Open Source Vulnerabilities

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

mariadb-10.5

mariadb

CVE-2021-46661 affecting package mariadb for versions less than 10.6.7-1

mariadb

CVE-2021-46662 affecting package mariadb for versions less than 10.6.7-1

mariadb

CVE-2021-46663 affecting package mariadb for versions less than 10.6.7-1

mariadb

CVE-2021-46664 affecting package mariadb for versions less than 10.6.7-1

mariadb

CVE-2021-46665 affecting package mariadb for versions less than 10.6.7-1

mariadb-10.3, mariadb-10.6

mariadb-10.3

mariadb-10.3, mariadb-10.6

mariadb-10.3, mariadb-10.6

mariadb-10.3, mariadb-10.6

mariadb-10.3, mariadb-10.6

mariadb-10.3

mariadb-10.3, mariadb-10.6

mariadb-10.3, mariadb-10.6

CVE-2021-46669 does not affect BellSoft software

keyget

Prototype Pollution in keyget

bmoor

Prototype Pollution in bmoor

remdex/livehelperchat

Cross-site Scripting in LiveHelperChat

github.com/casdoor/casdoor

SQL Injection in Casdoor

calibreweb

Server-Side Request Forgery in calibreweb

plone-app-contenttypes

Cross-site Scripting and Open Redirect in plone.app.contenttypes

com.thoughtworks.xstream:xstream

Denial of Service by injecting highly recursive collections or maps in XStream

flask-appbuilder

Observable Response Discrepancy in Flask-AppBuilder

github.com/github/gh-ost

Command injection in gh-ost

com.github.junrar:junrar

Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive

symfony/framework-bundle, symfony/framework-bundle, symfony/framework-bundle

CSRF token missing in Symfony

zip-local

Exposure of Resource to Wrong Sphere in Zip-Local

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Race condition in Apache Tomcat

min-dash, org.webjars.npm:min-dash

Prototype pollution in min-dash

showdoc/showdoc

Cross-site Scripting in showdoc

treq

Unsafe handling of user-specified cookies in treq

github.com/google/go-attestation

Go-Attestation Improper Input Validation with attacker-controlled TPM Quote

zstd

Heap-buffer-overflow in ZSTD_compressLiterals

libplist

UNKNOWN READ in unescape_string

ether/logs

Duplicate Advisory: Path Traversal in the Logs plugin for Craft CMS

motioneye

Unrestricted Upload of File with Dangerous Type in motionEye

:unknown:

:unknown:

:linux_kernel:Qualcomm

:unknown:

:unknown:

:linux_kernel:Qualcomm

platform/frameworks/av

platform/frameworks/base

platform/packages/apps/Settings, platform/packages/apps/Settings, platform/packages/apps/Settings

platform/frameworks/base, platform/frameworks/base