Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2023-39660
    No fix available
    Packages

    Summary

    Published
    21 Aug 2023
    CVE-2023-4440
    No fix available
    Packages

    Summary

    Published
    20 Aug 2023
    CVE-2023-4439
    No fix available
    Packages

    Summary

    Published
    20 Aug 2023
    CVE-2023-4438
    No fix available
    Packages

    Summary

    Published
    20 Aug 2023
    CVE-2023-4437
    No fix available
    Packages

    Summary

    Published
    20 Aug 2023
    CVE-2023-4436
    No fix available
    Packages

    Summary

    Published
    20 Aug 2023
    Packages

    mediawiki, mediawiki, mediawiki

    Summary

    Published
    20 Aug 2023
    CVE-2022-24989
    No fix available
    Packages

    Summary

    Published
    20 Aug 2023
    UBUNTU-CVE-2023-36674
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki

    Summary

    Published
    20 Aug 2023
    GHSA-g3mv-64h3-h482
    No fix available
    Packages

    cockpit-hq/cockpit

    Summary

    Cockpit Cross-site Scripting vulnerability

    Published
    20 Aug 2023
    CVE-2023-4451
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

    Published
    20 Aug 2023
    Packages

    python-mitmproxy, python-mitmproxy

    Summary

    Security update for python-mitmproxy

    Published
    20 Aug 2023
    Packages

    python-mitmproxy, python-mitmproxy

    Summary

    Security update for python-mitmproxy

    Published
    20 Aug 2023
    CVE-2023-37250
    No fix available
    Packages

    Summary

    Published
    20 Aug 2023
    Packages

    qt6-base, qt6-base, qt6-base, qtbase-opensource-src, qtbase-opensource-src, qtbase-opensource-src, qtbase-opensource-src-gles, qtbase-opensource-src-gles, qtbase-opensource-src-gles

    Summary

    Published
    20 Aug 2023
    AZL-27920
    Fix available
    Packages

    qt5-qtbase

    Summary

    CVE-2023-37369 affecting package qt5-qtbase for versions less than 5.12.11-9

    Published
    20 Aug 2023
    UBUNTU-CVE-2023-37369
    No fix available
    Packages

    qt4-x11, qt4-x11, qtbase-opensource-src, qtbase-opensource-src-gles, qtbase-opensource-src, qt4-x11, qtbase-opensource-src, qtbase-opensource-src-gles, qt6-base, qtbase-opensource-src, qtbase-opensource-src-gles, qt6-base, qtbase-opensource-src-gles, qt6-base, qtbase-opensource-src-gles, qt6-base, qtbase-opensource-src-gles

    Summary

    Published
    20 Aug 2023
    CVE-2023-4435
    Fix available
    Packages

    Summary

    Improper Input Validation in hamza417/inure

    Published
    20 Aug 2023
    CVE-2023-4434
    Fix available
    Packages

    Summary

    Missing Authorization in hamza417/inure

    Published
    20 Aug 2023
    DSA-5481-1
    Fix available
    Packages

    fastdds, fastdds

    Summary

    fastdds - security update

    Published
    20 Aug 2023
    DLA-3536-1
    Fix available
    Packages

    flask

    Summary

    flask - security update

    Published
    20 Aug 2023
    CVE-2023-37369
    Fix available
    Packages

    ,

    Summary

    Published
    20 Aug 2023
    CVE-2023-36674
    Fix available
    Packages

    Summary

    Published
    20 Aug 2023
    CVE-2023-40711
    Fix available
    Packages

    Summary

    Published
    20 Aug 2023
    OSV-2023-714
    Fix available
    Packages

    apache-poi

    Summary

    Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields

    Published
    19 Aug 2023
    OSV-2023-710
    Fix available
    Packages

    ntopng

    Summary

    Heap-buffer-overflow in Flow::dissectMDNS

    Published
    19 Aug 2023
    CVE-2023-2971
    No fix available
    Packages

    Summary

    Published
    19 Aug 2023
    CVE-2023-2317
    No fix available
    Packages

    Summary

    Published
    19 Aug 2023
    CVE-2023-2316
    No fix available
    Packages

    Summary

    Published
    19 Aug 2023
    CVE-2023-2110
    Fix available
    Packages

    Summary

    Published
    19 Aug 2023
    CVE-2023-2318
    No fix available
    Packages

    Summary

    MarkText DOM-Based Cross-site Scripting leading to Remote Code Execution

    Published
    19 Aug 2023
    GHSA-ff45-2jp9-69jc
    No fix available
    Packages

    cockpit-hq/cockpit

    Summary

    Cockpit Cross-site Scripting vulnerability

    Published
    19 Aug 2023
    GHSA-rmgx-3w4r-xcfp
    No fix available
    Packages

    cockpit-hq/cockpit

    Summary

    Cockpit Cross-site Scripting vulnerability

    Published
    19 Aug 2023
    CVE-2023-4433
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

    Published
    19 Aug 2023
    CVE-2023-4432
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

    Published
    19 Aug 2023
    GHSA-23qf-3jf9-h3q9
    Fix available
    Packages

    org.apache.nifi:nifi-dbcp-base, org.apache.nifi:nifi-jms-processors, org.apache.nifi:nifi-dbcp-service-api, org.apache.nifi:nifi-dbcp-service-bundle

    Summary

    Apache NiFi Insufficient Property Validation vulnerability

    Published
    19 Aug 2023
    Packages

    puma, puma, puma

    Summary

    Published
    18 Aug 2023
    CVE-2023-38839
    No fix available
    Packages

    Summary

    Published
    18 Aug 2023
    Packages

    puma, puma, puma

    Summary

    Published
    18 Aug 2023
    CVE-2023-40037
    Fix available
    Packages

    Summary

    Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs

    Published
    18 Aug 2023
    GHSA-7954-6m9q-gpvf
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-invitation-ui, org.xwiki.platform:xwiki-platform-invitation-ui, org.xwiki.platform:xwiki-platform-invitation-ui

    Summary

    XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/message

    Published
    18 Aug 2023
    GHSA-68xg-gqqm-vgj8
    Fix available
    Packages

    puma, puma

    Summary

    Puma HTTP Request/Response Smuggling vulnerability

    Published
    18 Aug 2023
    CVE-2023-40172
    Fix available
    Packages

    Summary

    Cross-Site Request Forgery (CSRF) in fobybus/social-media-skeleton

    Published
    18 Aug 2023
    CVE-2023-40173
    Fix available
    Packages

    Summary

    Unsalted passwords in fobybus/social-media-skeleton

    Published
    18 Aug 2023
    CVE-2023-40174
    Fix available
    Packages

    Summary

    Insufficient Session Expiration in fobybus/social-media-skeleton

    Published
    18 Aug 2023
    CVE-2023-40175
    Fix available
    Packages

    Summary

    Inconsistent Interpretation of HTTP Requests in puma

    Published
    18 Aug 2023
    GHSA-8m65-qq6g-43rr
    Fix available
    Packages

    cockpit-hq/cockpit

    Summary

    Cockpit Cross-site Scripting vulnerability

    Published
    18 Aug 2023
    Packages

    clamav, clamav, clamav

    Summary

    Published
    18 Aug 2023
    CVE-2023-20212
    No fix available
    Packages

    Summary

    Published
    18 Aug 2023
    Packages

    clamav, clamav

    Summary

    Published
    18 Aug 2023