Open Source Vulnerabilities

kgraft-patch-SLE12-SP5_Update_28, kernel-livepatch-SLE15_Update_24, kernel-livepatch-SLE15_Update_28, kernel-livepatch-SLE15_Update_24, kernel-livepatch-SLE15_Update_28

Security update for the Linux Kernel (Live Patch 28 for SLE 15)

kernel-livepatch-SLE15-SP1_Update_25, kernel-livepatch-SLE15-SP1_Update_26, kernel-livepatch-SLE15-SP1_Update_25, kernel-livepatch-SLE15-SP1_Update_26

Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1)

Stored XSS in Tooltip in pimcore/pimcore

kernel-default, kernel-livepatch-SLE15-SP2_Update_26, kernel-default, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms

Security update for the Linux Kernel

Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads

ghostscript, ghostscript, ghostscript

kernel-default, kernel-default, kgraft-patch-SLE12-SP5_Update_30, kernel-docs, kernel-obs-build, kernel-default, kernel-source, kernel-syms, kernel-default, kernel-source, kernel-syms, kernel-default

Security update for the Linux Kernel

kernel-livepatch-SLE15-SP2_Update_18, kernel-livepatch-SLE15-SP2_Update_20, kernel-livepatch-SLE15-SP2_Update_18, kernel-livepatch-SLE15-SP2_Update_20

Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP2)

kernel-livepatch-SLE15-SP1_Update_24

Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1)

opensc

Heap-buffer-overflow in sc_pkcs15init_delete_by_path

ndpi

Heap-buffer-overflow in krb_parse

froxlor/froxlor

HTML Injection in Froxlor

pimcore/pimcore

SQL Injection in Pimcore

mantisbt/mantisbt

MantisBT vulnerable to XSS due to improper escape in manage_plugin_page.php and manage_plugin_uninstall.php

github.com/mattermost/mattermost-server/v6

Resource exhaustion in Mattermost

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v5

Improper Privilege Management in Mattermost

apache-superset

SQL injection in apache-superset

clamav

Heap-buffer-overflow in cli_ac_addsig

ghostscript

Heap-use-after-free in gc_trace

linux, linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-hwe-edge, linux-kvm, linux-oracle, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-azure-fde-5.15, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gkeop, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-ibm, linux-intel-5.13, linux-iot, linux-kvm, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-xilinx-zynqmp, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

python-django

python-django - security update

vyper

zlib

Security update for zlib

Improper Input Validation in GeoServer

Integer bounds error in Vyper

composer, composer, composer

composer, composer, composer, composer

Path Traversal in github.com/flipped-aurora/gin-vue-admin

SQL Injection in github.com/flipped-aurora/gin-vue-admin

Missing input validation can lead to command execution in composer

Unchecked JNDI lookups in GeoTools

Improper Control of Generation of Code in jai-ext

kgraft-patch-SLE12-SP5_Update_29

Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP5)

glibc, libxcrypt, openssl-1_1, zlib

Security update for openssl-1_1

apache-superset

vyper

haskell-aeson, haskell-aeson, haskell-aeson, haskell-aeson

SQL injection vulnerability in chart data API

kgraft-patch-SLE12-SP5_Update_17, kgraft-patch-SLE12-SP5_Update_21, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_27, kgraft-patch-SLE12-SP5_Update_17, kgraft-patch-SLE12-SP5_Update_21, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_27, kgraft-patch-SLE12-SP5_Update_17, kgraft-patch-SLE12-SP5_Update_21, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_27, kgraft-patch-SLE12-SP5_Update_17, kgraft-patch-SLE12-SP5_Update_21, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_27, kgraft-patch-SLE12-SP5_Update_17, kgraft-patch-SLE12-SP5_Update_21, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_27, kgraft-patch-SLE12-SP5_Update_17, kgraft-patch-SLE12-SP5_Update_21, kgraft-patch-SLE12-SP5_Update_22, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_27

Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP5)

Buffer overflow in Vyper

Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in causefx/organizr