Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-mv26-cx23-vrfg
    Fix available
    Packages

    @peertube/embed-api

    Summary

    Server-Side Request Forgery in @peertube/embed-api

    Published
    9 Feb 2022
    GHSA-xxq4-3742-3h28
    No fix available
    Packages

    microweber/microweber

    Summary

    Generation of Error Message Containing Sensitive Information in microweber

    Published
    9 Feb 2022
    GHSA-cg3h-rc9q-g8v9
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Cross-site Scripting in pimcore

    Published
    9 Feb 2022
    GHSA-4wp3-8q92-mh8w
    Fix available
    Packages

    github.com/go-gitea/gitea

    Summary

    Cross Site Request Forgery in Gitea

    Published
    9 Feb 2022
    GHSA-8478-53pv-jxvm
    Fix available
    Packages

    joplin

    Summary

    Joplin Vulnerable to Code Injection

    Published
    9 Feb 2022
    GHSA-8h8p-x289-vvqr
    Fix available
    Packages

    github.com/go-gitea/gitea

    Summary

    Gitea displaying raw OpenID error in UI

    Published
    9 Feb 2022
    GHSA-jrpg-35hw-m4p9
    Fix available
    Packages

    github.com/go-gitea/gitea

    Summary

    Capture-replay in Gitea

    Published
    9 Feb 2022
    GHSA-36h2-95gj-w488
    Fix available
    Packages

    github.com/go-gitea/gitea

    Summary

    Open redirect in Gitea

    Published
    9 Feb 2022
    GHSA-mxh3-2699-98g9
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Cross-site Scripting pimcore

    Published
    9 Feb 2022
    GHSA-x3rq-r3cm-5vc4
    Fix available
    Packages

    publify_core

    Summary

    Publify Business Logic Errors

    Published
    9 Feb 2022
    OSV-2022-129
    Fix available
    Packages

    libredwg

    Summary

    Heap-buffer-overflow in dwg_free_HATCH_private

    Published
    9 Feb 2022
    DSA-5069-1
    Fix available
    Packages

    firefox-esr, firefox-esr

    Summary

    firefox-esr - security update

    Published
    9 Feb 2022
    DLA-2916-1
    Fix available
    Packages

    firefox-esr

    Summary

    firefox-esr - security update

    Published
    9 Feb 2022
    DLA-2915-1
    Fix available
    Packages

    connman

    Summary

    connman - security update

    Published
    9 Feb 2022
    CVE-2022-0391
    Fix available
    Packages

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, mozjs52, mozjs38, firefox, mozjs68, mozjs52, firefox, mozjs78

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, firefox, mozjs78, thunderbird

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, firefox, firefox

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, firefox, mozjs78, thunderbird

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, firefox, firefox

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, firefox, mozjs78, thunderbird

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, firefox, mozjs78, thunderbird

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, firefox, mozjs78, thunderbird

    Summary

    Published
    9 Feb 2022
    Packages

    thunderbird, mozjs52, mozjs38, thunderbird, mozjs68, mozjs52, mozjs78, thunderbird

    Summary

    Published
    9 Feb 2022
    Packages

    firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, firefox, mozjs78, thunderbird

    Summary

    Published
    9 Feb 2022
    PSF-2022-8
    Fix available
    Packages

    Summary

    urllib.parse should sanitize urls containing ASCII newline and tabs.

    Published
    9 Feb 2022
    CVE-2021-45919
    No fix available
    Packages

    Summary

    Published
    8 Feb 2022
    CVE-2021-45329
    Fix available
    Packages

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2021-45329
    No fix available
    Packages

    golang-code.gitea-git, golang-code.gitea-sdk, golang-code.gitea-git, golang-code.gitea-sdk, golang-code.gitea-git, golang-code.gitea-sdk

    Summary

    Published
    8 Feb 2022
    CVE-2022-23627
    Fix available
    Packages

    Summary

    Inadequate access verification when using proxy commands in ArchiSteamFarm

    Published
    8 Feb 2022
    USN-5159-1
    Fix available
    Packages

    node-bl

    Summary

    node-bl vulnerability

    Published
    8 Feb 2022
    GHSA-m7jv-hq7h-mq7c
    Fix available
    Packages

    org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat:tomcat-websocket, org.apache.tomcat:tomcat-websocket, org.apache.tomcat:tomcat-websocket, org.apache.tomcat:tomcat-websocket

    Summary

    Infinite Loop in Apache Tomcat

    Published
    8 Feb 2022
    GHSA-vf77-8h7g-gghp
    Fix available
    Packages

    org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote

    Summary

    Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

    Published
    8 Feb 2022
    CVE-2022-0524
    Fix available
    Packages

    Summary

    Business Logic Errors in publify/publify

    Published
    8 Feb 2022
    CVE-2022-23626
    Fix available
    Packages

    Summary

    Insufficient file checks in m1k1o/blog

    Published
    8 Feb 2022
    GHSA-j9wf-vvm6-4r9w
    No fix available
    Packages

    k8s.io/kubernetes

    Summary

    Unverified Ownership in Kubernetes

    Published
    8 Feb 2022
    USN-4987-2
    Fix available
    Packages

    libimage-exiftool-perl

    Summary

    libimage-exiftool-perl vulnerability

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-21713
    No fix available
    Packages

    grafana

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-21703
    No fix available
    Packages

    grafana

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-0523
    No fix available
    Packages

    radare2, radare2, radare2, radare2, radare2, radare2

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-0522
    No fix available
    Packages

    radare2, radare2, radare2, radare2, radare2, radare2

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-0521
    No fix available
    Packages

    radare2, radare2, radare2, radare2, radare2, radare2

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-0520
    No fix available
    Packages

    radare2, radare2, radare2, radare2, radare2, radare2

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-0519
    No fix available
    Packages

    radare2, radare2, radare2, radare2, radare2, radare2

    Summary

    Published
    8 Feb 2022
    UBUNTU-CVE-2022-0518
    No fix available
    Packages

    radare2, radare2, radare2, radare2, radare2, radare2

    Summary

    Published
    8 Feb 2022
    USN-5223-2
    Fix available
    Packages

    apache-log4j1.2

    Summary

    apache-log4j1.2 vulnerability

    Published
    8 Feb 2022
    CVE-2022-0522
    Fix available
    Packages

    Summary

    Access of Memory Location Before Start of Buffer in radareorg/radare2

    Published
    8 Feb 2022
    CVE-2022-21713
    Fix available
    Packages

    Summary

    Exposure of Sensitive Information in Grafana

    Published
    8 Feb 2022
    CVE-2022-0521
    Fix available
    Packages

    Summary

    Access of Memory Location After End of Buffer in radareorg/radare2

    Published
    8 Feb 2022
    CVE-2022-0520
    Fix available
    Packages

    Summary

    Use After Free in radareorg/radare2

    Published
    8 Feb 2022