Open Source Vulnerabilities

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-0729 affecting package vim for versions less than 8.2.4743-1

vim, vim, vim, vim, vim

MozillaThunderbird

Security update for MozillaThunderbird

MozillaThunderbird

Security update for MozillaThunderbird

cyrus-sasl-openssl1, cyrus-sasl, cyrus-sasl-saslauthd, cyrus-sasl, cyrus-sasl-saslauthd

Security update for cyrus-sasl

cyrus-sasl, cyrus-sasl-devel, cyrus-sasl-gs2, cyrus-sasl-gssapi, cyrus-sasl-ldap, cyrus-sasl-lib, cyrus-sasl-md5, cyrus-sasl-ntlm, cyrus-sasl-plain, cyrus-sasl-scram, cyrus-sasl-sql

Important: cyrus-sasl security update

cyrus-sasl

Important: cyrus-sasl security update

Improper Access Control in chocobozzz/peertube

Risk in WISP version general

WISP

Risk in WISP version general

Insecure Storage of Sensitive Information in microweber/microweber

Insertion of Sensitive Information Into Debugging Code in microweber/microweber

Cross-site Scripting (XSS) - Reflected in microweber/microweber

mlflow

Insecure Temporary File in mlflow/mlflow

mruby, mruby, mruby, mruby, mruby, mruby, mruby

Out-of-bounds Read in mruby/mruby

Multiple vulnerabilities in NFT version All

ndpi

Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers

pimcore/pimcore

Path traversal in pimcore

opencv

Incorrect-function-pointer-type in cv::split

mysql-server

Heap-use-after-free in Segment::write

thunderbird, thunderbird

thunderbird - security update

Use of Out-of-range Pointer Offset in vim/vim

Missing Authorization in chocobozzz/peertube

Exposure of Sensitive Information to an Unauthorized Actor in fgribreau/node-request-retry

Directory Traversal in OpenMRS Startup Filter

linux-oem-5.14

linux-oem-5.14 vulnerabilities

Incorrect handling of internal redirects results in crash in Envoy

Incorrect configuration handling allows TLS session re-use without re-validation in Envoy

X.509 Extended Key Usage and Trust Purposes bypass in Envoy

X.509 subjectAltName matching bypass in Envoy

Crash when a cluster is deleted in Envoy

Unauthenticated control plane denial of service attack in Istio

CefSharp.Common, CefSharp.OffScreen, CefSharp.WinForms, CefSharp.Wpf, CefSharp.Wpf.HwndHost, CefSharp.Common.NETCore, CefSharp.OffScreen.NETCore, CefSharp.WinForms.NETCore, CefSharp.Wpf.NETCore

Use after free in Animation

cyrus-sasl2, cyrus-sasl2

cyrus-sasl2 vulnerability

htmldoc

Updated htmldoc packages fix security vulnerability

php7.0

php7.0 vulnerabilities

expat

Updated expat packages fix security vulnerability

polkit

Updated polkit packages fix security vulnerability

varnish

Updated varnish packages fix security vulnerability

cpanminus

Updated cpanminus packages fix security vulnerability