Open Source Vulnerabilities

lz4

Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset

chromium

chromium - security update

Cross-site Scripting (XSS) - Stored in zadam/trilium

libqt5-qtwebengine, libqt5-qtwebengine

Security update for libqt5-qtwebengine

opensc

Heap-buffer-overflow in sc_pkcs15_allocate_object_content

lz4

Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

mruby

UNKNOWN WRITE in udiv

microweber/microweber

Microweber before v1.2.20 vulnerable to cross-site scripting

fluent-bit

Segv on unknown address in onig_free_body

quickjs

Heap-buffer-overflow in emit_goto

mruby

UNKNOWN READ in mrb_bint_cmp

libpcap

Heap-buffer-overflow in fixup_pcap_pkthdr

mruby

Heap-use-after-free in mrb_bint_new_str

idno/known

Known v1.3.1 contains Insecure Direct Object Reference

idno/known

Known vulnerable to code execution via SVG file in v1.3.1

idno/known

Known v1.3.1 Cross-site Scripting

idno/known

Known vulnerable to account takeover via host header injection attack in v1.3.1

lz4

Invalid-free in round_trip_fuzzer.c

rpc-py

rpc.py vulnerable to Deserialization of Untrusted Data

Cross-Site Request Forgery (CSRF) in microweber/microweber

vim, vim, vim

vim

CVE-2022-2345 affecting package vim for versions less than 9.0.0050-2

vim, vim, vim, vim, vim

CVE-2022-2345 does not affect BellSoft software

vim, vim, vim

vim

CVE-2022-2344 affecting package vim for versions less than 9.0.0050-2

vim, vim

CVE-2022-2344 does not affect BellSoft software

mat2, mat2, mat2

vim, vim, vim