Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2022-37415
    No fix available
    Packages

    Summary

    Published
    5 Aug 2022
    GSD-2022-1004951
    No fix available
    Packages

    Summary

    hashed password of the user who created or revoked the link disclosure in Slack version between April 17, 2017 and July 17, 2022

    Published
    5 Aug 2022
    OSV-2022-672
    Fix available
    Packages

    mruby

    Summary

    Heap-buffer-overflow in udiv

    Published
    5 Aug 2022
    GHSA-2fxf-qj94-3f83
    Fix available
    Packages

    org.apache.jspwiki:jspwiki-main

    Summary

    Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp

    Published
    5 Aug 2022
    GHSA-jp3m-p26h-mm7v
    Fix available
    Packages

    org.apache.jspwiki:jspwiki-main

    Summary

    Apache JSPWiki CSRF due to crafted invocation on the Image plugin

    Published
    5 Aug 2022
    GHSA-9x9j-vrhj-v364
    Fix available
    Packages

    org.apache.jspwiki:jspwiki-main

    Summary

    Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp

    Published
    5 Aug 2022
    GHSA-ggjq-8c4c-68r5
    Fix available
    Packages

    org.apache.jspwiki:jspwiki-main

    Summary

    Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369

    Published
    5 Aug 2022
    GHSA-hph8-29xw-qfxx
    Fix available
    Packages

    org.apache.jspwiki:jspwiki-main

    Summary

    Apache JSPWiki XSS due to crafted request in WeblogPlugin

    Published
    5 Aug 2022
    GHSA-8wm5-8h9c-47pc
    Fix available
    Packages

    org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common

    Summary

    Apache Hadoop argument injection vulnerability

    Published
    5 Aug 2022
    GHSA-7942-2fx8-qhpf
    Fix available
    Packages

    raneto

    Summary

    Raneto v0.17.0 employs weak password complexity requirements

    Published
    5 Aug 2022
    GHSA-vc68-6x72-w22f
    Fix available
    Packages

    raneto

    Summary

    Raneto vulnerable to Cross-site Scripting

    Published
    5 Aug 2022
    GHSA-xxc2-j7jj-6g5m
    Fix available
    Packages

    raneto

    Summary

    Raneto Denial of Service via crafted payload injected into `Search` parameter

    Published
    5 Aug 2022
    CVE-2022-37434
    Fix available
    Packages

    Summary

    Published
    5 Aug 2022
    CVE-2022-31793
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-37030
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    GO-2022-0189
    Fix available
    Packages

    toolchain

    Summary

    Remote command execution via "go get" with "-u" flag in cmd/go

    Published
    4 Aug 2022
    CVE-2022-35930
    Fix available
    Packages

    Summary

    Ability to bypass attestation verification in sigstore PolicyController

    Published
    4 Aug 2022
    CVE-2021-32771
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35927
    Fix available
    Packages

    Summary

    Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG

    Published
    4 Aug 2022
    CVE-2022-35926
    Fix available
    Packages

    Summary

    Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG

    Published
    4 Aug 2022
    CLSA-2022-1659644194
    Fix available
    Packages

    tzdata, tzdata-java

    Summary

    Update of tzdata

    Published
    4 Aug 2022
    CLSA-2022-1659643989
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-21540, CVE-2022-34169

    Published
    4 Aug 2022
    CLSA-2022-1659643853
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-34169, CVE-2022-21540, CVE-2022-21541

    Published
    4 Aug 2022
    CLSA-2022-1659643786
    Fix available
    Packages

    tzdata, tzdata-java

    Summary

    Update of tzdata

    Published
    4 Aug 2022
    CVE-2022-35858
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35142
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35143
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35144
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34993
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CLSA-2022-1659639100
    Fix available
    Packages

    vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

    Summary

    Fixed CVEs in vim: CVE-2022-2345, CVE-2022-2344, CVE-2022-2343, CVE-2022-2522

    Published
    4 Aug 2022
    CLSA-2022-1659638964
    Fix available
    Packages

    php, php-bcmath, php-cli, php-common, php-dba, php-devel, php-embedded, php-enchant, php-fpm, php-gd, php-imap, php-intl, php-ldap, php-mbstring, php-mysql, php-odbc, php-pdo, php-pgsql, php-process, php-pspell, php-recode, php-snmp, php-soap, php-tidy, php-xml, php-xmlrpc, php-zts

    Summary

    Fixed CVE-2021-21702 in php

    Published
    4 Aug 2022
    CLSA-2022-1659638796
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-debug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-debug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-debug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-debug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-debug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-debug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

    Published
    4 Aug 2022
    CVE-2022-35929
    Fix available
    Packages

    Summary

    False positive signature verification in cosign

    Published
    4 Aug 2022
    CVE-2022-34970
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CLSA-2022-1659637855
    Fix available
    Packages

    vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

    Summary

    Fixed CVEs in vim: CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2343

    Published
    4 Aug 2022
    CLSA-2022-1659637689
    Fix available
    Packages

    php, php-bcmath, php-cli, php-common, php-dba, php-devel, php-embedded, php-enchant, php-fpm, php-gd, php-imap, php-intl, php-ldap, php-mbstring, php-mysql, php-odbc, php-pdo, php-pgsql, php-process, php-pspell, php-recode, php-snmp, php-soap, php-tidy, php-xml, php-xmlrpc, php-zts

    Summary

    Fixed CVE-2021-21702 in php

    Published
    4 Aug 2022
    CLSA-2022-1659636917
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-debug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-debug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-debug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-debug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-debug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-debug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21540, CVE-2022-21541, CVE-2022-34169

    Published
    4 Aug 2022
    CVE-2022-35735
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35728
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35272
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35245
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35243
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35241
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35240
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35236
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34865
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34862
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34851
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34844
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34655
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022