Open Source Vulnerabilities

openvswitch, openvswitch, openvswitch, openvswitch, openvswitch, openvswitch, openvswitch

0ad, 0ad, 0ad, 0ad, 0ad, 0ad, 0ad

cruddl vulnerable to AQL injection through flexSearch

tiff, tiff

tiff vulnerabilities

XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection

XWiki Platform Mentions UI vulnerable to Cross-site Scripting

XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability

XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form

XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list

XWiki Cross-Site Request Forgery (CSRF) for actions on tags

XWiki Platform Web Parent POM vulnerable to XSS in the attachment history

rdiffweb

linux-raspi-5.4

linux-raspi-5.4 vulnerabilities

linux-raspi

linux-raspi vulnerabilities

Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb

rsync

Fixed CVE-2022-29154 in rsync

rsync

Fixed CVE-2022-29154 in rsync

rsync

Fix CVE(s): CVE-2022-29154

rsync, rsync-daemon

Fixed CVE-2022-29154 in rsync

XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard

rsync, rsync-daemon

Fixed CVE-2022-29154 in rsync

XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action

rsync, rsync-daemon

Fixed CVE-2022-29154 in rsync

XWiki Platform Web Templates vulnerable to Missing Authorization and Exposure of Private Personal Information to an Unauthorized Actor

vim, vim, vim

vim

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1

vim

org.xwiki.platform:xwiki-platform-oldcore Improper Authorization check for inactive users

rubygem-rake

Security update for rubygem-rake

OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions