Open Source Vulnerabilities

Cross-site Scripting (XSS) - Stored in nocodb/nocodb

openssl-1_1, openssl-1_1, openssl-1_1, openssl-1_1, openssl-1_1, openssl-1_1

Security update for openssl-1_1

libzmq

Segv on unknown address

strapi

Cross-site Scripting in Strapi

francoisjacquet/rosariosis

SQL Injection in RosarioSIS

nocodb

Insufficient Session Expiration in NocoDB

dolibarr/dolibarr

Cross site scripting in dolibarr

facturascripts/facturascripts

Cross-site Scripting in FacturaScripts

nocodb

Improper Privilege Management in NocoDB

facturascripts/facturascripts

Cross site scripting in facturascripts

nocodb

NocoDB information disclosure vulnerability

org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common

Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2

exo, exo, exo

exo, exo, exo, exo, exo, exo, exo, exo

Electron's AutoUpdater module fails to validate certain nested components of the bundle

Exposure of Resource to Wrong Sphere in Electron

kernel-linus

Updated kernel-linus packages fix security vulnerabilities

kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

apache

Updated apache packages fix security vulnerability

docker-containerd

Updated docker-containerd packages fix security vulnerability

php-smarty

Updated php-smarty packages fix security vulnerability

nats-server

Updated nats-server packages fix security vulnerability

Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events

, , ,

Signature forgery in Biscuit