Open Source Vulnerabilities

microweber/microweber

Business Logic Errors in microweber

url-parse

Authorization Bypass Through User-Controlled Key in url-parse

cobbler

Incorrect Default Permissions in Cobbler

org.alluxio:alluxio-core-common

Command injection in Alluxio

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

NULL Pointer Dereference in vim/vim

linux, linux, linux

kernel

CVE-2022-25375 affecting package kernel for versions less than 5.15.26.1-1

linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

Openmct XSS via the “Summary Widget”

Openmct XSS via the “Condition Widget”

Openmct XSS via the “Web Page” element

cobbler

cobbler

cobbler

opera

Security update for opera

Business Logic Errors in microweber/microweber

node-url-parse, node-url-parse, node-url-parse

node-url-parse, node-url-parse, node-url-parse

sphinx

Security update for sphinx

jawn

Security update for jaw

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-0685 affecting package vim for versions less than 8.2.4743-1

vim, vim, vim, vim, vim

cobbler

Command Injection in Cobbler

microweber/microweber

Cross-site Scripting in microweber

showdoc/showdoc

Unrestricted Upload of File with Dangerous Type in showdoc

kitodo/presentation, kitodo/presentation, kitodo/presentation

SSRF in Kitodo.Presentation

microweber/microweber

Business Logic Errors in microweber

microweber/microweber

Cross-site Scripting in microweber

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Use of Out-of-range Pointer Offset in vim/vim

libsixel, libsixel, libsixel

libsixel, libsixel, libsixel, libsixel, libsixel, libsixel, libsixel

duck, duck, duck

duck

Cross-site Scripting (XSS) - Reflected in microweber/microweber