Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    ALSA-2023:5080
    Fix available
    Packages

    keylime, keylime-base, keylime-registrar, keylime-selinux, keylime-tenant, keylime-verifier, python3-keylime

    Summary

    Moderate: keylime security update

    Published
    12 Sept 2023
    ALSA-2023:5081
    Fix available
    Packages

    librsvg2, librsvg2-devel, librsvg2-tools

    Summary

    Moderate: librsvg2 security update

    Published
    12 Sept 2023
    ALSA-2023:5091
    Fix available
    Packages

    kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-kvm, kernel-rt-debug-modules, kernel-rt-debug-modules-core, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-kvm, kernel-rt-modules, kernel-rt-modules-core, kernel-rt-modules-extra

    Summary

    Important: kernel-rt security and bug fix update

    Published
    12 Sept 2023
    CVE-2023-4899
    Fix available
    Packages

    Summary

    SQL Injection in mintplex-labs/anything-llm

    Published
    11 Sept 2023
    CVE-2023-4898
    Fix available
    Packages

    Summary

    Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

    Published
    11 Sept 2023
    GHSA-m5q8-58wh-xxq4
    Fix available
    Packages

    org.drools:drools-core

    Summary

    Drools Core Deserialization of Untrusted Data vulnerability

    Published
    11 Sept 2023
    CVE-2023-35687
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35684
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35683
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35682
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35681
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35680
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35679
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35677
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35676
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35675
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35674
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35673
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35671
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35670
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35669
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35667
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35666
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35665
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35664
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-35658
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    UBUNTU-CVE-2023-35683
    No fix available
    Packages

    android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base, android-platform-frameworks-base

    Summary

    Published
    11 Sept 2023
    CVE-2023-41879
    Fix available
    Packages

    Summary

    Magento LTS's guest order "protect code" can be brute-forced too easily

    Published
    11 Sept 2023
    GHSA-9358-cpvx-c2qp
    Fix available
    Packages

    openmage/magento-lts, openmage/magento-lts

    Summary

    Magento LTS's guest order "protect code" can be brute-forced too easily

    Published
    11 Sept 2023
    GHSA-36xm-35qq-795w
    Fix available
    Packages

    inventory

    Summary

    Inventory exposes reference to non-Sync data to an arbitrary thread

    Published
    11 Sept 2023
    GHSA-jcr6-4frq-9gjj
    No fix available
    Packages

    users

    Summary

    Users vulnerable to unaligned read of `*const *const c_char` pointer

    Published
    11 Sept 2023
    GHSA-ghc8-5cgm-5rpf
    Fix available
    Packages

    inventory

    Summary

    Inventory fails to prohibit standard library access prior to initialization of Rust standard library runtime

    Published
    11 Sept 2023
    CVE-2022-1415
    No fix available
    Packages

    Summary

    Drools: unsafe data deserialization in streamutils

    Published
    11 Sept 2023
    CVE-2023-4318
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-4314
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-4307
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-4294
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-4278
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-4270
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-4060
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-4022
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-40946
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-40945
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-40944
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-40150
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-3510
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-3170
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-3169
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-39227
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023
    CVE-2023-38256
    No fix available
    Packages

    Summary

    Published
    11 Sept 2023