Open Source Vulnerabilities

t3/dce

DCE extension for Typo3 Discloses Environment Information

tornado

Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)

DotNetCasClient, org.jasig.cas:cas-client, jasig/phpcas

Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability

dompdf/dompdf

DOMPDF Remote Code Execution

dompdf/dompdf

DOMPDF Information Disclosure

dompdf/dompdf

DOMPDF denial of service vulnerability

ansible

Ansible unsafe evaluation of some strings

publify_core

Publify vulnerable to DoS attack

ovirt-engine-sdk-python, ovirt-engine-sdk-python

ovirt-engine-sdk-python improper validation of hostname in x.509 certificate

com.sun.jersey:jersey-core

jersey: XXE via parameter entities

org.keycloak:keycloak-services

JBoss KeyCloak Open Redirect

org.keycloak:keycloak-core

JBoss KeyCloak Cross-site Scripting Vulnerability

openshift-origin-node

openshift-origin-node Improper Input Validation vulnerability

org.keycloak:keycloak-services

JBoss KeyCloak is vulnerable to soft token deletion via CSRF

needrestart, needrestart, needrestart

vim, vim, vim

vim

CVE-2022-1735 affecting package vim for versions less than 8.2.5064-1

vim, vim, vim, vim, vim

Exposure of Private Personal Information to an Unauthorized Actor in Nextcloud Talk

ignition, ignition, ignition

ignition, ignition, ignition, ignition

apport, apport, apport, apport, apport

apport, apport, apport, apport, apport

apport, apport, apport, apport, apport, apport

apport, apport, apport, apport, apport

apport, apport, apport, apport, apport

apport, apport, apport, apport, apport

apport, apport, apport, apport, apport

apport, apport, apport, apport, apport

apport, apport, apport, apport, apport

gimp, gimp, gimp

linux, linux, linux

vim, vim, vim

vim, vim, vim

kernel

CVE-2022-29581 affecting package kernel for versions less than 5.15.86.1-1

vim

CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1