Open Source Vulnerabilities

,

Adobe Consulting Services Reflected Cross-Site Scripting Arbitrary Code Execution

Cross Site Scripting in GLPI

Cross site scripting via SVG file upload in GLPI

LDAP password exposure in glpi

Stored Cross-site Scripting in Combodo iTop

Improper Restriction of XML External Entity Reference in detekt/detekt

swtpm, swtpm, swtpm

Security update for swtpm

openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg

Security update for openjpeg

Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

javapackages-tools, tomcat, javapackages-tools, tomcat

Security update for tomcat

python-aiohttp, python-aiohttp

python-aiohttp vulnerability

tomcat, tomcat, tomcat, tomcat, tomcat, tomcat

Security update for tomcat

tomcat, tomcat, tomcat, tomcat

Security update for tomcat

dnsmasq

Security update for dnsmasq

dnsmasq

Security update for dnsmasq

dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq, dnsmasq

Security update for dnsmasq

dnsmasq, dnsmasq, dnsmasq, dnsmasq

Security update for dnsmasq

vim, vim, vim

vim

CVE-2022-1420 affecting package vim for versions less than 8.2.4925-1

CVE-2022-1420 does not affect BellSoft software

mongodb, mongodb, mongodb, mongodb

vim, vim

MongoDB Server (mongod) may crash in response to unexpected requests

linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-oracle, linux-snapdragon

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, inux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities

libpam-tacplus, libpam-tacplus, libpam-tacplus, libpam-tacplus

typo3/cms-core, typo3/cms-core, typo3/cms-core

TYPO3 is vulnerable to Information Disclosure in the HTML mailing API

typo3/cms-fluid, typo3/cms-fluid

TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper

typo3/cms-frontend, typo3/cms-frontend

TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function

typo3/cms-frontend, typo3/cms-frontend, typo3/cms-frontend, typo3/cms-frontend

TYPO3 is vulnerable to Spam Abuse in the native form content element

typo3/cms-backend, typo3/cms-backend, typo3/cms-backend, typo3/cms-backend

TYPO3 is vulnerable to Information Disclosure on the backend

typo3/cms-install, typo3/cms-install, typo3/cms-install, typo3/cms-install

TYPO3 is vulnerable to Insecure randomness in uniqid function

typo3/cms-install, typo3/cms-install, typo3/cms-install, typo3/cms-install

TYPO3 is vulnerable to Session Fixation