Open Source Vulnerabilities

go1.18, go1.18, go1.18, go1.18

Security update for go1.18

go1.19, go1.19, go1.19, go1.19

Security update for go1.19

qemu, qemu, qemu

qemu security update

vim, vim, vim

vim security update

kernel

kernel security update

kernel

kernel security update

kubernetes, kubernetes, kubernetes

kubernetes security update

emacs, emacs, emacs

emacs security update

kernel

kernel security update

libtar, libtar, libtar

libtar security update

samba, samba, samba, samba, samba, samba, samba

Security update for samba

nautilus, nautilus, nautilus, nautilus

Security update for nautilus

nautilus, nautilus, nautilus

Security update for nautilus

net.mingsoft:ms-mcms

Mingsoft MCMS vulnerable to SQL Injection

cacti

cacti - security update

tinymce, tinymce/tinymce, TinyMCE, tinymce, tinymce/tinymce, TinyMCE

Cross-site scripting vulnerability in TinyMCE alerts

tinymce, tinymce, tinymce

Cross-site Scripting with user-uploaded files in dhis2-core

Privilege Chaining with the user admin role in dhis2-core

Semi-blind Server-Side Request Forgery in dhis2-core

Potential Information exposure in the upload directory in PrestaShop

Routes exposed with an empty TLSOption in traefik

Authorization header displayed in the debug logs

golang.org/x/net/http2, golang.org/x/net

golang.org/x/net/http2 vulnerable to possible excessive memory growth

Cross-site scripting vulnerability in TinyMCE alerts

ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag

A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa

gcc-5, gccgo-6

gcc-5, gccgo-6 vulnerability

golang-1.19, golang-golang-x-net, golang-golang-x-net, golang-golang-x-net

golang

CVE-2022-41717 affecting package golang 1.27.1-1

golang

CVE-2022-41717 affecting package golang 1.25.7-1

podman

CVE-2022-41717 affecting package podman for versions less than 5.6.1-2

podman

CVE-2022-41717 affecting package podman 4.1.1-26

golang

CVE-2022-41717 affecting package golang for versions less than 1.21.6-1

golang

CVE-2022-41717 affecting package golang for versions less than 1.21.6-1

sriov-network-device-plugin

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.7.0-1

prometheus

CVE-2022-41717 affecting package prometheus for versions less than 2.45.4-1

moby-engine

CVE-2022-41717 affecting package moby-engine for versions less than 25.0.3-1