Open Source Vulnerabilities

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland

kernel

kernel security update

pcre

Security update for pcre

pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre

Security update for pcre

pcre2, pcre2

Security update for pcre2

openssl

Updated openssl packages fix security vulnerability

webkit2

Updated webkit2 packages fix security vulnerability

squid, squid

Security update for squid

shiva

Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

chainerrl-visualizer

ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

opendiamond

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

microweber/microweber

Microweber before 1.2.21 allows attacker to bypass IP detection to brute-force password

dnsmasq

Heap-buffer-overflow in dhcp_reply

Bypass of safe.directory protections in Git

linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle, linux-raspi, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

DoS in KubeEdge's Websocket Client in package Viaduct

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

KubeEdge Cloud Stream and Edge Stream DoS from large stream message

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

KubeEdge CloudCore Router memory exhaustion vulnerability

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

KubeEdge DoS when signing the CSR from EdgeCore

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

KubeEdge Cloud AdmissionController component DoS

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

KubeEdge Edge ServiceBus module DoS

org.springframework.boot:spring-boot

Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

KubeEdge Websocket Client in package Viaduct: DoS from large response message

KubeEdge Cloud Stream and Edge Stream DoS from large stream message

KubeEdge CloudCore Router memory exhaustion

KubeEdge DoS when signing the CSR from EdgeCore