Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    DEBIAN-CVE-2023-1994
    Fix available
    Packages

    wireshark, wireshark, wireshark

    Summary

    Published
    12 Apr 2023
    DEBIAN-CVE-2023-1906
    Fix available
    Packages

    imagemagick, imagemagick, imagemagick

    Summary

    Published
    12 Apr 2023
    UBUNTU-CVE-2023-1994
    No fix available
    Packages

    wireshark, wireshark, wireshark, wireshark, wireshark

    Summary

    Published
    12 Apr 2023
    UBUNTU-CVE-2023-1906
    Fix available
    Packages

    imagemagick, imagemagick

    Summary

    Published
    12 Apr 2023
    GO-2023-1713
    Fix available
    Packages

    github.com/sjqzhang/go-fastdfs

    Summary

    Path traversal in github.com/sjqzhang/go-fastdfs

    Published
    12 Apr 2023
    CVE-2023-28121
    Fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26425
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26424
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26423
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26422
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26421
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26420
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26419
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26418
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26417
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26408
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26407
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26406
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26405
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26397
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26396
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-26395
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-24545
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    CVE-2023-24511
    No fix available
    Packages

    Summary

    Published
    12 Apr 2023
    DEBIAN-CVE-2023-1993
    Fix available
    Packages

    wireshark, wireshark, wireshark

    Summary

    Published
    12 Apr 2023
    DEBIAN-CVE-2023-1992
    Fix available
    Packages

    wireshark, wireshark, wireshark

    Summary

    Published
    12 Apr 2023
    UBUNTU-CVE-2023-1993
    No fix available
    Packages

    wireshark, wireshark, wireshark, wireshark, wireshark

    Summary

    Published
    12 Apr 2023
    UBUNTU-CVE-2023-1992
    No fix available
    Packages

    wireshark, wireshark, wireshark, wireshark, wireshark

    Summary

    Published
    12 Apr 2023
    USN-6014-1
    Fix available
    Packages

    linux-lts-xenial, linux, linux-kvm

    Summary

    linux, linux-kvm, linux-lts-xenial vulnerabilities

    Published
    12 Apr 2023
    GHSA-6vgh-9r3c-2cxp
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-flamingo-skin-resources, org.xwiki.platform:xwiki-platform-flamingo-skin, org.xwiki.platform:xwiki-platform-flamingo, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-web-standard, org.xwiki.platform:xwiki-platform-flamingo-skin-resources, org.xwiki.platform:xwiki-platform-flamingo-skin, org.xwiki.platform:xwiki-platform-flamingo, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-web-standard, org.xwiki.platform:xwiki-platform-flamingo-skin-resources, org.xwiki.platform:xwiki-platform-flamingo-skin, org.xwiki.platform:xwiki-platform-flamingo, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-web-standard

    Summary

    Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro

    Published
    12 Apr 2023
    GHSA-xj72-wvfv-8985
    Fix available
    Packages

    vm2

    Summary

    vm2 Sandbox Escape vulnerability

    Published
    12 Apr 2023
    CLSA-2023-1681328662
    Fix available
    Packages

    libnss3, libnss3-1d, libnss3-dev, libnss3-nssdb, libnss3-tools

    Summary

    Fix CVE(s): CVE-2023-0767

    Published
    12 Apr 2023
    GHSA-cwf6-xj49-wp83
    Fix available
    Packages

    github.com/open-feature/open-feature-operator

    Summary

    OpenFeature Operator vulnerable to Cluster-level Privilege Escalation

    Published
    12 Apr 2023
    GHSA-vvp7-r422-rx83
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates

    Summary

    Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm

    Published
    12 Apr 2023
    GHSA-cmvg-w72j-7phx
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-skin-skinx

    Summary

    org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins

    Published
    12 Apr 2023
    GHSA-vxf7-mx22-jr24
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-rendering-xwiki

    Summary

    org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro

    Published
    12 Apr 2023
    GHSA-xwph-x6xj-wggv
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

    Summary

    org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability

    Published
    12 Apr 2023
    GHSA-c885-89fw-55qr
    Fix available
    Packages

    org.xwiki.platform:xwiki-core-rendering-macro-rss, org.xwiki.platform:xwiki-platform-rendering-macro-rss

    Summary

    org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability

    Published
    12 Apr 2023
    GHSA-m3jr-cvhj-f35j
    Fix available
    Packages

    org.xwiki.commons:xwiki-commons-xml

    Summary

    org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability

    Published
    12 Apr 2023
    GHSA-rfh6-mg6h-h668
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration-ui

    Summary

    xwiki-platform-administration-ui vulnerable to privilege escalation

    Published
    12 Apr 2023
    GHSA-vrr8-fp7c-7qgp
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui, org.xwiki.platform:xwiki-platform-flamingo-theme-ui, org.xwiki.platform:xwiki-platform-flamingo-theme-ui

    Summary

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation

    Published
    12 Apr 2023
    GHSA-f4v8-58f6-mwj4
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui, org.xwiki.platform:xwiki-platform-flamingo-theme-ui, org.xwiki.platform:xwiki-platform-flamingo-theme-ui

    Summary

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

    Published
    12 Apr 2023
    GHSA-hmm7-6ph9-8jf2
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-livedata-macro, org.xwiki.platform:xwiki-platform-livedata-macro, org.xwiki.platform:xwiki-platform-livedata-macro

    Summary

    org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Basic Cross-site Scripting

    Published
    12 Apr 2023
    GHSA-pwfv-3cvg-9m4c
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

    Summary

    org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors

    Published
    12 Apr 2023
    GHSA-jjm5-5v9v-7hx2
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-security-authentication-default, org.xwiki.platform:xwiki-platform-security-authentication-default, org.xwiki.platform:xwiki-platform-security-authentication-default

    Summary

    org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticate endpoints

    Published
    12 Apr 2023
    GHSA-qx9h-c5v6-ghqh
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-panels-ui, org.xwiki.platform:xwiki-platform-panels-ui, org.xwiki.platform:xwiki-platform-panels-ui

    Summary

    org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability

    Published
    12 Apr 2023
    GHSA-4655-wh7v-3vmg
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-logging-ui, org.xwiki.platform:xwiki-platform-logging-ui, org.xwiki.platform:xwiki-platform-logging-ui

    Summary

    org.xwiki.platform:xwiki-platform-logging-ui Eval Injection vulnerability

    Published
    12 Apr 2023
    GHSA-c5f4-p5wv-2475
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-panels-ui, org.xwiki.platform:xwiki-platform-panels-ui

    Summary

    xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability

    Published
    12 Apr 2023
    GHSA-w7v9-fc49-4qg4
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki, org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki, org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki

    Summary

    org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability

    Published
    12 Apr 2023
    GHSA-p9mj-v5mf-m82x
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-notifications-ui, org.xwiki.platform:xwiki-platform-notifications-ui, org.xwiki.platform:xwiki-platform-notifications-ui

    Summary

    org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability

    Published
    12 Apr 2023