Open Source Vulnerabilities

Pinot segment push endpoint has a vulnerability in unprotected environments

radare2, radare2, radare2, radare2, radare2, radare2

Cross-site Scripting in Combodo iTop

craftcms/cms

XSS Injection Vulnerability

directus

Insecure default value for CORS configuration

Code Injection in Combodo iTop

directus

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus

heap-buffer-overflow in radareorg/radare2

pocketmine/bedrock-protocol

Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown

notebook

Sensitive Auth & Cookie data stored in Jupyter server logs

chromium-browser-stable

Updated chromium-browser-stable packages fix security vulnerability

memcached, memcached, memcached, memcached, memcached, memcached, memcached, memcached, memcached

memcached

CVE-2022-26635 affecting package memcached for versions less than 1.6.22-1

burp, burp, r-cran-jsonlite, r-cran-jsonlite, r-cran-jsonlite, ruby-yajl, ruby-yajl, ruby-yajl, yajl, yajl, yajl

rubygem-yajl-ruby

CVE-2022-24795 affecting package rubygem-yajl-ruby for versions less than 1.4.3-1

rubygem-yajl-ruby

CVE-2022-24795 affecting package rubygem-yajl-ruby for versions less than 1.3.1-2

,

,