Open Source Vulnerabilities

freerdp2

freerdp2 - security update

,

gnome-boxes

gnome-boxes - security update

vinagre

vinagre - security update

libeconf

Moderate: libeconf security update

nodejs, nodejs-nodemon, nodejs-packaging

Moderate: nodejs:18 security, bug fix, and enhancement update

dotnet6.0

Important: .NET 6.0 security, bug fix, and enhancement update

dotnet7.0

Important: .NET 7.0 security, bug fix, and enhancement update

pgaudit, pg_repack, postgres-decoderbufs, postgresql

Moderate: postgresql:12 security update

pgaudit, pg_repack, postgres-decoderbufs, postgresql

Moderate: postgresql:13 security update

kernel

Important: kernel security and bug fix update

libxml2

Moderate: libxml2 security update

curl

Moderate: curl security update

ghostscript

Important: ghostscript security update

libwebp

Important: libwebp security update

python3.11

Important: python3.11 security update

thunderbird

Important: thunderbird security update

thunderbird

Important: thunderbird security update

firefox

Important: firefox security update

glibc

Important: glibc security update

kernel

Important: kernel security, bug fix, and enhancement update

libxml2, libxml2, libxml2

libxml2

CVE-2023-45322 affecting package libxml2 for versions less than 2.11.5-3

libxml2

CVE-2023-45322 affecting package libxml2 for versions less than 2.10.4-2

libxml2, libxml2

openmct

Prototype Pollution in NASA Open MCT

org.thingsboard:thingsboard

ThingsBoard Server-Side Template Injection

fsevents

Code injection in fsevents

snipe/snipe-it

Cross-site Scripting in snipe/snipe-it

npm, npm, npm, qtwebengine-opensource-src, npm, qtwebengine-opensource-src, npm, qtwebengine-opensource-src, npm, qtwebengine-opensource-src, npm, qtwebengine-opensource-src, npm, qtwebengine-opensource-src

ImageResizer.Plugins.FreeImage

Vulnerable version of libwebp and can be exploited with a malicious source image

github.com/neuvector/neuvector

JWT token compromise can allow malicious actions including Remote Code Execution (RCE)

Potential buffer overflow vulnerability in the Zephyr CANbus subsystem

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base

android-framework-23, android-framework-23, android-framework-23, android-framework-23

android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base

android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base