Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-cgrj-xjm7-9q27
    Fix available
    Packages

    web2py

    Summary

    Open redirect in web2py

    Published
    28 Jun 2022
    GHSA-7f3x-x4pr-wqhj
    Fix available
    Packages

    parse-url

    Summary

    Server-Side Request Forgery in parse-url

    Published
    28 Jun 2022
    GHSA-q6wq-5p59-983w
    Fix available
    Packages

    parse-url

    Summary

    Cross site scripting in parse-url

    Published
    28 Jun 2022
    GHSA-4p35-cfcx-8653
    Fix available
    Packages

    parse-url

    Summary

    Hostname confusion in parse-url

    Published
    28 Jun 2022
    GHSA-jpp7-7chh-cf67
    Fix available
    Packages

    parse-url

    Summary

    Cross site scripting in parse-url

    Published
    28 Jun 2022
    GHSA-m43h-hfrq-x8wx
    Fix available
    Packages

    org.apache.systemds:systemds, systemds

    Summary

    SystemDS CPU exhaustion vulnerability

    Published
    28 Jun 2022
    GHSA-6q8v-2hvm-fx37
    Fix available
    Packages

    org.apache.tika:tika, org.apache.tika:tika

    Summary

    Apache Tika contains incomplete fix for regex DoS

    Published
    28 Jun 2022
    CVE-2022-2231
    Fix available
    Packages

    Summary

    NULL Pointer Dereference in vim/vim

    Published
    28 Jun 2022
    CVE-2022-31056
    Fix available
    Packages

    Summary

    SQL injection with _actor parameter in GLPI

    Published
    28 Jun 2022
    ALSA-2022:5267
    Fix available
    Packages

    kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-kvm, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-kvm, kernel-rt-modules, kernel-rt-modules-extra

    Summary

    Important: kernel-rt security and bug fix update

    Published
    28 Jun 2022
    ALSA-2022:5344
    Fix available
    Packages

    kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-kvm, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-kvm, kernel-rt-modules, kernel-rt-modules-extra

    Summary

    Important: kernel-rt security and bug fix update

    Published
    28 Jun 2022
    CVE-2022-31104
    Fix available
    Packages

    Summary

    Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime

    Published
    27 Jun 2022
    CVE-2022-34132
    Fix available
    Packages

    Summary

    Published
    27 Jun 2022
    CVE-2022-34133
    Fix available
    Packages

    Summary

    Published
    27 Jun 2022
    CVE-2022-34134
    Fix available
    Packages

    Summary

    Published
    27 Jun 2022
    CVE-2022-33009
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    CVE-2022-31103
    Fix available
    Packages

    Summary

    Improper handling of CSS at-rules in lettersanitizer

    Published
    27 Jun 2022
    CVE-2022-32995
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    CVE-2022-32994
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    CVE-2022-31101
    Fix available
    Packages

    Summary

    SQL Injection in prestashop/blockwishlist

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-33879
    No fix available
    Packages

    tika

    Summary

    Published
    27 Jun 2022
    CVE-2022-33007
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    CVE-2022-32092
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31091
    Fix available
    Packages

    guzzle, guzzle, guzzle, mediawiki, mediawiki, mediawiki

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31090
    Fix available
    Packages

    guzzle, guzzle, guzzle, mediawiki, mediawiki, mediawiki

    Summary

    Published
    27 Jun 2022
    CVE-2017-20103
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    UBUNTU-CVE-2022-33879
    Fix available
    Packages

    tika, tika, tika, tika, tika, tika, tika

    Summary

    Published
    27 Jun 2022
    UBUNTU-CVE-2022-31091
    No fix available
    Packages

    civicrm, civicrm, mediawiki, civicrm, mediawiki, icinga-php-thirdparty, icingaweb2-module-reactbundle, civicrm, mediawiki, icinga-php-thirdparty, icingaweb2-module-reactbundle, icinga-php-thirdparty, icingaweb2-module-reactbundle, icinga-php-thirdparty, icingaweb2-module-reactbundle

    Summary

    Published
    27 Jun 2022
    UBUNTU-CVE-2022-31090
    No fix available
    Packages

    civicrm, civicrm, mediawiki, civicrm, mediawiki, icinga-php-thirdparty, icingaweb2-module-reactbundle, civicrm, mediawiki, icinga-php-thirdparty, icingaweb2-module-reactbundle, icinga-php-thirdparty, icingaweb2-module-reactbundle, icinga-php-thirdparty, icingaweb2-module-reactbundle

    Summary

    Published
    27 Jun 2022
    CVE-2022-31099
    Fix available
    Packages

    Summary

    Uncontrolled Recursion in rulex

    Published
    27 Jun 2022
    CVE-2022-31100
    Fix available
    Packages

    Summary

    Reachable Assertion in rulex

    Published
    27 Jun 2022
    CVE-2022-31098
    Fix available
    Packages

    Summary

    Weave GitOps leaked cluster credentials into logs on connection errors

    Published
    27 Jun 2022
    CVE-2022-33879
    Fix available
    Packages

    Summary

    Incomplete fix and new regex DoS in StandardsExtractingContentHandler

    Published
    27 Jun 2022
    CVE-2022-31096
    No fix available
    Packages

    Summary

    Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse

    Published
    27 Jun 2022
    CVE-2022-31093
    Fix available
    Packages

    Summary

    Improper Handling of `callbackUrl` parameter in next-auth

    Published
    27 Jun 2022
    CVE-2022-31092
    Fix available
    Packages

    Summary

    SQL injection in pimcore

    Published
    27 Jun 2022
    CVE-2022-33005
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31088
    Fix available
    Packages

    ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31087
    Fix available
    Packages

    ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31086
    Fix available
    Packages

    ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31085
    Fix available
    Packages

    ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31084
    Fix available
    Packages

    ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2022-31081
    Fix available
    Packages

    libhttp-daemon-perl, libhttp-daemon-perl, libhttp-daemon-perl

    Summary

    Published
    27 Jun 2022
    CVE-2021-40942
    No fix available
    Packages

    Summary

    Published
    27 Jun 2022
    DEBIAN-CVE-2021-40942
    No fix available
    Packages

    gpac

    Summary

    Published
    27 Jun 2022
    BELL-CVE-2022-31081
    Fix available
    Packages

    perl-http-daemon, perl-http-daemon

    Summary

    Published
    27 Jun 2022
    UBUNTU-CVE-2022-31087
    No fix available
    Packages

    ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    UBUNTU-CVE-2022-31088
    No fix available
    Packages

    ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    UBUNTU-CVE-2022-31086
    No fix available
    Packages

    ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022
    UBUNTU-CVE-2022-31085
    No fix available
    Packages

    ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager

    Summary

    Published
    27 Jun 2022