Open Source Vulnerabilities

Use multiple time the one-time coupon in microweber/microweber

rust

CVE-2022-0632 affecting package rust for versions less than 1.75.0-1

mruby, mruby, mruby, mruby, mruby, mruby, mruby

mruby, mruby, mruby, mruby, mruby, mruby, mruby

NULL Pointer Dereference in mruby/mruby

Out-of-bounds Read in mruby/mruby

kernel, kernel, kernel

kernel security update

ceph, ceph, ceph

ceph security update

cfitsio, cfitsio, cfitsio

cfitsio security update

cryptsetup, cryptsetup, cryptsetup

cryptsetup security update

grafana, grafana, grafana

grafana security update

python-django, python-django, python-django

python-django security update

samba, samba, samba

samba security update

Cross-site Scripting (XSS) - Reflected in microweber/microweber

eglibc, syslinux, zabbix, glibc, sssd, syslinux, syslinux-legacy, dietlibc, zabbix, glibc, sssd, syslinux, syslinux-legacy, dietlibc, zabbix, glibc, sssd, syslinux, syslinux-legacy, dietlibc, zabbix, dietlibc, glibc, sssd, syslinux, zabbix, dietlibc, glibc, sssd, syslinux

Unrestricted Upload of File with Dangerous Type in star7th/showdoc

cobbler

cobbler

icu

Heap-buffer-overflow in ucasemap_internalUTF8ToTitle_70

fmt

Heap-buffer-overflow in fmt::v8::detail::big_decimal_fp fmt::v8::detail::write_padded<

github.com/gravitl/netmaker, github.com/gravitl/netmaker

Use of Hard-coded Cryptographic Key in Netmaker

microweber/microweber

Generation of Error Message Containing Sensitive Information in microweber

microweber/microweber

CRLF Injection in microweber

org.eclipse.lemminx:lemminx-parent

Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX

org.eclipse.lemminx:lemminx-parent

Exposure of Sensitive Information to an Unauthorized Actor in LemMinX

org.eclipse.lemminx:lemminx-parent

Path Traversal in LemMinX

object-extend

Prototype Pollution in object-extend

net.mingsoft:ms-mcms

Path traversal in MCMS

net.mingsoft:ms-mcms

File upload leading to RCE in MCMS

ezsystems/ezplatform-kernel

Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel

ezsystems/ezpublish-kernel

Code injection in ezsystems/ezpublish-kernel

net.mingsoft:ms-mcms

Server Side Template Injection in MCMS

net.mingsoft:ms-basic, net.mingsoft:ms-mcms

MCMS Arbitrary File Deletion vulnerability

webkit2gtk, webkit2gtk

webkit2gtk - security update