Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2022-27461
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2022-28508
    Fix available
    Packages

    Summary

    Published
    4 May 2022
    SUSE-SU-2022:1536-1
    No fix available
    Packages

    Summary

    Security Beta update for SUSE Manager Salt Bundle

    Published
    4 May 2022
    SUSE-SU-2022:1531-1
    No fix available
    Packages

    Summary

    Security Beta update for SUSE Manager Client Tools

    Published
    4 May 2022
    USN-5402-1
    Fix available
    Packages

    openssl, openssl1.0, openssl, openssl

    Summary

    openssl, openssl1.0 vulnerabilities

    Published
    4 May 2022
    CVE-2022-28076
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2022-28096
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    USN-5400-2
    Fix available
    Packages

    mysql-5.7

    Summary

    mysql-5.7 vulnerabilities

    Published
    4 May 2022
    USN-5401-1
    Fix available
    Packages

    dpdk, dpdk

    Summary

    dpdk vulnerabilities

    Published
    4 May 2022
    CVE-2021-42185
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    SUSE-SU-2022:1524-1
    Fix available
    Packages

    apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon, apache2-mod_auth_mellon

    Summary

    Security update for apache2-mod_auth_mellon

    Published
    4 May 2022
    CVE-2021-42192
    Fix available
    Packages

    Summary

    Published
    4 May 2022
    ALSA-2022:1705
    Fix available
    Packages

    firefox

    Summary

    Important: firefox security update

    Published
    4 May 2022
    RLSA-2022:1705
    Fix available
    Packages

    firefox

    Summary

    Important: firefox security update

    Published
    4 May 2022
    USN-4797-1
    Fix available
    Packages

    libass, libass

    Summary

    libass vulnerabilities

    Published
    4 May 2022
    CVE-2022-1571
    Fix available
    Packages

    Summary

    Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts

    Published
    4 May 2022
    CVE-2022-1555
    Fix available
    Packages

    Summary

    DOM XSS in microweber ver 1.2.15 in microweber/microweber

    Published
    4 May 2022
    SUSE-SU-2022:1516-1
    Fix available
    Packages

    libwmf, libwmf, libwmf, libwmf

    Summary

    Security update for libwmf

    Published
    4 May 2022
    SUSE-SU-2022:1515-1
    Fix available
    Packages

    rubygem-puma, rubygem-puma, rubygem-puma, rubygem-puma, rubygem-puma, rubygem-puma

    Summary

    Security update for rubygem-puma

    Published
    4 May 2022
    SUSE-SU-2022:1514-1
    No fix available
    Packages

    Summary

    Security Beta update for SUSE Manager Salt Bundle

    Published
    4 May 2022
    CVE-2022-1502
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    DEBIAN-CVE-2022-27470
    Fix available
    Packages

    libsdl2-ttf, libsdl2-ttf, libsdl2-ttf

    Summary

    Published
    4 May 2022
    CVE-2022-27420
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    UBUNTU-CVE-2022-27470
    No fix available
    Packages

    libsdl2-ttf, libsdl2-ttf, libsdl2-ttf, libsdl2-ttf, libsdl2-ttf, libsdl2-ttf, libsdl2-ttf

    Summary

    Published
    4 May 2022
    CVE-2022-28055
    Fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2022-27470
    Fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2022-27431
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2021-43164
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2021-43163
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2021-43162
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2021-43161
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2021-43160
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2021-43159
    No fix available
    Packages

    Summary

    Published
    4 May 2022
    CVE-2022-24901
    Fix available
    Packages

    Summary

    Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter

    Published
    4 May 2022
    GHSA-4wrr-9h5r-m92w
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

    Summary

    Apache Struts Remote Java Code Execution

    Published
    4 May 2022
    GHSA-2ppp-xj34-vvf7
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

    Summary

    Apache Struts's CookieInterceptor component does not use the parameter-name whitelist

    Published
    4 May 2022
    GHSA-hmvj-gc9q-mg9p
    Fix available
    Packages

    org.apache.struts.xwork:xwork-core

    Summary

    Apache Struts's DebuggingInterceptor component allows remote code execution in developer mode

    Published
    4 May 2022
    GHSA-hxqq-w4mr-mc62
    Fix available
    Packages

    org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

    Summary

    Apache Struts's ParameterInterceptor component does not prevent access to public constructors

    Published
    4 May 2022
    GHSA-4w4h-8qh9-342x
    Fix available
    Packages

    org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

    Summary

    Jenkins allows Cross-Site Scripting (XSS)

    Published
    4 May 2022
    GHSA-cc55-c9j4-m7cx
    Fix available
    Packages

    org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

    Summary

    Jenkins allows Cross-Site Scripting (XSS)

    Published
    4 May 2022
    GHSA-cqg4-rf29-3mv6
    Fix available
    Packages

    trytond

    Summary

    Trytond allows modification of privileges of arbitrary users

    Published
    4 May 2022
    GHSA-jqx5-h2hw-5q4f
    Fix available
    Packages

    org.apache.poi:poi, org.apache.poi:poi-scratchpad

    Summary

    Denial of Service in Apache POI

    Published
    4 May 2022
    GHSA-vwxc-3cfr-37jq
    No fix available
    Packages

    golismero

    Summary

    GoLismero symlink attack

    Published
    4 May 2022
    GHSA-8h2q-qm9x-55jc
    Fix available
    Packages

    org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

    Summary

    Denial of Service in Apache Tomcat

    Published
    4 May 2022
    OSV-2022-396
    No fix available
    Packages

    libucl

    Summary

    Heap-buffer-overflow in ucl_object_free_internal

    Published
    4 May 2022
    OSV-2022-395
    No fix available
    Packages

    fastjson2

    Summary

    Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

    Published
    4 May 2022
    OSV-2022-394
    Fix available
    Packages

    opencv

    Summary

    Incorrect-function-pointer-type in cv::split

    Published
    4 May 2022
    GHSA-q469-j32f-h7vm
    No fix available
    Packages

    siteserver

    Summary

    RCE in SiteServer CMS

    Published
    4 May 2022
    GHSA-694v-63fq-fmr4
    Fix available
    Packages

    scout-browser

    Summary

    Path Traversal in scout-browser

    Published
    4 May 2022
    GHSA-mfm6-r9g2-q4r7
    Fix available
    Packages

    openssl-src

    Summary

    `OCSP_basic_verify` may incorrectly verify the response signing certificate

    Published
    4 May 2022