Open Source Vulnerabilities

nomad, nomad

hunspell

Heap-buffer-overflow in AffixMgr::compound_check

mapserver

Heap-buffer-overflow in msyylex

libreoffice

libreoffice - security update

rexical

rexical - security update

ruby-nokogiri

ruby-nokogiri - security update

mediawiki

mediawiki - security update

Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher

Signature bypass via multiple root elements in Passport-SAML

Deserialization of untrusted data in MelisFront

Deserialization of untrusted data in MelisCms

FreeRDP may read and display out of bounds data

RDP client: Read of uninitialized memory with parallel port redirection

aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0, dotnet-host, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-sdk-6.0-source-built-artifacts, dotnet-targeting-pack-6.0, dotnet-templates-6.0, netstandard-targeting-pack-2.1

Moderate: .NET 6.0 security and bugfix update

aspnetcore-runtime-3.1, aspnetcore-targeting-pack-3.1, dotnet-apphost-pack-3.1, dotnet-hostfxr-3.1, dotnet-runtime-3.1, dotnet-sdk-3.1, dotnet-sdk-3.1-source-built-artifacts, dotnet-targeting-pack-3.1, dotnet-templates-3.1

Moderate: .NET Core 3.1 security and bugfix update

aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet, dotnet-apphost-pack-6.0, dotnet-host, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-sdk-6.0-source-built-artifacts, dotnet-targeting-pack-6.0, dotnet-templates-6.0, netstandard-targeting-pack-2.1

Moderate: .NET 6.0 security and bugfix update

Memory handling vulnerability in ProtocolBuffers Java core and lite

ini4j, ini4j, ini4j

packer

CVE-2022-42717 affecting package packer for versions less than 1.8.7-1

ini4j, ini4j

vagrant, vagrant, vagrant, vagrant

libosip2, libosip2, libosip2

democritus-html

d8s-asns

d8s-pdfs

d8s-urls

d8s-domains

democritus-dicts

d8s-file-system

d8s-html

d8s-json

d8s-lists

d8s-networking

democritus-dicts