Open Source Vulnerabilities

silverstripe/framework

Missing permission check of canView in GridFieldPrintButton

silverstripe/framework

Open redirect vulnerability on CMSSecurity relogin screen

github.com/metal3-io/baremetal-operator

Ironic and ironic-inspector may expose as ConfigMaps

payload

Hidden fields can be leaked on readable collections in Payload

github.com/ory/oathkeeper

Hop-by-hop abuse to malform header mutator

wwbn/avideo

Cross site scripting (XSS) in wwbn/avideo

linux, linux, linux

kernel

CVE-2023-0458 affecting package kernel for versions less than 5.15.111.1-1

linux, linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-azure, linux-azure-5.19, linux-azure-fde, linux-gcp, linux-gcp-5.19, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

ipe, ipe, ipe, ipe, ipe

ipe, ipe, ipe, ipe

ipe, ipe, ipe, ipe

ipe, ipe, ipe, ipe

ipe, ipe, ipe, ipe

ipe, ipe, ipe, ipe

ipe, ipe, ipe, ipe

drupal7, drupal7

ming

libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, libxml2, python-libxml2-python, libxml2, python-libxml2-python, libxml2, python-libxml2-python, python-libxml2-python

Security update for libxml2

@builder.io/qwik-city

@builder.io/qwik-city Cross-Site Request Forgery vulnerability

Ironic and ironic-inspector deployed within Baremetal Operator may expose as ConfigMaps

Contiki-NG has off-by-one error in Antelope DBMS

cloud-init, cloud-init, cloud-init, cloud-init

cloud-init vulnerability

pysha3, sha3

Buffer overflow in sponge queue functions

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

contao/contao, contao/contao, contao/contao

Path traversal vulnerability in the file manager

prestashop/prestashop, prestashop/prestashop

Arbitrary file read via SQL injection

aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4, aws-sigv4

AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending

silverstripe/admin

Cross-site scripting vulnerabilities in old version of bundled TinyMCE

linux-aws-5.15, linux-gke-5.15, linux-hwe-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux, linux-aws, linux-azure, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle

linux, linux-aws, linux-aws-5.15, linux-azure, linux-gke, linux-gke-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15 vulnerabilities

openssl-ibmca, openssl-ibmca

Security update for openssl-ibmca

openssl-ibmca, openssl-ibmca, openssl-ibmca

Security update for openssl-ibmca

drupal/core

Access bypass in Drupal core

drupal/core, drupal/core

Lack of domain validation in Druple core

drupal/core, drupal/core

Improper input validation in Drupal core