Open Source Vulnerabilities

resource-agents

Security update for resource-agents

resource-agents, resource-agents

Security update for resource-agents

composer, composer, composer

composer vulnerability

pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre, pcre

Security update for pcre

rsyslog

Security update for rsyslog

vim

vim vulnerabilities

github.com/openshift/origin

Insecure cookies in Openshift Origin

libvpx

Index-out-of-bounds in decode_coefs

org.apache.druid:druid

Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters

org.jenkins-ci.plugins:google-login

Jenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modification

org.apache.druid:druid

Apache Druid before 0.23.0 vulnerable to clickjacking

org.eclipse.lyo:lyo-parent

XML External Entity Reference in Eclipse Lyo

snipe/snipe-it

Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings

snipe/snipe-it

Snipe-IT 6.0.2 vulnerable to Cross-site Scripting

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in vim/vim

Use After Free in vim/vim

Unauthenticated Remote Code Execution in Roxy-WI

php7.4

php7.4 - security update

Authenticated XSS in Pi-hole AdminLTE

php7.2

php7.2 regression

jetty9, jetty9, jetty9

jetty9, jetty9, jetty9

jetty, jetty8, jetty, jetty8, jetty9, jetty9, jetty9, jetty9

jetty, jetty8, jetty, jetty8, jetty9, jetty9, jetty9, jetty9

jetty, jetty8, jetty, jetty8

org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:http2-server

Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service

org.eclipse.jetty:jetty-server, org.eclipse.jetty:jetty-server

Jetty SslConnection does not release pooled ByteBuffers in case of errors

org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-http

Jetty invalid URI parsing may produce invalid HttpURI.authority

python-ipython, python-ipython-test, python-ipython, python-ipython-test

Security update for python-ipython