Open Source Vulnerabilities

vim

CVE-2022-3037 affecting package vim for versions less than 9.0.0325-1

vim, vim, vim, vim, vim

texlive-bin, emscripten, ipe, xpdf, texlive-bin, emscripten, ipe, texlive-bin, ipe, emscripten, ipe, texlive-bin, emscripten, ipe, texlive-bin, emscripten, ipe, texlive-bin, emscripten, ipe, texlive-bin

linux-oem-5.14

linux-oem-5.14 vulnerability

github.com/zitadel/zitadel, github.com/zitadel/zitadel

Broken Authorization in ZITADEL Actions

strapi-plugin-ezforms

Captcha Bypass in strapi-plugin-ezforms

getkirby/cms, getkirby/cms, getkirby/cms

Cross-site scripting from content entered in the tags and multiselect fields

helm.sh/helm/v3

Helm Vulnerable to denial of service through string value parsing

wayland, wayland, wayland, wayland

next

Unexpected server crash in Next.js

nodebb, nodebb

Cryptographically weak PRNG in `utils.generateUUID`

Use After Free in vim/vim

moment-timezone

Command Injection in moment-timezone

moment-timezone

Cleartext Transmission of Sensitive Information in moment-timezone

directus

Directus vulnerable to unhandled exception on illegal filename_disk value

github.com/cilium/cilium, github.com/cilium/cilium, github.com/cilium/cilium

Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels

iana-time-zone

iana-time-zone vulnerable to use after free in MacOS / iOS implementation

github.com/matrix-org/dendrite, github.com/matrix-org/gomatrixserverlib

gomatrixserverlib and Dendrite vulnerable to incorrect parsing of the event default power level in event auth

mz-avro

mz-avro's incorrect use of `set_len` allows for un-initialized memory

Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm

.NET Denial of Service Vulnerability

Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.Owin.Security.Cookies, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.Owin, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.osx-arm64

.NET Denial of Service Vulnerability

linux, linux-raspi

linux, linux-raspi vulnerabilities

graphicsmagick, graphicsmagick, graphicsmagick, graphicsmagick

graphicsmagick vulnerabilities

linux

linux vulnerability

linux-aws

linux-aws vulnerabilities

jupyter-notebook, jupyter-notebook, jupyter-notebook

jupyter-notebook vulnerabilities