Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-9vxq-mxw5-mcgp
    Fix available
    Packages

    typo3/cms, typo3/cms, typo3/cms

    Summary

    Typo3 Arbitrary File Delete

    Published
    22 Apr 2022
    GHSA-h86g-796f-hhfq
    Fix available
    Packages

    typo3/cms, typo3/cms, typo3/cms

    Summary

    Typo3 XSS Vulnerabilities

    Published
    22 Apr 2022
    GHSA-q22w-r5qq-v3wf
    Fix available
    Packages

    typo3/cms, typo3/cms, typo3/cms

    Summary

    Typo3 XSS in RemoveXSS function

    Published
    22 Apr 2022
    GHSA-qf79-34j4-54m6
    Fix available
    Packages

    typo3/cms, typo3/cms

    Summary

    Typo3 Improper Access Control

    Published
    22 Apr 2022
    GHSA-rwx5-7x5r-jgrm
    Fix available
    Packages

    typo3/cms

    Summary

    Typo3 Information Disclosure

    Published
    22 Apr 2022
    GHSA-5fj7-f8x3-q2mc
    Fix available
    Packages

    simplesamlphp/simplesamlphp

    Summary

    simpleSAMLphp incorrectly handles XML encryption

    Published
    22 Apr 2022
    GHSA-frf4-5p2c-c3ff
    Fix available
    Packages

    typo3/cms, typo3/cms, typo3/cms

    Summary

    Typo3 Information Disclosure

    Published
    22 Apr 2022
    GHSA-j68f-8h6p-9h5q
    Fix available
    Packages

    org.apache.struts:struts2-core

    Summary

    Struts ParameterInterceptor vulnerability allows remote command execution

    Published
    22 Apr 2022
    GHSA-hqfx-4x4w-vmwp
    Fix available
    Packages

    nova

    Summary

    Openstack nova qcow format could expose host filesystem information

    Published
    22 Apr 2022
    GHSA-2cfc-865j-gm4w
    Fix available
    Packages

    io.gitlab.arturbosch.detekt:detekt-core

    Summary

    XML External Entity Reference in detekt

    Published
    22 Apr 2022
    GHSA-qf9q-q4hh-qph3
    Fix available
    Packages

    blazer

    Summary

    SQL injection in blazer

    Published
    22 Apr 2022
    GHSA-c2cp-3xj9-97w9
    Fix available
    Packages

    org.springframework.security.oauth:spring-security-oauth2, org.springframework.security.oauth:spring-security-oauth2

    Summary

    Denial of service in Spring Security OAuth2

    Published
    22 Apr 2022
    CVE-2022-27406
    Fix available
    Packages

    ,

    Summary

    Published
    22 Apr 2022
    CVE-2022-27405
    Fix available
    Packages

    ,

    Summary

    Published
    22 Apr 2022
    CVE-2022-27404
    Fix available
    Packages

    ,

    Summary

    Published
    22 Apr 2022
    DEBIAN-CVE-2022-28367
    Fix available
    Packages

    libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java

    Summary

    Published
    21 Apr 2022
    DEBIAN-CVE-2022-28366
    Fix available
    Packages

    libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java

    Summary

    Published
    21 Apr 2022
    UBUNTU-CVE-2022-29577
    No fix available
    Packages

    libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java

    Summary

    Published
    21 Apr 2022
    UBUNTU-CVE-2022-28367
    No fix available
    Packages

    libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java

    Summary

    Published
    21 Apr 2022
    UBUNTU-CVE-2022-28366
    No fix available
    Packages

    libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java, libowasp-antisamy-java

    Summary

    Published
    21 Apr 2022
    CVE-2022-29577
    Fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28367
    Fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28366
    Fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CLSA-2022-1650576075
    Fix available
    Packages

    kernel, kernel-debug, kernel-debug-devel, kernel-devel, kernel-firmware, kernel-headers, perf, python-perf

    Summary

    Fix of 13 CVEs

    Published
    21 Apr 2022
    CLSA-2022-1650576008
    Fix available
    Packages

    els-define

    Summary

    Update of els-define

    Published
    21 Apr 2022
    CLSA-2022-1650575983
    Fix available
    Packages

    xterm

    Summary

    Fix of CVE: CVE-2021-27135

    Published
    21 Apr 2022
    CLSA-2022-1650575956
    Fix available
    Packages

    squid

    Summary

    Fix of CVE: CVE-2021-28651

    Published
    21 Apr 2022
    CLSA-2022-1650575892
    Fix available
    Packages

    php, php-bcmath, php-cli, php-common, php-dba, php-devel, php-embedded, php-enchant, php-fpm, php-gd, php-imap, php-intl, php-ldap, php-mbstring, php-mysql, php-odbc, php-pdo, php-pgsql, php-process, php-pspell, php-recode, php-snmp, php-soap, php-tidy, php-xml, php-xmlrpc, php-zts

    Summary

    Update of php 5.3: Remove mariadb102 patch to eliminate faulty functionality

    Published
    21 Apr 2022
    CLSA-2022-1650575725
    Fix available
    Packages

    php, php-bcmath, php-cli, php-common, php-dba, php-devel, php-embedded, php-enchant, php-fpm, php-gd, php-imap, php-intl, php-ldap, php-mbstring, php-mysql, php-odbc, php-pdo, php-pgsql, php-process, php-pspell, php-recode, php-snmp, php-soap, php-tidy, php-xml, php-xmlrpc, php-zts

    Summary

    Update of php 5.3: Fix segfault during graceful Apache restart

    Published
    21 Apr 2022
    CVE-2022-26856
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-24424
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-24423
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-22558
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28444
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28443
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28440
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28439
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28438
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28437
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28436
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28435
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28434
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28433
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28432
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28431
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28429
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28427
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28426
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28425
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022
    CVE-2022-28424
    No fix available
    Packages

    Summary

    Published
    21 Apr 2022