Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-v25c-8349-v2q3
    Fix available
    Packages

    thinkcmf/thinkcmf

    Summary

    Incorrect Authorization in thinkcmf

    Published
    15 Jun 2022
    GHSA-38j3-6fm8-pfgc
    Fix available
    Packages

    org.javadelight:delight-nashorn-sandbox

    Summary

    Regular expression denial of service in Delight Nashorn Sandbox

    Published
    15 Jun 2022
    GHSA-hv6q-5g4f-8897
    Fix available
    Packages

    nocodb

    Summary

    Cross-site Scripting in NocoDB

    Published
    15 Jun 2022
    GHSA-x5m7-rwfx-w7qm
    Fix available
    Packages

    org.apache.flume.flume-ng-sources:flume-jms-source

    Summary

    Remote Code Execution in Apache Flume

    Published
    15 Jun 2022
    DLA-3051-1
    Fix available
    Packages

    tzdata

    Summary

    tzdata - new timezone database

    Published
    15 Jun 2022
    CVE-2022-32243
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32242
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32241
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32240
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    USN-5478-1
    Fix available
    Packages

    util-linux

    Summary

    util-linux vulnerability

    Published
    14 Jun 2022
    CVE-2022-32230
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    GHSA-3885-8gqc-3wpf
    Fix available
    Packages

    NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat, NuGet.Commands, NuGet.Commands, NuGet.Commands, NuGet.Commands, NuGet.Commands, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine, NuGet.CommandLine, NuGet.CommandLine, NuGet.CommandLine, NuGet.CommandLine, NuGet.CommandLine.XPlat, NuGet.CommandLine.XPlat, NuGet.CommandLine.XPlat, NuGet.CommandLine.XPlat, NuGet.CommandLine.XPlat, NuGet.CommandLine.XPlat

    Summary

    Potential leak of NuGet.org API key

    Published
    14 Jun 2022
    CVE-2022-31066
    Fix available
    Packages

    Summary

    Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users

    Published
    14 Jun 2022
    CVE-2022-32363
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32362
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32359
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32358
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32355
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32354
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32353
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    Packages

    jupyter-server, jupyter-server, jupyter-server

    Summary

    Published
    14 Jun 2022
    UBUNTU-CVE-2022-29241
    No fix available
    Packages

    jupyter-server, jupyter-server, jupyter-server, jupyter-server

    Summary

    Published
    14 Jun 2022
    PYSEC-2022-211
    Fix available
    Packages

    jupyter-server

    Summary

    Published
    14 Jun 2022
    CVE-2022-31050
    Fix available
    Packages

    Summary

    Insufficient Session Expiration in TYPO3 Admin Tool

    Published
    14 Jun 2022
    CVE-2022-31048
    Fix available
    Packages

    Summary

    Cross-Site Scripting in Form Framework

    Published
    14 Jun 2022
    CVE-2022-31049
    Fix available
    Packages

    Summary

    Cross-Site Scripting in Frontend Login Mailer

    Published
    14 Jun 2022
    CVE-2022-31046
    Fix available
    Packages

    Summary

    Information Disclosure via Export Module in TYPO3 CMS

    Published
    14 Jun 2022
    CVE-2022-29241
    Fix available
    Packages

    Summary

    Known or guessable hidden files may be accessed in Jupyter Server

    Published
    14 Jun 2022
    CVE-2022-31047
    Fix available
    Packages

    Summary

    Insertion of Sensitive Information into Log File in typo3/cms-core

    Published
    14 Jun 2022
    SUSE-SU-2022:2084-1
    Fix available
    Packages

    xen, xen, xen

    Summary

    Security update for xen

    Published
    14 Jun 2022
    SUSE-SU-2022:2083-1
    Fix available
    Packages

    kernel-default, kernel-source, kernel-syms, kernel-default, kernel-source, kernel-syms, kernel-default, kernel-default, kgraft-patch-SLE12-SP4_Update_27, kernel-default, kernel-source, kernel-syms, kernel-default, kernel-source, kernel-syms

    Summary

    Security update for the Linux Kernel

    Published
    14 Jun 2022
    CVE-2022-31060
    Fix available
    Packages

    Summary

    Banner topic data is exposed on login-required Discourse sites

    Published
    14 Jun 2022
    CVE-2022-32239
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32238
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32237
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-32236
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-31059
    Fix available
    Packages

    Summary

    Discourse Calendar Event names susceptible to Cross-site Scripting

    Published
    14 Jun 2022
    CVE-2022-32235
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-31595
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-31594
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-31590
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-31589
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-29618
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-29615
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    CVE-2022-29614
    No fix available
    Packages

    Summary

    Published
    14 Jun 2022
    SUSE-SU-2022:2082-1
    Fix available
    Packages

    kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_45, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_45, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_45, kernel-default, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_45, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_45, kernel-default, kernel-source, kernel-syms

    Summary

    Security update for the Linux Kernel

    Published
    14 Jun 2022
    SUSE-SU-2022:2081-1
    Fix available
    Packages

    389-ds, 389-ds

    Summary

    Security update for 389-ds

    Published
    14 Jun 2022
    SUSE-SU-2022:2080-1
    Fix available
    Packages

    kernel-azure, kernel-source-azure, kernel-syms-azure, kernel-azure, kernel-source-azure, kernel-syms-azure

    Summary

    Security update for the Linux Kernel

    Published
    14 Jun 2022
    SUSE-SU-2022:2079-1
    Fix available
    Packages

    kernel-azure, kernel-source-azure, kernel-syms-azure, kernel-azure, kernel-source-azure, kernel-syms-azure

    Summary

    Security update for the Linux Kernel

    Published
    14 Jun 2022
    SUSE-SU-2022:2078-1
    Fix available
    Packages

    kernel-64kb, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP3_Update_19, kernel-default, kernel-default, kernel-preempt, kernel-default, kernel-default-base, kernel-default, kernel-default-base, dtb-aarch64, kernel-64kb, kernel-debug, kernel-default, kernel-default-base, kernel-docs, kernel-kvmsmall, kernel-obs-build, kernel-obs-qa, kernel-preempt, kernel-source, kernel-syms, kernel-zfcpdump, dtb-aarch64, kernel-preempt

    Summary

    Security update for the Linux Kernel

    Published
    14 Jun 2022