Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    DLA-3237-1
    Fix available
    Packages

    node-tar

    Summary

    node-tar - security update

    Published
    12 Dec 2022
    DLA-3236-1
    Fix available
    Packages

    openexr

    Summary

    openexr - security update

    Published
    12 Dec 2022
    CVE-2022-46908
    Fix available
    Packages

    Summary

    Published
    12 Dec 2022
    CVE-2022-45970
    No fix available
    Packages

    Summary

    Published
    12 Dec 2022
    CVE-2022-45968
    No fix available
    Packages

    Summary

    Published
    12 Dec 2022
    CVE-2022-44637
    Fix available
    Packages

    Summary

    Published
    12 Dec 2022
    CVE-2022-4421
    Fix available
    Packages

    Summary

    rAthena FluxCP Service Desk Image URL view.php cross site scripting

    Published
    12 Dec 2022
    CVE-2022-44031
    Fix available
    Packages

    Summary

    Published
    12 Dec 2022
    CVE-2022-41881
    Fix available
    Packages

    Summary

    Published
    12 Dec 2022
    CVE-2022-23511
    Fix available
    Packages

    Summary

    Published
    12 Dec 2022
    DSA-5300-1
    Fix available
    Packages

    pngcheck

    Summary

    pngcheck - security update

    Published
    12 Dec 2022
    GHSA-cp9c-phxx-55xm
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    phpMyFAQ vulnerable to Cross-site Scripting

    Published
    11 Dec 2022
    GHSA-rjf6-wj7r-5fj2
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    phpMyFAQ vulnerable to Cross-site Scripting

    Published
    11 Dec 2022
    GHSA-wpgc-5cr5-h9gg
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    phpMyFAQ has insecure HTTP cookies

    Published
    11 Dec 2022
    OSV-2022-1258
    Fix available
    Packages

    assimp

    Summary

    Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

    Published
    11 Dec 2022
    CVE-2022-4402
    No fix available
    Packages

    Summary

    Published
    11 Dec 2022
    CVE-2022-4414
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - DOM in nuxt/framework

    Published
    11 Dec 2022
    CVE-2022-4413
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Reflected in nuxt/framework

    Published
    11 Dec 2022
    CVE-2022-4409
    Fix available
    Packages

    Summary

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq

    Published
    11 Dec 2022
    CVE-2022-4408
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Published
    11 Dec 2022
    CVE-2022-4407
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    Published
    11 Dec 2022
    DLA-3235-1
    Fix available
    Packages

    node-eventsource

    Summary

    node-eventsource - security update

    Published
    11 Dec 2022
    Packages

    python-slixmpp, python-slixmpp

    Summary

    Security update for python-slixmpp

    Published
    10 Dec 2022
    Packages

    nodau, nodau, nodau

    Summary

    Published
    10 Dec 2022
    UBUNTU-CVE-2022-4399
    No fix available
    Packages

    nodau, nodau, nodau, nodau

    Summary

    Published
    10 Dec 2022
    UBUNTU-CVE-2022-4398
    No fix available
    Packages

    radare2, radare2, radare2, radare2, radare2, radare2

    Summary

    Published
    10 Dec 2022
    CVE-2022-45145
    No fix available
    Packages

    Summary

    Published
    10 Dec 2022
    UBUNTU-CVE-2022-45145
    No fix available
    Packages

    chicken, chicken, chicken, chicken, chicken, chicken, chicken

    Summary

    Published
    10 Dec 2022
    Packages

    python-slixmpp, python-slixmpp

    Summary

    Security update for python-slixmpp

    Published
    10 Dec 2022
    OSV-2022-1252
    Fix available
    Packages

    libredwg

    Summary

    Heap-buffer-overflow in bit_read_BB

    Published
    10 Dec 2022
    OSV-2022-1251
    Fix available
    Packages

    libredwg

    Summary

    Heap-buffer-overflow in bit_read_B

    Published
    10 Dec 2022
    GHSA-894q-wpg5-mf2h
    Fix available
    Packages

    pyrdfa3

    Summary

    pyRdfa3 Cross-site Scripting vulnerability

    Published
    10 Dec 2022
    Packages

    python-pyrdfa, python-pyrdfa, python-pyrdfa

    Summary

    Published
    10 Dec 2022
    UBUNTU-CVE-2022-4396
    No fix available
    Packages

    rdflib, rdflib, rdflib, python-pyrdfa, rdflib, rdflib, rdflib, rdflib

    Summary

    Published
    10 Dec 2022
    PYSEC-2022-43011
    Fix available
    Packages

    sentry

    Summary

    Published
    10 Dec 2022
    UBUNTU-CVE-2022-23485
    No fix available
    Packages

    sentry-python, sentry-python, sentry-python, sentry-python, sentry-python

    Summary

    Published
    10 Dec 2022
    CVE-2022-23485
    Fix available
    Packages

    Summary

    Invite code reuse via cookie manipulation in sentry

    Published
    10 Dec 2022
    GHSA-x87m-36g7-6mpw
    No fix available
    Packages

    yiisoft/yii2-gii

    Summary

    Yii2 Gii Cross-site Scripting vulnerability

    Published
    10 Dec 2022
    DLA-3190-2
    Fix available
    Packages

    grub2

    Summary

    grub2 - security update

    Published
    10 Dec 2022
    CVE-2022-4398
    Fix available
    Packages

    Summary

    Integer Overflow or Wraparound in radareorg/radare2

    Published
    10 Dec 2022
    CVE-2022-4397
    Fix available
    Packages

    Summary

    morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

    Published
    10 Dec 2022
    CVE-2022-4396
    Fix available
    Packages

    Summary

    RDFlib pyrdfa3 __init__.py _get_option cross site scripting

    Published
    10 Dec 2022
    DSA-5299-1
    Fix available
    Packages

    openexr

    Summary

    openexr - security update

    Published
    10 Dec 2022
    DLA-3234-1
    Fix available
    Packages

    hsqldb

    Summary

    hsqldb - security update

    Published
    10 Dec 2022
    CVE-2022-4399
    Fix available
    Packages

    Summary

    TicklishHoneyBee nodau db.c sql injection

    Published
    10 Dec 2022
    CVE-2022-23497
    Fix available
    Packages

    Summary

    Insecure file access in FreshRSS

    Published
    9 Dec 2022
    CVE-2022-45292
    No fix available
    Packages

    Summary

    Published
    9 Dec 2022
    CVE-2022-23510
    Fix available
    Packages

    Summary

    SQl injection in cube-js

    Published
    9 Dec 2022
    CVE-2022-44790
    No fix available
    Packages

    Summary

    Published
    9 Dec 2022
    GHSA-w3x5-427h-wfq6
    Fix available
    Packages

    de.codecentric:spring-boot-admin, de.codecentric:spring-boot-admin, de.codecentric:spring-boot-admin

    Summary

    Spring Boot Admins integrated notifier support allows arbitrary code execution

    Published
    9 Dec 2022