Open Source Vulnerabilities

libreswan

CVE-2023-38710 affecting package libreswan for versions less than 4.7-5

wireshark, wireshark, wireshark

wireshark

CVE-2023-2906 affecting package wireshark for versions less than 4.4.7-1

wireshark

CVE-2023-2906 affecting package wireshark for versions less than 4.0.8-1

tomcat6, tomcat7, tomcat8, tomcat7, tomcat8, tomcat9, tomcat9, tomcat9

python-pyramid, python-pyramid, python-pyramid, python-pyramid, python-pyramid, python-pyramid, python-pyramid

libreswan, libreswan, libreswan, libreswan, libreswan, libreswan

libreswan, libreswan, libreswan, libreswan, libreswan

libreswan, libreswan, libreswan, libreswan, libreswan, libreswan

wireshark, wireshark

Pyramid static view path traversal up one directory

Wireshark CP2179 divide by zero

Apache Tomcat: Open redirect with FORM authentication

go package github.com/corazawaf/coraza is vulnerable to denial of service

Unauthenticated access to Ironic API

libp2p nodes vulnerable to OOM attack

Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining

Notepad++ global buffer read overflow in nsCodingStateMachine::NextState

Zulip vulnerable to insufficient authorization check for edition/deletion of messages and topics in private streams by former subscribers

Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar

Freighter mnemonic phrase may be accessed by Javascript through a private API

Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert

OpenFGA Authorization Bypass

github.com/openfga/openfga

OpenFGA Authorization Bypass

pyramid

Pyramid static view path traversal up one directory

github.com/gravitl/netmaker, github.com/gravitl/netmaker

Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User

github.com/gravitl/netmaker, github.com/gravitl/netmaker

Netmaker IDOR Allows User to Update Other User's Password

github.com/gravitl/netmaker, github.com/gravitl/netmaker

Netmaker has Hardcoded DNS Secret Key

keylime

Keylime: challenge-response protocol bypass during agent registration

giflib, giflib, giflib

giflib, giflib, giflib, giflib, giflib, giflib, giflib, giflib