Open Source Vulnerabilities

apache-airflow

apache-airflow

linux-aws-hwe, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon

linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, lnux-hwe, inux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Open Redirect

Format String Vulnerability

linux, linux, linux

kernel

CVE-2022-41218 affecting package kernel for versions less than 5.15.92.1-1

linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-5.19, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

CVE-2022-41218 does not affect BellSoft software

swftools, swftools

swftools, swftools

swftools, swftools

swftools, swftools

swftools, swftools

swftools, swftools

file

Heap-buffer-overflow in file_zmagic

file

Heap-buffer-overflow in file_magwarn

microweber/microweber

Microweber Cross-site Scripting can result in redirection to a malicious site

yetiforce/yetiforce-crm

YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module

org.apache.kafka:kafka, org.apache.kafka:kafka, org.apache.kafka:kafka, org.apache.kafka:kafka

Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service

yetiforce/yetiforce-crm

YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module

yetiforce/yetiforce-crm

YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module

yetiforce/yetiforce-crm

YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module

org.apache.inlong:inlong-common

Apache InLong vulnerable to Deserialization of Untrusted Data

microweber/microweber

Microweber vulnerable to HTML Injection in create tag functionality

github.com/HFO4/cloudreve, github.com/cloudreve/Cloudreve/v3

Cross site scripting in Cloudreve

pagekit/pagekit

Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type

pywasm3, wasm3

WASM3 Improper Input Validation vulnerability

steal

steal Inefficient Regular Expression Complexity vulnerability via string variable

steal

steal vulnerable to Prototype Pollution via alias variable

fish

fish - security update

e17

e17 - security update

tinygltf

tinygltf - security update

mako

mako - security update

bind9, bind9, bind9

bind9, bind9, bind9, bind9

bind9

bind9

bind9

bind9, bind9, bind9, bind9, bind9-libs, bind9, bind9-libs, isc-dhcp, isc-dhcp, isc-dhcp

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod

grafana

XSS Vulnerabilities in WebClient

github.com/drakkan/sftpgo

SFTPGo WebClient vulnerable to Cross-site Scripting

org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups

org.xwiki.platform:xwiki-platform-security, org.xwiki.platform:xwiki-platform-security, org.xwiki.platform:xwiki-platform-security

XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference