Open Source Vulnerabilities

kgraft-patch-SLE12-SP4_Update_21, kgraft-patch-SLE12-SP4_Update_22, kgraft-patch-SLE12-SP4_Update_23, kgraft-patch-SLE12-SP4_Update_21, kgraft-patch-SLE12-SP4_Update_22, kgraft-patch-SLE12-SP4_Update_23, kgraft-patch-SLE12-SP4_Update_21, kgraft-patch-SLE12-SP4_Update_22, kgraft-patch-SLE12-SP4_Update_23

Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP4)

xz-utils, xz-utils

xz-utils vulnerability

gzip, gzip

gzip vulnerability

rmp-serde

`rmp-serde` `Raw` and `RawRef` unsound

MozillaThunderbird, MozillaThunderbird, MozillaThunderbird, MozillaThunderbird

Security update for MozillaThunderbird

SQL injection in ElementController.php in pimcore/pimcore

linux, linux, linux

kernel

CVE-2022-29156 affecting package kernel for versions less than 5.15.37.1-2

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.13, linux-azure-5.13, linux-gcp-5.13, linux-hwe-5.13, linux-intel-iotg-5.15, linux-oem-5.14, linux-oracle-5.13, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8

linux-bluefield

linux-bluefield vulnerabilities

django, django, django

SQL Injection in Django

npm-dependency-versions

Command injection in npm-dependency-versions

django, django, django

SQL Injection in Django

nconf

Prototype Pollution in nconf

org.apache.struts:struts2-core

Expression Language Injection in Apache Struts

strapi

Unrestricted Upload of File with Dangerous Type in Strapi

buttercms

Unrestricted Upload of File with Dangerous Type in ButterCMS

ghost

Arbitrary file upload in Ghost

express-fileupload

Express-FileUpload Arbitrary File Overwrite

ghost

Arbitrary file upload in Ghost

payload

Unrestricted Upload of File with Dangerous Type in Payload

com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger

Stored Cross-site Scripting vulnerability in Jenkins Gerrit Trigger Plugin

org.jenkins-ci.plugins:cvs

Stored XSS in Jenkins CVS Plugin

org.jenkins-ci.plugins:extended-choice-parameter

Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin

org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials

Cross-site Scripting in Jenkins Credentials Plugin

org.jenkins-ci.plugins:jobgenerator

Stored Cross-site Scripting vulnerability in Jenkins Job Generator Plugin

org.jenkins-ci.tools:git-parameter

Stored XSS vulnerability in Jenkins Git Parameter Plugin

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib, org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

org.jenkins-ci.plugins:jira, org.jenkins-ci.plugins:jira

Stored Cross-site Scripting vulnerability in Jenkins Jira Plugin

org.jenkins-ci.plugins:mask-passwords

Stored Cross-site Scripting in Jenkins Mask Passwords Plugin

org.jenkins-ci.plugins:subversion

Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin

grunt

Path Traversal in Grunt

org.jenkins-ci.plugins:publish-over-ftp

Missing permission checks in Jenkins Publish Over FTP Plugin

org.jenkins-ci.plugins:publish-over-ftp

CSRF vulnerability in Jenkins Publish Over FTP Plugin

fullpage.js

Cross-site Scripting in fullpage.js

org.jenkins-ci.plugins:promoted-builds, org.jenkins-ci.plugins:promoted-builds

Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL

org.jenkins-ci.plugins:subversion

CSRF vulnerability in Jenkins Subversion Plugin

org.jenkins-ci.plugins:nodelabelparameter

Stored Cross-site Scripting in Jenkins Node and Label parameter Plugin