Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2023-31144
    Fix available
    Packages

    Summary

    Craft CMS vulnerable to cross site scripting in RSS feed widget

    Published
    9 May 2023
    PYSEC-2023-64
    Fix available
    Packages

    mage-ai

    Summary

    Published
    9 May 2023
    SUSE-SU-2023:2148-1
    Fix available
    Packages

    kernel-default, kernel-livepatch-SLE15-SP3_Update_32, kernel-default, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-zfcpdump, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-zfcpdump, kernel-default, kernel-default-base, kernel-default, kernel-default-base, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, dtb-aarch64

    Summary

    Security update for the Linux Kernel

    Published
    9 May 2023
    SUSE-SU-2023:2147-1
    Fix available
    Packages

    kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt, kernel-rt, kernel-rt

    Summary

    Security update for the Linux Kernel

    Published
    9 May 2023
    SUSE-SU-2023:2146-1
    Fix available
    Packages

    kernel-default, kernel-livepatch-SLE15-SP2_Update_36, kernel-default, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms

    Summary

    Security update for the Linux Kernel

    Published
    9 May 2023
    CVE-2023-31143
    Fix available
    Packages

    Summary

    Mage terminal user authentication not working properly

    Published
    9 May 2023
    CVE-2023-32060
    Fix available
    Packages

    Summary

    DHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/events

    Published
    9 May 2023
    CVE-2023-31139
    Fix available
    Packages

    Summary

    DHIS2 Core unrestricted session cookies with Personal Access Tokens

    Published
    9 May 2023
    DEBIAN-CVE-2023-31982
    Fix available
    Packages

    sngrep, sngrep, sngrep

    Summary

    Published
    9 May 2023
    DEBIAN-CVE-2023-31981
    Fix available
    Packages

    sngrep, sngrep, sngrep

    Summary

    Published
    9 May 2023
    DEBIAN-CVE-2023-31979
    No fix available
    Packages

    catdoc, catdoc, catdoc

    Summary

    Published
    9 May 2023
    CVE-2023-31979
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    DEBIAN-CVE-2023-31973
    No fix available
    Packages

    yasm, yasm, yasm

    Summary

    Published
    9 May 2023
    DEBIAN-CVE-2023-31137
    Fix available
    Packages

    maradns

    Summary

    Published
    9 May 2023
    CVE-2023-29462
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-29461
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-29460
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    AZL-35381
    No fix available
    Packages

    yasm

    Summary

    CVE-2023-31973 affecting package yasm 1.3.0-17

    Published
    9 May 2023
    AZL-26634
    No fix available
    Packages

    yasm

    Summary

    CVE-2023-31973 affecting package yasm 1.3.0-17

    Published
    9 May 2023
    UBUNTU-CVE-2023-31979
    No fix available
    Packages

    catdoc, catdoc, catdoc, catdoc, catdoc, catdoc, catdoc

    Summary

    Published
    9 May 2023
    UBUNTU-CVE-2023-31973
    No fix available
    Packages

    yasm, yasm, yasm, yasm, yasm

    Summary

    Published
    9 May 2023
    UBUNTU-CVE-2023-31137
    Fix available
    Packages

    maradns, maradns, maradns, maradns

    Summary

    Published
    9 May 2023
    UBUNTU-CVE-2023-31976
    No fix available
    Packages

    ming

    Summary

    Published
    9 May 2023
    UBUNTU-CVE-2023-31981
    No fix available
    Packages

    sngrep, sngrep, sngrep, sngrep

    Summary

    Published
    9 May 2023
    UBUNTU-CVE-2023-31982
    No fix available
    Packages

    sngrep, sngrep, sngrep, sngrep

    Summary

    Published
    9 May 2023
    CVE-2023-31138
    Fix available
    Packages

    Summary

    DHIS2 Core vulnerable to Improper Access Control with PATCH requests

    Published
    9 May 2023
    SUSE-SU-2023:2144-1
    Fix available
    Packages

    python-cryptography, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon-hpe, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove, python-cryptography, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove, python-cryptography

    Summary

    Security update for python-cryptography

    Published
    9 May 2023
    OSV-2023-385
    Fix available
    Packages

    assimp

    Summary

    Bad-cast to Assimp::BaseImporter from invalid vptr

    Published
    9 May 2023
    OSV-2023-384
    Fix available
    Packages

    mruby

    Summary

    Heap-use-after-free in mrb_str_hash_m

    Published
    9 May 2023
    OSV-2023-383
    No fix available
    Packages

    spring-boot

    Summary

    Security exception in org.json.JSONStringer.value

    Published
    9 May 2023
    CVE-2023-31137
    Fix available
    Packages

    Summary

    MaraDNS Integer Underflow Vulnerability in DNS Packet Decompression

    Published
    9 May 2023
    CVE-2023-31136
    Fix available
    Packages

    Summary

    PostgresNIO processes unencrypted bytes from man-in-the-middle

    Published
    9 May 2023
    DEBIAN-CVE-2023-31975
    No fix available
    Packages

    yasm, yasm, yasm

    Summary

    Published
    9 May 2023
    DEBIAN-CVE-2023-31974
    No fix available
    Packages

    yasm, yasm, yasm

    Summary

    Published
    9 May 2023
    DEBIAN-CVE-2023-31972
    No fix available
    Packages

    yasm, yasm, yasm

    Summary

    Published
    9 May 2023
    CVE-2023-30986
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-30985
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-30899
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-30898
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-2596
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    AZL-35380
    No fix available
    Packages

    yasm

    Summary

    CVE-2023-31972 affecting package yasm 1.3.0-17

    Published
    9 May 2023
    AZL-35383
    Fix available
    Packages

    yasm

    Summary

    CVE-2023-31975 affecting package yasm for versions less than 1.3.0-14

    Published
    9 May 2023
    AZL-35382
    No fix available
    Packages

    yasm

    Summary

    CVE-2023-31974 affecting package yasm 1.3.0-17

    Published
    9 May 2023
    AZL-26632
    Fix available
    Packages

    yasm

    Summary

    CVE-2023-31975 affecting package yasm for versions less than 1.3.0-14

    Published
    9 May 2023
    AZL-26633
    No fix available
    Packages

    yasm

    Summary

    CVE-2023-31972 affecting package yasm 1.3.0-17

    Published
    9 May 2023
    AZL-26635
    No fix available
    Packages

    yasm

    Summary

    CVE-2023-31974 affecting package yasm 1.3.0-17

    Published
    9 May 2023
    CVE-2023-2595
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-2594
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-29128
    No fix available
    Packages

    Summary

    Published
    9 May 2023
    CVE-2023-29107
    No fix available
    Packages

    Summary

    Published
    9 May 2023