Open Source Vulnerabilities

python-pip, python-pip, python-pip, python-pip, python-pip

Security update for python-pip

kernel-livepatch-SLE15-SP3_Update_15

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)

nginx

nginx vulnerability

python-requests, python-requests, python-requests, python-requests

Security update for python-requests

python-paramiko

Security update for python-paramiko

python-paramiko, python-paramiko, python-paramiko, python-paramiko, python-paramiko

Security update for python-paramiko

cifs-utils, cifs-utils, cifs-utils

cifs-utils, cifs-utils, cifs-utils, cifs-utils, cifs-utils, cifs-utils, cifs-utils, cifs-utils, cifs-utils

cifs-utils

CVE-2022-29869 affecting package cifs-utils for versions less than 6.14-2

cifs-utils, cifs-utils, cifs-utils, cifs-utils, cifs-utils

github.com/hashicorp/go-getter

Insertion of Sensitive Information into Log File in Hashicorp go-getter

microweber/microweber

Cross-site Scripting in microweber

Missing Authorization in snipe/snipe-it

golang-1.7

golang-1.7 - security update

golang-1.8

golang-1.8 - security update

actionview, actionview, actionview, actionview

XSS Vulnerability in Action View tag helpers

actionpack, actionpack, actionpack, actionpack

Cross-site Scripting Vulnerability in Action Pack

org.keycloak:keycloak-saml-core

ECP SAML binding bypasses authentication flows

libowasp-esapi-java, libowasp-esapi-java

libowasp-esapi-java, libowasp-esapi-java, libowasp-esapi-java, libowasp-esapi-java

org.owasp.esapi:esapi

Cross-site Scripting in org.owasp.esapi:esapi

org.owasp.esapi:esapi

Path traversal in the OWASP Enterprise Security API

github.com/rancher/rancher, github.com/rancher/rancher

Exposure of SSH credentials in Rancher/Fleet

com.hccake:ballcat-codegen

ballcat-codegen template engine remote code execution injection

redis, redis, redis

redis, redis, redis, redis, redis, redis

redis, redis, redis, redis, redis, redis

redis, redis, redis

compat-lua

CVE-2022-24736 affecting package compat-lua 5.1.5-17

compat-lua

CVE-2022-24735 affecting package compat-lua 5.1.5-17

redis

CVE-2022-24736 affecting package redis for versions less than 6.2.7-1

redis

CVE-2022-24735 affecting package redis for versions less than 6.2.7-1

compat-lua

CVE-2022-24736 affecting package compat-lua 5.1.5-17

compat-lua

CVE-2022-24735 affecting package compat-lua 5.1.5-17

redis, redis, redis, redis, redis

redis, redis, redis, redis, redis

A Malformed Lua script can crash Redis

thunderbird, thunderbird

thunderbird vulnerabilities

Lua scripts can be manipulated to overcome ACL rules in Redis