Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    USN-5660-1
    Fix available
    Packages

    linux-gcp-5.4

    Summary

    linux-gcp-5.4 vulnerabilities

    Published
    6 Oct 2022
    OSV-2022-1018
    No fix available
    Packages

    kimageformats

    Summary

    Index-out-of-bounds in LibRaw::kodak_radc_load_raw

    Published
    6 Oct 2022
    OSV-2022-1017
    Fix available
    Packages

    suricata

    Summary

    Null-dereference READ in AlertJson

    Published
    6 Oct 2022
    DSA-5250-1
    Fix available
    Packages

    dbus

    Summary

    dbus - security update

    Published
    6 Oct 2022
    DSA-5249-1
    Fix available
    Packages

    strongswan

    Summary

    strongswan - security update

    Published
    6 Oct 2022
    DSA-5251-1
    Fix available
    Packages

    isc-dhcp

    Summary

    isc-dhcp - security update

    Published
    6 Oct 2022
    CVE-2022-41556
    Fix available
    Packages

    Summary

    Published
    6 Oct 2022
    CVE-2022-40494
    No fix available
    Packages

    Summary

    Published
    6 Oct 2022
    CVE-2022-39244
    Fix available
    Packages

    Summary

    Buffer overflow in pjlib scanner and pjmedia

    Published
    6 Oct 2022
    CVE-2022-39269
    Fix available
    Packages

    Summary

    Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip

    Published
    6 Oct 2022
    CVE-2022-3273
    Fix available
    Packages

    ,

    Summary

    Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Published
    6 Oct 2022
    CVE-2022-3389
    Fix available
    Packages

    Summary

    Path Traversal in ikus060/rdiffweb

    Published
    6 Oct 2022
    ALSA-2022:6820
    Fix available
    Packages

    prometheus-jmx-exporter, prometheus-jmx-exporter-openjdk11

    Summary

    Moderate: prometheus-jmx-exporter security update

    Published
    6 Oct 2022
    ALSA-2022:6838
    Fix available
    Packages

    expat, expat-devel

    Summary

    Important: expat security update

    Published
    6 Oct 2022
    ALSA-2022:6839
    Fix available
    Packages

    squid

    Summary

    Important: squid security update

    Published
    6 Oct 2022
    CVE-2022-27810
    Fix available
    Packages

    Summary

    Published
    6 Oct 2022
    CVE-2022-3002
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Published
    6 Oct 2022
    CVE-2022-2986
    Fix available
    Packages

    Summary

    Published
    6 Oct 2022
    CVE-2022-31008
    Fix available
    Packages

    Summary

    Predictable credential obfuscation seed value used in rabbitmq-server

    Published
    6 Oct 2022
    CVE-2022-3376
    Fix available
    Packages

    ,

    Summary

    Weak Password Requirements in ikus060/rdiffweb

    Published
    6 Oct 2022
    CVE-2022-39222
    Fix available
    Packages

    Summary

    OAuth authorization code exposure in Dex

    Published
    6 Oct 2022
    CVE-2022-39237
    Fix available
    Packages

    Summary

    Digital Signature Hash Algorithms Not Validated in sylabs/sif

    Published
    6 Oct 2022
    CVE-2022-39265
    Fix available
    Packages

    Summary

    Mail settings' command parameter injection in mybb

    Published
    6 Oct 2022
    CVE-2022-39270
    Fix available
    Packages

    Summary

    Arbitrary HTML injection in table-of-contents theme component in DiscoTOC

    Published
    6 Oct 2022
    CVE-2022-39273
    Fix available
    Packages

    Summary

    Default OAuth Authorization Server secret in FlyteAdmin

    Published
    6 Oct 2022
    CVE-2022-39274
    Fix available
    Packages

    Summary

    Buffer Overflow in `ProcessRadioRxDone` in LoRaMac-node

    Published
    6 Oct 2022
    CVE-2022-39275
    Fix available
    Packages

    Summary

    Improper object type validation in saleor

    Published
    6 Oct 2022
    CVE-2022-39280
    Fix available
    Packages

    Summary

    Regular expression denial of service in dparse

    Published
    6 Oct 2022
    CVE-2022-39284
    Fix available
    Packages

    Summary

    Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4

    Published
    6 Oct 2022
    CVE-2022-39988
    No fix available
    Packages

    Summary

    Published
    6 Oct 2022
    CVE-2022-40159
    No fix available
    Packages

    Summary

    Stack Overflow in JXPath

    Published
    6 Oct 2022
    CVE-2022-40160
    No fix available
    Packages

    Summary

    Stack Overflow in JXPath

    Published
    6 Oct 2022
    USN-5659-1
    Fix available
    Packages

    kitty, kitty

    Summary

    kitty vulnerabilities

    Published
    5 Oct 2022
    Packages

    pngcheck, pngcheck

    Summary

    Security update for pngcheck

    Published
    5 Oct 2022
    GHSA-67x4-qr35-qvrm
    Fix available
    Packages

    github.com/flyteorg/flyteadmin

    Summary

    FlyteAdmin's Default OAuth Authorization Server secret must be rotated

    Published
    5 Oct 2022
    USN-5657-1
    Fix available
    Packages

    graphite2

    Summary

    graphite2 vulnerability

    Published
    5 Oct 2022
    GO-2022-1027
    Fix available
    Packages

    github.com/cloudwego/hertz

    Summary

    Path traversal in github.com/cloudwego/hertz

    Published
    5 Oct 2022
    USN-5658-1
    Fix available
    Packages

    isc-dhcp, isc-dhcp, isc-dhcp

    Summary

    isc-dhcp vulnerabilities

    Published
    5 Oct 2022
    GSD-2022-1006458
    No fix available
    Packages

    Summary

    information disclosure in Mac OS version 12.6

    Published
    5 Oct 2022
    SUSE-SU-2022:3529-1
    Fix available
    Packages

    sendmail

    Summary

    Security update for sendmail

    Published
    5 Oct 2022
    SUSE-SU-2022:3525-1
    Fix available
    Packages

    cifs-utils, cifs-utils, cifs-utils

    Summary

    Security update for cifs-utils

    Published
    5 Oct 2022
    SUSE-SU-2022:3524-1
    Fix available
    Packages

    nodejs16

    Summary

    Security update for nodejs16

    Published
    5 Oct 2022
    MGASA-2022-0358
    Fix available
    Packages

    bash

    Summary

    Updated bash packages fix security vulnerability

    Published
    5 Oct 2022
    MGASA-2022-0356
    Fix available
    Packages

    golang

    Summary

    Updated golang packages fix security vulnerability

    Published
    5 Oct 2022
    MGASA-2022-0357
    Fix available
    Packages

    chromium-browser-stable

    Summary

    Updated chromium-browser-stable packages fix security vulnerability

    Published
    5 Oct 2022
    OSV-2022-1015
    Fix available
    Packages

    mapserver

    Summary

    Heap-use-after-free in msFreeMap

    Published
    5 Oct 2022
    DSA-5248-1
    Fix available
    Packages

    php-twig

    Summary

    php-twig - security update

    Published
    5 Oct 2022
    DLA-3138-1
    Fix available
    Packages

    bind9

    Summary

    bind9 - security update

    Published
    5 Oct 2022
    DLA-3137-1
    Fix available
    Packages

    nodejs

    Summary

    nodejs - security update

    Published
    5 Oct 2022
    Packages

    isc-dhcp, isc-dhcp, isc-dhcp, isc-dhcp, isc-dhcp

    Summary

    Published
    5 Oct 2022