Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    SUSE-SU-2023:2050-1
    Fix available
    Packages

    fwupd, fwupd

    Summary

    Security update for fwupd

    Published
    27 Apr 2023
    CVE-2023-28770
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-28769
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    GHSA-2hp9-3xfr-r9w2
    Fix available
    Packages

    Serenity.Net.Core, Serenity.Net.Web

    Summary

    Insufficient token expiration in Serenity

    Published
    27 Apr 2023
    GHSA-93h6-wx7r-mgfp
    Fix available
    Packages

    Serenity.Net.Core, Serenity.Net.Services

    Summary

    Cross Site Scripting (XSS) in Serenity

    Published
    27 Apr 2023
    GHSA-w7jm-9x4m-8qc3
    Fix available
    Packages

    Serenity.Net.Core, Serenity.Net.Web

    Summary

    User account enumeration in Serenity

    Published
    27 Apr 2023
    CVE-2023-28697
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-24836
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-22901
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-20853
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-20852
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2022-47758
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-26246
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-26245
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-26244
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-26243
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-2297
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-31290
    Fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-31287
    Fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-31286
    Fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-31285
    Fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-30349
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-30338
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-29471
    Fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-25292
    No fix available
    Packages

    Summary

    Published
    27 Apr 2023
    CVE-2023-2343
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - DOM in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2342
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2341
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Generic in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2340
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2339
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2338
    Fix available
    Packages

    Summary

    SQL Injection in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2336
    Fix available
    Packages

    Summary

    Path Traversal in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2328
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Generic in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2327
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2323
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Published
    27 Apr 2023
    CVE-2023-2322
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Published
    27 Apr 2023
    Packages

    cloud-init, cloud-init, cloud-init

    Summary

    Published
    26 Apr 2023
    AZL-26342
    Fix available
    Packages

    cloud-init

    Summary

    CVE-2023-1786 affecting package cloud-init for versions less than 22.4-3

    Published
    26 Apr 2023
    CVE-2023-1786
    Fix available
    Packages

    Summary

    sensitive data exposure in cloud-init logs

    Published
    26 Apr 2023
    CVE-2023-27107
    No fix available
    Packages

    Summary

    Published
    26 Apr 2023
    CVE-2022-45876
    No fix available
    Packages

    Summary

    Published
    26 Apr 2023
    GHSA-8849-cv9f-vccm
    Fix available
    Packages

    drupal/core, drupal/core, drupal/core, drupal/core

    Summary

    Access bypass in Drupal core

    Published
    26 Apr 2023
    GHSA-2x3r-7jgm-gh8x
    No fix available
    Packages

    tcg/voyager

    Summary

    Remote code execution in Voyager

    Published
    26 Apr 2023
    GHSA-f737-3fh6-jf6w
    Fix available
    Packages

    vconsole

    Summary

    Prototype Pollution in vConsole

    Published
    26 Apr 2023
    CVE-2023-2291
    No fix available
    Packages

    Summary

    Published
    26 Apr 2023
    CVE-2023-29443
    No fix available
    Packages

    Summary

    Published
    26 Apr 2023
    CVE-2023-29442
    No fix available
    Packages

    Summary

    Published
    26 Apr 2023
    CVE-2023-30846
    Fix available
    Packages

    Summary

    typed-rest-client vulnerable to potential leak of authentication data to 3rd parties

    Published
    26 Apr 2023
    CVE-2023-30845
    Fix available
    Packages

    Summary

    ESPv2 vulnerable to JWT authentication bypass via `X-HTTP-Method-Override` header

    Published
    26 Apr 2023
    CVE-2023-30843
    Fix available
    Packages

    Summary

    Payload's hidden fields can be leaked on readable collections

    Published
    26 Apr 2023