Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    ASB-A-276750639
    Fix available
    Packages

    :linux_kernel:Qualcomm, platform/vendor/qcom-opensource/wlan/platform

    Summary

    Published
    1 Jul 2023
    ASB-A-276750584
    Fix available
    Packages

    :linux_kernel:Qualcomm, platform/vendor/qcom-opensource/wlan/platform

    Summary

    Published
    1 Jul 2023
    ASB-A-272073598
    Fix available
    Packages

    :unknown:

    Summary

    Published
    1 Jul 2023
    ASB-A-258021433
    Fix available
    Packages

    platform/frameworks/av, platform/frameworks/av, platform/frameworks/av, platform/frameworks/av

    Summary

    Published
    1 Jul 2023
    ASB-A-268589017
    Fix available
    Packages

    :linux_kernel:

    Summary

    Published
    1 Jul 2023
    ASB-A-279905816
    Fix available
    Packages

    platform/frameworks/av, platform/frameworks/av, platform/frameworks/av, platform/frameworks/av

    Summary

    Published
    1 Jul 2023
    CVE-2023-30586
    Fix available
    Packages

    Summary

    Published
    30 Jun 2023
    CVE-2023-30589
    Fix available
    Packages

    Summary

    Published
    30 Jun 2023
    CVE-2023-28364
    Fix available
    Packages

    ,

    Summary

    Published
    30 Jun 2023
    CVE-2023-36144
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    GHSA-76f7-9v52-v2fw
    Fix available
    Packages

    net.opentsdb:opentsdb

    Summary

    Remote Code Execution for 2.4.1 and earlier

    Published
    30 Jun 2023
    CVE-2023-36812
    Fix available
    Packages

    Summary

    Remote Code Execution in OpenTSDB

    Published
    30 Jun 2023
    GHSA-hm9v-vj3r-r55m
    Fix available
    Packages

    pypdf2

    Summary

    PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects

    Published
    30 Jun 2023
    GHSA-jrm6-h9cq-8gqw
    Fix available
    Packages

    pypdf2

    Summary

    PyPDF2 quadratic runtime with malformed PDF missing xref marker

    Published
    30 Jun 2023
    DEBIAN-CVE-2023-3338
    Fix available
    Packages

    linux, linux, linux

    Summary

    Published
    30 Jun 2023
    CVE-2023-3338
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    CVE-2023-33298
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    DEBIAN-CVE-2023-2908
    Fix available
    Packages

    tiff, tiff, tiff

    Summary

    Published
    30 Jun 2023
    AZL-34801
    Fix available
    Packages

    hyperv-daemons

    Summary

    CVE-2023-3338 affecting package hyperv-daemons for versions less than 6.6.35.1-1

    Published
    30 Jun 2023
    AZL-44682
    No fix available
    Packages

    openjpeg2

    Summary

    CVE-2023-2908 affecting package openjpeg2 2.3.1-12

    Published
    30 Jun 2023
    AZL-61792
    No fix available
    Packages

    pcp

    Summary

    CVE-2023-3338 affecting package pcp 6.3.2-1

    Published
    30 Jun 2023
    AZL-27302
    Fix available
    Packages

    libtiff

    Summary

    CVE-2023-2908 affecting package libtiff for versions less than 4.5.1-1

    Published
    30 Jun 2023
    AZL-27636
    Fix available
    Packages

    hyperv-daemons

    Summary

    CVE-2023-3338 affecting package hyperv-daemons for versions less than 5.15.158.1-1

    Published
    30 Jun 2023
    AZL-31687
    Fix available
    Packages

    kernel

    Summary

    CVE-2023-3338 affecting package kernel for versions less than 5.15.137.1-1

    Published
    30 Jun 2023
    AZL-43699
    No fix available
    Packages

    openjpeg2

    Summary

    CVE-2023-2908 affecting package openjpeg2 2.3.1-12

    Published
    30 Jun 2023
    CVE-2023-29241
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    CVE-2023-22816
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    CVE-2023-22815
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    DEBIAN-CVE-2023-1206
    Fix available
    Packages

    linux, linux, linux

    Summary

    Published
    30 Jun 2023
    CVE-2023-1206
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    AZL-27382
    Fix available
    Packages

    kernel

    Summary

    CVE-2023-1206 affecting package kernel for versions less than 5.15.126.1-1

    Published
    30 Jun 2023
    UBUNTU-CVE-2023-1206
    Fix available
    Packages

    linux, linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia, linux-nvidia-6.2, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-starfive-6.2, linux-xilinx-zynqmp, linux-bluefield, linux-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    30 Jun 2023
    UBUNTU-CVE-2023-3338
    Fix available
    Packages

    linux, linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-hwe-edge, linux-kvm, linux-oracle, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-azure-fde-5.15, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-azure, linux-azure-5.19, linux-azure-fde, linux-azure-fde-5.19, linux-gcp, linux-gcp-5.19, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-xilinx-zynqmp, linux-bluefield, linux-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    30 Jun 2023
    UBUNTU-CVE-2023-2908
    Fix available
    Packages

    tiff, tiff, tiff, tiff, tiff

    Summary

    Published
    30 Jun 2023
    UBUNTU-CVE-2023-3117
    Fix available
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-hwe-edge, linux-oracle-5.0, linux-oracle-5.3, linux-raspi-5.4, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-azure, linux-azure-5.19, linux-azure-fde-5.19, linux-gcp, linux-gcp-5.19, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-riscv, linux-riscv-5.19, linux-starfive-5.19

    Summary

    Published
    30 Jun 2023
    BELL-CVE-2023-1206
    No fix available
    Packages

    Summary

    CVE-2023-1206 does not affect BellSoft software

    Published
    30 Jun 2023
    BELL-CVE-2023-3338
    No fix available
    Packages

    Summary

    CVE-2023-3338 does not affect BellSoft software

    Published
    30 Jun 2023
    GHSA-w5w5-2882-47pc
    No fix available
    Packages

    github.com/cosmos/cosmos-sdk

    Summary

    github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee

    Published
    30 Jun 2023
    GHSA-hxq4-mx37-fqvg
    Fix available
    Packages

    s2n-quic

    Summary

    s2n-quic potential denial of service vulnerability when receiving empty UDP packets

    Published
    30 Jun 2023
    GHSA-v4f4-23wc-99mh
    Fix available
    Packages

    pipreqs

    Summary

    pipreqs vulnerable to Dependency Confusion

    Published
    30 Jun 2023
    GHSA-xwc8-rf6m-xr86
    Fix available
    Packages

    hnswlib

    Summary

    hnswlib Double Free vulnerability

    Published
    30 Jun 2023
    DEBIAN-CVE-2023-35947
    No fix available
    Packages

    gradle, gradle, gradle

    Summary

    Published
    30 Jun 2023
    DEBIAN-CVE-2023-35946
    No fix available
    Packages

    gradle, gradle, gradle

    Summary

    Published
    30 Jun 2023
    CVE-2023-29147
    No fix available
    Packages

    Summary

    Published
    30 Jun 2023
    UBUNTU-CVE-2023-35946
    No fix available
    Packages

    gradle, gradle, gradle, gradle, gradle, gradle, gradle

    Summary

    Published
    30 Jun 2023
    UBUNTU-CVE-2023-35947
    No fix available
    Packages

    gradle, gradle, gradle, gradle, gradle, gradle, gradle

    Summary

    Published
    30 Jun 2023
    CVE-2023-3493
    Fix available
    Packages

    Summary

    Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

    Published
    30 Jun 2023
    CVE-2023-3491
    Fix available
    Packages

    Summary

    Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling

    Published
    30 Jun 2023
    CVE-2023-3490
    Fix available
    Packages

    Summary

    SQL Injection in fossbilling/fossbilling

    Published
    30 Jun 2023
    GHSA-8q9q-r9v2-644m
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

    Summary

    Upgrading doesn't prevent exploiting vulnerable XWiki documents

    Published
    30 Jun 2023