Open Source Vulnerabilities

Easy Forms for MailChimp < 6.8.8 - Reflected XSS

dawnsparks-node-tesseract

Remote code execution in dawnsparks-node-tesseract

broccoli-compass

Remote code execution in broccoli-compass

apache-superset

Apache superset missing check for default SECRET_KEY

kgraft-patch-SLE12-SP4_Update_28

Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP4)

giflib, giflib, giflib, giflib, giflib, giflib, giflib

Security update for giflib

enumflags2

Adverserial use of `make_bitflags!` macro can cause undefined behavior

kiwitcms

kiwi TCMS has possibility for user to update email address to unverified one

Kiwi TCMS unrestricted file upload vulnerability

Kiwi TCMS may allow user to update email address to unverified one

lorawan-stack has open redirect vulnerability

Clusternet has potential risk which can be leveraged to make a cluster-level privilege escalation

yaml

Uncaught Exception in yaml

Apache Superset: Database connection password leak

Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

RIOT-OS vulnerable to Packet Type Confusion during IPHC send

RIOT-OS vulnerable to Null Pointer dereference during IPHC encoding

node-yaml, node-yaml, node-yaml

rnp, rnp, rnp

rnp, rnp, rnp, thunderbird, thunderbird, thunderbird