Open Source Vulnerabilities

ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager, ldap-account-manager

glpi

libhttp-daemon-perl, libhttp-daemon-perl, libhttp-daemon-perl, libhttp-daemon-perl, libhttp-daemon-perl

gpac, gpac, gpac, gpac

Invalid file request can crashe parse-server

Cross site scripting vulnerability in ScratchTools

Missing Encryption of Sensitive Data in ldap-account-manager

Unauthenticated Remote Code Execution in ldap-account-manager

Incorrect Regular Expressions in ldap-account-manager

Incorrect Default Permissions in ldap-account-manager

Unauthenticated LDAP Injection in ldap-account-manager

SQL Injection via package deployment tasks in glpi-inventory-plugin

Malicious response from KubeEdge can crash CSI Driver controller server

Malicious Message can crash CloudCore in KubeEdge

Cross site scripting in username that will trigger by sending chat

Cross site scripting vulnerability for private chat in bigbluebutton

Authenticated Stored XSS in Shopware Administration

Improper privilege management - Anyone can view room settings in GreenLight

Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server

External URLs for Deployments can include javascript in argo-cd

Insecure entropy in argo-cd

kgraft-patch-SLE12-SP4_Update_25, kgraft-patch-SLE12-SP5_Update_24

Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP5)

systemds

kodi-inputstream-adaptive, kodi-inputstream-adaptive, kodi-inputstream-adaptive, kodi-inputstream-adaptive

vim, vim, vim

vim

CVE-2022-2210 affecting package vim for versions less than 8.2.5172-1

CVE-2022-2210 does not affect BellSoft software