Open Source Vulnerabilities

com.github.pagehelper:pagehelper

MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter

mantisbt/mantisbt

MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php

microweber/microweber

Cross-site Scripting in Microweber

jquery.json-viewer

Cross-site Scripting in jquery.json-viewer

openjdk-11, openjdk-11

openjdk-11 - security update

dpdk

dpdk - security update

firefox-esr

firefox-esr - security update

Buffer overflow in TCP syslog server (receiver) components in rsyslog

smarty3

smarty3 - security update

rsyslog, rsyslog, rsyslog, rsyslog, rsyslog

squirrel3, squirrel3

squirrel3, squirrel3, squirrel3, squirrel3, squirrel3

python-libnmap, python-libnmap, python-libnmap

python-libnmap

openldap, openldap, openldap

openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap

openldap

CVE-2022-29155 affecting package openldap for versions less than 2.4.57-7

openldap, openldap, openldap, openldap, openldap

,

parse-server, parse-server

Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter

github.com/fluxcd/kustomize-controller, github.com/fluxcd/flux2

Improper path handling in kustomization files allows path traversal

networkd-dispatcher, networkd-dispatcher, networkd-dispatcher

networkd-dispatcher regression

bash, bash-builtins, bash-doc, bash-static

Fix CVE(s): CVE-2019-18276

clamav, clamav, clamav

clamav, clamav

clamav, clamav, clamav

clamav, clamav

clamav, clamav, clamav

clamav, clamav

clamav, clamav, clamav

clamav, clamav