Open Source Vulnerabilities

github.com/prometheus/prometheus, github.com/prometheus/prometheus

Arbitrary redirects under /new endpoint

org.wildfly.security:wildfly-elytron

Session Fixation in WildFly Elytron

org.wildfly.security:wildfly-elytron

Incorrect Authorization in WildFly Elytron

org.wildfly:wildfly-parent

Wildfly logs plaintext passwords

xerces:xercesImpl

Improper Input Validation in Xerces

github.com/docker/docker

Symlink Attack in Libcontainer and Docker Engine

github.com/opencontainers/umoci

Improper input validation in umoci

mercurial

Mercurial Path Traversal/Link Following vulnerability

github.com/github/hub, hub

Hub Package Arbitrary File Overwrite

github.com/nats-io/jwt, github.com/nats-io/jwt/v2

nats-io/jwt not enforcing checking of Import token permissions

github.com/docker/docker

Directory Traversal in Docker

github.com/docker/docker

Arbitrary Code Execution in Docker

github.com/docker/docker

Privilege Escalation in Docker

github.com/go-gitea/gitea

Denial of Service in Gitea

github.com/deislabs/oras

Zip slip directory exploit in github.com/deislabs/oras

github.com/git-lfs/git-lfs

Git LFS can execute a Git binary from the current directory on Windows

github.com/go-vela/compiler

Exposure of server configuration in github.com/go-vela/server

impresscms/impresscms

Path Traversal in ImpressCMS

librenms/librenms

Cross-site Scripting in librenms

librenms/librenms

Cross-site Scripting in librenms

pimcore/pimcore

Cross-site Scripting in pimcore

snipe/snipe-it

Exposure of Sensitive Information in snipe/snipe-it

github.com/hashicorp/nomad, github.com/hashicorp/nomad, github.com/hashicorp/nomad

HashiCorp Nomad Artifact Download Race Condition

url-parse

Authorization bypass in url-parse

galois_2p8

Buffer Overflow in galois_2p8

snipe/snipe-it

Improper Privilege Management in Snipe-IT

unicorn

UNKNOWN WRITE

Uncontrolled Resource Consumption in promhttp

h2database

h2database - security update

libxstream-java

libxstream-java - security update

expat, coin3, xmlrpc-c, expat, coin3, insighttoolkit, libxmltok, swish-e, ayttm, cableswig, insighttoolkit4, matanza, xmlrpc-c, expat, coin3, libxmltok, matanza, swish-e, xmlrpc-c, expat, libxmltok, matanza, swish-e, wbxml2, xmlrpc-c, firefox, matanza, thunderbird, libxmltok, swish-e, xmlrpc-c, libxmltok, matanza, thunderbird, swish-e, xmlrpc-c, matanza, swish-e, thunderbird, matanza, thunderbird, swish-e

expat, coin3, xmlrpc-c, expat, coin3, insighttoolkit, libxmltok, swish-e, ayttm, cableswig, insighttoolkit4, matanza, xmlrpc-c, expat, coin3, libxmltok, matanza, swish-e, tdom, xmlrpc-c, expat, libxmltok, matanza, swish-e, xmlrpc-c, firefox, matanza, thunderbird, libxmltok, swish-e, xmlrpc-c, libxmltok, matanza, thunderbird, swish-e, xmlrpc-c, matanza, swish-e, thunderbird, matanza, thunderbird, swish-e

Improper Validation of Specified Quantity in Input in microweber/microweber

h2database, h2database

h2database - security update

librecad, librecad

librecad - security update

Incorrect Authorization in librenms/librenms

enshrined/svg-sanitize

Cross-site Scripting in enshrined/svg-sanitize

github.com/cloudflare/cfrpki

Path traversal in github.com/cloudflare/cfrpki/cmd/octorpki

nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx

wireshark, wireshark, wireshark

wireshark, wireshark, wireshark

wireshark

CVE-2022-0583 affecting package wireshark for versions less than 3.4.14-1

wireshark

CVE-2022-0586 affecting package wireshark for versions less than 3.4.14-1

wireshark, wireshark, wireshark

wireshark, wireshark, wireshark