Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2023-34108
    Fix available
    Packages

    Summary

    Manipulation of Internal Dovecot Variables in mailcow via crafted Passwords

    Published
    7 Jun 2023
    CVE-2023-3149
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-3148
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-0121
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-0508
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-2001
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-2013
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-2015
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-2198
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-2199
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-2485
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    CVE-2023-34109
    Fix available
    Packages

    Summary

    User input results in Unbounded resource consumption in @zxcvbn-ts/core

    Published
    7 Jun 2023
    CVE-2023-34234
    Fix available
    Packages

    Summary

    Governor proposal creation may be blocked by frontrunning in OpenZeppelin

    Published
    7 Jun 2023
    GHSA-vj2m-9f5j-mpr5
    Fix available
    Packages

    github.com/vapor/vapor

    Summary

    Vapor vulnerable to denial of service in HTTP Range Request of FileMiddleware

    Published
    7 Jun 2023
    CVE-2023-3147
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-3146
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    UBUNTU-CVE-2023-2442
    No fix available
    Packages

    gitlab

    Summary

    Published
    7 Jun 2023
    GHSA-qvxg-wjxc-r4gg
    Fix available
    Packages

    github.com/vapor/vapor

    Summary

    Vapor vulnerable to denial of service in URLEncodedFormDecoder

    Published
    7 Jun 2023
    GHSA-239c-6cv2-wwx8
    Fix available
    Packages

    github.com/apple/swift-corelibs-foundation

    Summary

    Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder

    Published
    7 Jun 2023
    GHSA-773g-x274-8qmf
    Fix available
    Packages

    github.com/apple/swift-nio-extras, github.com/apple/swift-nio-extras, github.com/apple/swift-nio-extras

    Summary

    SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression

    Published
    7 Jun 2023
    GHSA-7fj7-39wj-c64f
    Fix available
    Packages

    github.com/apple/swift-nio, github.com/apple/swift-nio, github.com/apple/swift-nio

    Summary

    SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')

    Published
    7 Jun 2023
    GHSA-v3r5-pjpm-mwgq
    Fix available
    Packages

    github.com/swift-server/async-http-client, github.com/swift-server/async-http-client, github.com/swift-server/async-http-client, github.com/swift-server/async-http-client

    Summary

    Async HTTP Client has CRLF Injection vulnerability in HTTP request headers

    Published
    7 Jun 2023
    GHSA-fqcv-rfp6-wv92
    No fix available
    Packages

    microweber/microweber

    Summary

    Microweber Cross-site Scripting vulnerability

    Published
    7 Jun 2023
    GHSA-hh54-53m7-7ffj
    No fix available
    Packages

    github.com/alist-org/alist/v3

    Summary

    alist Incorrect Access Control vulnerability

    Published
    7 Jun 2023
    CVE-2023-3145
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-3144
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-3143
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-33553
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-20889
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-20888
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-20887
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2023-2878
    Fix available
    Packages

    Summary

    Kubernetes secrets-store-csi-driver discloses service account tokens in logs

    Published
    7 Jun 2023
    SUSE-SU-2023:2459-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP4_Update_10

    Summary

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

    Published
    7 Jun 2023
    SUSE-SU-2023:2455-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP4_Update_3

    Summary

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)

    Published
    7 Jun 2023
    CVE-2022-31693
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2021-46889
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    SUSE-SU-2023:2453-1
    Fix available
    Packages

    kgraft-patch-SLE12-SP5_Update_32

    Summary

    Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP5)

    Published
    7 Jun 2023
    OSV-2023-462
    Fix available
    Packages

    ntopng

    Summary

    Heap-buffer-overflow in IEC104Stats::processPacket

    Published
    7 Jun 2023
    USN-6145-1
    Fix available
    Packages

    sysstat, sysstat, sysstat, sysstat, sysstat

    Summary

    sysstat vulnerabilities

    Published
    7 Jun 2023
    CVE-2021-4380
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2021-4379
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2021-4337
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2020-36728
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    CVE-2020-36705
    No fix available
    Packages

    Summary

    Published
    7 Jun 2023
    SUSE-SU-2023:2450-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP3_Update_32

    Summary

    Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP3)

    Published
    7 Jun 2023
    SUSE-SU-2023:2448-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP2_Update_32

    Summary

    Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP2)

    Published
    7 Jun 2023
    SUSE-SU-2023:2445-1
    Fix available
    Packages

    google-cloud-sap-agent, google-cloud-sap-agent, google-cloud-sap-agent, google-cloud-sap-agent, google-cloud-sap-agent, google-cloud-sap-agent

    Summary

    Security update for google-cloud-sap-agent

    Published
    7 Jun 2023
    SUSE-SU-2023:2443-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP4_Update_5

    Summary

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)

    Published
    7 Jun 2023
    SUSE-SU-2023:2441-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    7 Jun 2023
    SUSE-SU-2023:2440-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    7 Jun 2023