Open Source Vulnerabilities

admesh

Out-of-bounds read in admesh

libredwg

Heap-use-after-free in dwg_add_handleref

marcador

Code-execution backdoor in marcador

qemu

qemu - security update

kicad

kicad - security update

Heap buffer overflow in vim_strncpy find_word in vim/vim

imagemagick, imagemagick, imagemagick

imagemagick, imagemagick, imagemagick, imagemagick, imagemagick

marcador

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-1620 affecting package vim for versions less than 8.2.4925-1

vim, vim, vim, vim, vim

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-1619 affecting package vim for versions less than 8.2.4925-1

vim, vim, vim, vim, vim

ruby-nokogiri

Updated ruby-nokogiri packages fix security vulnerability

rsyslog

Updated rsyslog packages fix security vulnerability

admesh, admesh, admesh

admesh

admesh, admesh, admesh, admesh, admesh, admesh, admesh

harfbuzz

UNKNOWN READ in OT::gvar::subset

libredwg

Heap-double-free in dwg_free_XRECORD_private

ecdsautils, ecdsautils

ecdsautils - security update

,

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim

Heap-based Buffer Overflow in function cmdline_erase_chars in vim/vim

vim, vim, vim

vim

CVE-2022-1616 affecting package vim for versions less than 8.2.4925-1

CVE-2022-1616 does not affect BellSoft software

vim, vim, vim, vim, vim

Charm vulnerable to server-side request forgery (SSRF)

k8s.io/ingress-nginx

Improper Input Validation in k8s.io/ingress-nginx

com.twelvemonkeys.imageio:imageio-metadata

External Entity Reference in TwelveMonkeys ImageIO

topthink/framework

Deserialization of Untrusted Data in topthink/framework

bignum

Uncaught Exception in bignum

libredwg

Heap-buffer-overflow in json_common_entity_data

Use after free in append_command in vim/vim

ecdsautils

ecdsautils - security update

thunderbird, thunderbird, thunderbird

clamav, clamav, clamav, clamav, clamav

thunderbird, thunderbird, thunderbird

firefox, firefox