Open Source Vulnerabilities

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

gpac, gpac, gpac, gpac, gpac, gpac

mermaid

Incorrect sanitisation function leads to `XSS` in mermaid

org.apache.iotdb:iotdb-parent

Improper Certificate Validation in Apache IoTDB

svg2png

XSS in svg2png (NPM package)

org.apache.heron:heron-simulator

Deserialization of Untrusted Data in Apache Heron

msrcrypto

Incorrect Calculation in the MSR JavaScript Cryptography Library

org.apache.syncope.client:syncope-client-enduser, org.apache.syncope.client:syncope-client-enduser

Cross-site scripting in Apache Syncome EndUser

org.jenkins-ci.plugins:scriptler

Stored XSS vulnerability in Jenkins Scriptler Plugin

org.jenkins-ci.plugins:scriptler

Stored XSS vulnerability in Jenkins Scriptler Plugin

com.github.fracpete:vfsjfilechooser2

ReDOS in Vfsjfilechooser2

org.apache.cxf:apache-cxf, org.apache.cxf:apache-cxf, org.apache.cxf:cxf, org.apache.cxf:cxf

Infinite loop in Apache CFX

moodle/moodle

Cross-Site Request Forgery in Moodle

oro/platform, oro/platform, oro/platform

XSS vulnerability on email template preview page

jsx-slack

jsx-slack insufficient patch for CVE-2021-43838 ReDoS

solidus_frontend, solidus_frontend, solidus_frontend

CSRF forgery protection bypass in solidus_frontend

org.keycloak:keycloak-services

Improper Authorization in Keycloak

AjaxNetProfessional

AjaxNetProfessional deserializes arbitrary JavaScript objects

org.powernukkit:powernukkit

Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library

github.com/crypto-org-chain/cronos, github.com/tharsis/ethermint, github.com/tharsis/evmos, github.com/tharsis/ethermint

Drainage of FeeCollector's Block Transaction Fees in cronos

github.com/keep-network/keep-ecdsa

Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme

oro/platform, oro/platform

Client-Side JavaScript Prototype Pollution in oro/platform

linux, linux, linux

linux, linux, linux

linux-azure, linux-aws, linux-lts-xenial, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-hwe-edge, linux-kvm, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-ibm, linux-kvm, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

linux-azure, linux-aws, linux-lts-xenial, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-hwe-edge, linux-kvm, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-ibm, linux-kvm, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

nltk

Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)

github.com/containerd/containerd

Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux

gerapy

Gerapy may cause remote code execution

vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim

vim, vim, vim

vim

CVE-2022-0128 affecting package vim for versions less than 8.2.4081-1

vim

Out-of-bounds Read in vim/vim