Open Source Vulnerabilities

linux, linux, linux

Stored XSS viva .svg file upload in causefx/organizr

Multiple Stored XSS in causefx/organizr

Stored XSS due to no sanitization in the filename in causefx/organizr

Restricted custom admin role can bypass the restrictions and view the server logs and server config.json file contents

A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service

OOM DoS in Mattermost image proxy

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fix of CVE: CVE-2022-1154

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVE-2022-1154 in vim

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2022-1154

linux-buildinfo-4.4.0-215-tuxcare.els5-generic, linux-buildinfo-4.4.0-215-tuxcare.els5-lowlatency, linux-cloud-tools-4.4.0-215-tuxcare.els5, linux-cloud-tools-4.4.0-215-tuxcare.els5-generic, linux-cloud-tools-4.4.0-215-tuxcare.els5-lowlatency, linux-cloud-tools-common, linux-doc, linux-headers-4.4.0-215-tuxcare.els5, linux-headers-4.4.0-215-tuxcare.els5-generic, linux-headers-4.4.0-215-tuxcare.els5-lowlatency, linux-image-unsigned-4.4.0-215-tuxcare.els5-generic, linux-image-unsigned-4.4.0-215-tuxcare.els5-lowlatency, linux-libc-dev, linux-modules-4.4.0-215-tuxcare.els5-generic, linux-modules-4.4.0-215-tuxcare.els5-lowlatency, linux-modules-extra-4.4.0-215-tuxcare.els5-generic, linux-source-4.4.0, linux-tools-4.4.0-215-tuxcare.els5, linux-tools-4.4.0-215-tuxcare.els5-generic, linux-tools-4.4.0-215-tuxcare.els5-lowlatency, linux-tools-common, linux-tools-host

Fix CVE(s): CVE-2022-28388

Access control check in Elementor WordPress plugin version =<3.6.2

pypy3, pypy3, pypy3

python3, python3, python3, python3, python3, python3, python3, python3

docbook5-style-xsl

CVE-2015-20107 affecting package docbook5-style-xsl 1.79.2-11

python3

CVE-2015-20107 affecting package python3 for versions less than 3.9.13-5

python2.7, python3.4, python3.5, python2.7, python3.5, python2.7, python3.6, python3.7, python3.8, python2.7, python3.8, python3.9, python2.7, python3.10

subversion

Updated subversion packages fix security vulnerability

webkit2

Updated webkit2 packages fix security vulnerability

ceph

Updated ceph packages fix security vulnerability

gzip, gzip

gzip vulnerability

yaml-cpp

Security update for yaml-cpp

cyrus-sasl

Security update for cyrus-sasl

netatalk, netatalk

Security update for netatalk

kernel-64kb, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP3_Update_17, kernel-default, kernel-default, kernel-preempt, kernel-default, kernel-default-base, kernel-default, kernel-default-base, dtb-aarch64, kernel-64kb, kernel-debug, kernel-default, kernel-default-base, kernel-docs, kernel-kvmsmall, kernel-obs-build, kernel-obs-qa, kernel-preempt, kernel-source, kernel-syms, kernel-zfcpdump

Security update for the Linux Kernel

xz-utils, xz-utils

xz-utils vulnerability