Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2022-2981
    Fix available
    Packages

    Summary

    Published
    10 Oct 2022
    CVE-2021-25044
    No fix available
    Packages

    Summary

    Published
    10 Oct 2022
    GHSA-4mjx-2gh5-ph8h
    Fix available
    Packages

    slack-morphism

    Summary

    Exposure of sensitive Slack webhook URLs in debug logs and traces

    Published
    10 Oct 2022
    GHSA-jjmg-x456-w976
    Fix available
    Packages

    csrf-csrf

    Summary

    Incorrect default cookie name and recommendation

    Published
    10 Oct 2022
    USN-5667-1
    Fix available
    Packages

    linux-aws-5.15, linux-azure-5.15, linux-hwe-5.15, linux-lowlatency-hwe-5.15, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi

    Summary

    linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-raspi vulnerabilities

    Published
    10 Oct 2022
    USN-5665-1
    Fix available
    Packages

    pcre3

    Summary

    pcre3 vulnerabilities

    Published
    10 Oct 2022
    Packages

    lemon, libsqlite3-0, libsqlite3-dev, libsqlite3-tcl, sqlite3, sqlite3-doc

    Summary

    Fix CVE(s): CVE-2020-13435, CVE-2020-13425

    Published
    10 Oct 2022
    Packages

    libecpg-compat3, libecpg-dev, libecpg6, libpgtypes3, libpq-dev, libpq5, postgresql-9.5, postgresql-client-9.5, postgresql-contrib-9.5, postgresql-doc-9.5, postgresql-plperl-9.5, postgresql-plpython-9.5, postgresql-plpython3-9.5, postgresql-pltcl-9.5, postgresql-server-dev-9.5

    Summary

    Fix CVE(s): CVE-2021-32027

    Published
    10 Oct 2022
    Packages

    lemon, sqlite, sqlite-analyzer, sqlite-devel, sqlite-doc, sqlite-libs, sqlite-tcl

    Summary

    Fixed CVE-2020-13435 in sqlite

    Published
    10 Oct 2022
    Packages

    lemon, sqlite, sqlite-analyzer, sqlite-devel, sqlite-doc, sqlite-libs, sqlite-tcl

    Summary

    Fixed CVE-2020-13435 in sqlite

    Published
    10 Oct 2022
    GHSA-8g9m-vv69-7j99
    Fix available
    Packages

    rdiffweb

    Summary

    rdiffweb vulnerable to Open Redirect

    Published
    10 Oct 2022
    Packages

    lemon, sqlite, sqlite-devel, sqlite-doc, sqlite-tcl

    Summary

    Fixed CVEs in sqlite: CVE-2020-35525, CVE-2020-13435

    Published
    10 Oct 2022
    Packages

    lemon, sqlite, sqlite-devel, sqlite-doc, sqlite-tcl

    Summary

    Fixed CVEs in sqlite: CVE-2020-35525, CVE-2020-13435

    Published
    10 Oct 2022
    USN-5666-1
    Fix available
    Packages

    openssh

    Summary

    openssh vulnerability

    Published
    10 Oct 2022
    CVE-2022-3442
    No fix available
    Packages

    Summary

    Published
    10 Oct 2022
    CVE-2022-26121
    No fix available
    Packages

    Summary

    Published
    10 Oct 2022
    CVE-2021-44171
    No fix available
    Packages

    Summary

    Published
    10 Oct 2022
    PYSEC-2022-43158
    Fix available
    Packages

    rdiffweb

    Summary

    Published
    10 Oct 2022
    RUSTSEC-2022-0087
    Fix available
    Packages

    slack-morphism

    Summary

    Slack Webhooks secrets leak in debug logs

    Published
    10 Oct 2022
    SUSE-SU-2022:3553-1
    Fix available
    Packages

    python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python-base

    Summary

    Security update for python

    Published
    10 Oct 2022
    USN-5662-1
    Fix available
    Packages

    libonig, libonig, libonig

    Summary

    libonig vulnerabilities

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    AZL-11093
    Fix available
    Packages

    dbus

    Summary

    CVE-2022-42012 affecting package dbus for versions less than 1.15.2-2

    Published
    10 Oct 2022
    AZL-11092
    Fix available
    Packages

    dbus

    Summary

    CVE-2022-42011 affecting package dbus for versions less than 1.15.2-2

    Published
    10 Oct 2022
    AZL-11091
    Fix available
    Packages

    dbus

    Summary

    CVE-2022-42010 affecting package dbus for versions less than 1.15.2-2

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    Packages

    dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    DLA-3143-1
    Fix available
    Packages

    strongswan

    Summary

    strongswan - security update

    Published
    10 Oct 2022
    DLA-3142-1
    Fix available
    Packages

    dbus

    Summary

    dbus - security update

    Published
    10 Oct 2022
    DLA-3141-1
    Fix available
    Packages

    wordpress

    Summary

    wordpress - security update

    Published
    10 Oct 2022
    DLA-3144-1
    Fix available
    Packages

    connman

    Summary

    connman - security update

    Published
    10 Oct 2022
    CVE-2022-42724
    Fix available
    Packages

    Summary

    Published
    10 Oct 2022
    CVE-2022-42725
    Fix available
    Packages

    Summary

    Published
    10 Oct 2022
    CVE-2022-40257
    Fix available
    Packages

    Summary

    An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

    Published
    10 Oct 2022
    CVE-2022-40248
    Fix available
    Packages

    Summary

    An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

    Published
    10 Oct 2022
    CVE-2022-39292
    Fix available
    Packages

    Summary

    Exposure of sensitive Slack webhook URLs in debug logs and traces

    Published
    10 Oct 2022
    CVE-2022-39288
    Fix available
    Packages

    Summary

    Denial of service in Fastify via Content-Type header

    Published
    10 Oct 2022
    CVE-2022-3433
    Fix available
    Packages

    Summary

    Published
    10 Oct 2022
    Packages

    linux-azure, linux, linux-aws, linux-lts-xenial, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-hwe-edge, linux-kvm, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-5.19, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    10 Oct 2022
    CVE-2022-36063
    Fix available
    Packages

    Summary

    USBX Host CDC ECM integer underflow with buffer overflow

    Published
    10 Oct 2022
    CVE-2022-3438
    Fix available
    Packages

    ,

    Summary

    Open Redirect in ikus060/rdiffweb

    Published
    10 Oct 2022
    CVE-2022-42703
    No fix available
    Packages

    Summary

    Published
    9 Oct 2022
    Packages

    linux, linux, linux

    Summary

    Published
    9 Oct 2022
    AZL-11094
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-42703 affecting package kernel for versions less than 5.15.74.1-3

    Published
    9 Oct 2022