15.0-219-tuxcare.els7-generic, linux-image-unsigned-4.15.0-219-tuxcare.els7-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.15.0-219-tuxcare.els7-generic, linux-modules-4.15.0-219-tuxcare.els7-lowlatency, linux-modules-extra-4.15.0-219-tuxcare.els7-generic, linux-source, linux-source-4.15.0, linux-tools-4.15.0-219-tuxcare.els7, linux-tools-4.15.0-219-tuxcare.els7-generic, linux-tools-4.15.0-219-tuxcare.els7-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

    Summary

    Fix of 8 CVEs

    Published
    19 Oct 2023
    CLSA-2023-1697744503
    Fix available
    Packages

    linux-buildinfo-4.4.0-247-tuxcare.els18-generic, linux-buildinfo-4.4.0-247-tuxcare.els18-lowlatency, linux-cloud-tools-4.4.0-247-tuxcare.els18, linux-cloud-tools-4.4.0-247-tuxcare.els18-generic, linux-cloud-tools-4.4.0-247-tuxcare.els18-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-247-tuxcare.els18, linux-headers-4.4.0-247-tuxcare.els18-generic, linux-headers-4.4.0-247-tuxcare.els18-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-247-tuxcare.els18-generic, linux-image-unsigned-4.4.0-247-tuxcare.els18-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-247-tuxcare.els18-generic, linux-modules-4.4.0-247-tuxcare.els18-lowlatency, linux-modules-extra-4.4.0-247-tuxcare.els18-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-247-tuxcare.els18, linux-tools-4.4.0-247-tuxcare.els18-generic, linux-tools-4.4.0-247-tuxcare.els18-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

    Summary

    Fix of 7 CVEs

    Published
    19 Oct 2023
    CLSA-2023-1697744372
    Fix available
    Packages

    linux-buildinfo-4.4.0-247-tuxcare.els18-generic, linux-buildinfo-4.4.0-247-tuxcare.els18-lowlatency, linux-cloud-tools-4.4.0-247-tuxcare.els18, linux-cloud-tools-4.4.0-247-tuxcare.els18-generic, linux-cloud-tools-4.4.0-247-tuxcare.els18-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-247-tuxcare.els18, linux-headers-4.4.0-247-tuxcare.els18-generic, linux-headers-4.4.0-247-tuxcare.els18-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-247-tuxcare.els18-generic, linux-image-unsigned-4.4.0-247-tuxcare.els18-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-247-tuxcare.els18-generic, linux-modules-4.4.0-247-tuxcare.els18-lowlatency, linux-modules-extra-4.4.0-247-tuxcare.els18-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-247-tuxcare.els18, linux-tools-4.4.0-247-tuxcare.els18-generic, linux-tools-4.4.0-247-tuxcare.els18-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

    Summary

    Fix of 7 CVEs

    Published
    19 Oct 2023
    CVE-2023-45992
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-45381
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-43986
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-42666
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-42435
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-41089
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-41088
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-40153
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    PYSEC-2023-219
    Fix available
    Packages

    wagtail

    Summary

    Published
    19 Oct 2023
    CLSA-2023-1697742355
    Fix available
    Packages

    libnginx-mod-http-auth-pam, libnginx-mod-http-cache-purge, libnginx-mod-http-dav-ext, libnginx-mod-http-echo, libnginx-mod-http-fancyindex, libnginx-mod-http-geoip, libnginx-mod-http-headers-more-filter, libnginx-mod-http-image-filter, libnginx-mod-http-lua, libnginx-mod-http-ndk, libnginx-mod-http-perl, libnginx-mod-http-subs-filter, libnginx-mod-http-uploadprogress, libnginx-mod-http-upstream-fair, libnginx-mod-http-xslt-filter, libnginx-mod-mail, libnginx-mod-nchan, libnginx-mod-rtmp, libnginx-mod-stream, nginx, nginx-common, nginx-core, nginx-doc, nginx-extras, nginx-full, nginx-light

    Summary

    Fix CVE(s): CVE-2023-44487

    Published
    19 Oct 2023
    CLSA-2023-1697742241
    Fix available
    Packages

    nginx, nginx-common, nginx-core, nginx-doc, nginx-extras, nginx-full, nginx-light

    Summary

    Fix CVE(s): CVE-2023-44487

    Published
    19 Oct 2023
    CLSA-2023-1697741983
    Fix available
    Packages

    platform-python, platform-python-debug, platform-python-devel, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

    Summary

    python3: Fix of CVE-2022-48560

    Published
    19 Oct 2023
    CLSA-2023-1697741849
    Fix available
    Packages

    libglib2.0-0, libglib2.0-bin, libglib2.0-data, libglib2.0-dev, libglib2.0-dev-bin, libglib2.0-doc, libglib2.0-tests

    Summary

    Fix of 5 CVEs

    Published
    19 Oct 2023
    CLSA-2023-1697741722
    Fix available
    Packages

    libglib2.0-0, libglib2.0-0-refdbg, libglib2.0-bin, libglib2.0-data, libglib2.0-dev, libglib2.0-doc, libglib2.0-tests

    Summary

    Fix of 5 CVEs

    Published
    19 Oct 2023
    CLSA-2023-1697741516
    Fix available
    Packages

    python2, python2-debug, python2-devel, python2-libs, python2-test, python2-tkinter, python2-tools

    Summary

    python2: Fix of CVE-2022-48560

    Published
    19 Oct 2023
    CLSA-2023-1697741309
    Fix available
    Packages

    python3, python3-debug, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

    Summary

    python3: Fix of CVE-2022-48560

    Published
    19 Oct 2023
    CLSA-2023-1697740947
    Fix available
    Packages

    glib2, glib2-devel, glib2-doc, glib2-fam, glib2-static, glib2-tests

    Summary

    glib2: Fix of 5 CVEs

    Published
    19 Oct 2023
    CVE-2023-45820
    Fix available
    Packages

    Summary

    Directus crashes on invalid WebSocket message

    Published
    19 Oct 2023
    CLSA-2023-1697740683
    Fix available
    Packages

    platform-python, platform-python-debug, platform-python-devel, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

    Summary

    python3: Fix of CVE-2022-48560

    Published
    19 Oct 2023
    CLSA-2023-1697740469
    Fix available
    Packages

    python2, python2-debug, python2-devel, python2-libs, python2-test, python2-tkinter, python2-tools

    Summary

    python2: Fix of CVE-2022-48560

    Published
    19 Oct 2023
    CVE-2023-45809
    Fix available
    Packages

    Summary

    Disclosure of user names via admin bulk action views in wagtail

    Published
    19 Oct 2023
    GHSA-43fw-536j-w37j
    Fix available
    Packages

    org.yamcs:yamcs

    Summary

    Yamcs API Directory Traversal vulnerability

    Published
    19 Oct 2023
    GHSA-w4m2-qmh3-2g8f
    Fix available
    Packages

    org.yamcs:yamcs

    Summary

    Yamcs Path Traversal vulnerability

    Published
    19 Oct 2023
    CLSA-2023-1697740212
    Fix available
    Packages

    glib2, glib2-devel, glib2-doc, glib2-fam, glib2-static, glib2-tests

    Summary

    glib2: Fix of 5 CVEs

    Published
    19 Oct 2023
    CVE-2023-45826
    Fix available
    Packages

    Summary

    Authenticated SQL Injection in leantime

    Published
    19 Oct 2023
    CVE-2023-45825
    Fix available
    Packages

    Summary

    Token in custom credentials object can leak through logs in ydb-go-sdk

    Published
    19 Oct 2023
    CLSA-2023-1697739734
    Fix available
    Packages

    python, python-debug, python-devel, python-libs, python-test, python-tools, tkinter

    Summary

    python: Fix of 2 CVEs

    Published
    19 Oct 2023
    CLSA-2023-1697739575
    Fix available
    Packages

    python3, python3-debug, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

    Summary

    python3: Fix of 4 CVEs

    Published
    19 Oct 2023
    CVE-2023-5059
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023
    CVE-2023-39431
    No fix available
    Packages

    Summary

    Published
    19 Oct 2023