Open Source Vulnerabilities

efibootguard, efibootguard, efibootguard

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-riscv, linux-riscv-5.19, linux-starfive-5.19

svelecte

Svelecte item names vulnerable to execution of arbitrary JavaScript

ed25519-dalek

`ed25519-dalek` Double Public Key Signing Function Oracle Attack

github.com/treeverse/lakefs

lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files

,

Execution of arbitrary JavaScript from Svelecte item names

Insufficient input validation in efibootguard

Improper Authentication in PrivateUploader

Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading

Reflected Cross-Site Scripting (XSS) in scancode.io license endpoint

Elementor < 3.5.5 - Iframe Injection

org.opennms:opennms-webapp

OpenNMS vulnerable to Cross-site Scripting

org.opennms:opennms-webapp

OpenNMS vulnerable to Cross-site Scripting

org.opennms:opennms-webapp-rest

OpenNMS privilege elevation vulnerability

qemu, qemu

qemu, qemu

Reflected XSS in multiple JSP files in opennms/opennms

Stored XSS in multiple JSP files in opennms/opennms

ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

xterm, xterm, xterm

xterm

CVE-2023-40359 affecting package xterm for versions less than 380-1

xterm, xterm, xterm, xterm

radare2, radare2, radare2, radare2, radare2, radare2

kernel-default, kernel-default-base, kernel-default, kernel-default-base, kernel-64kb, kernel-default, kernel-default-base, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP4_Update_16, kernel-default, kernel-default, kernel-default, kernel-default-base, kernel-default, kernel-default-base, dtb-aarch64, kernel-64kb, kernel-debug, kernel-default, kernel-default-base, kernel-docs, kernel-kvmsmall, kernel-obs-build, kernel-obs-qa, kernel-source, kernel-syms, kernel-zfcpdump

Security update for the Linux Kernel

Heap-based Buffer Overflow in radareorg/radare2