Open Source Vulnerabilities

log4j, log4j, log4j, log4j, log4j, log4j, log4j, log4j, log4j, log4j

Security update for log4j

log4j

Security update for log4j

fetchmail

Security update for fetchmail

log4j,jboss-logging,jgroups,json-lib,metrics,mx4j,netty,springframework,thrift,HikariCP,avalon-framework,avalon-logkit,datanucleus-api-jdo,datanucleus-core,datanucleus-rdbms,infinispan,wildfly-core,apache-zookeeper, log4j,jboss-logging,jgroups,json-lib,metrics,mx4j,netty,springframework,thrift,HikariCP,avalon-framework,avalon-logkit,datanucleus-api-jdo,datanucleus-core,datanucleus-rdbms,infinispan,wildfly-core,apache-zookeeper

log4j security update

openssh, openssh

openssh security update

kernel, kernel

kernel security update

mod_security, mod_security

mod_security security update

vim, vim

vim security update

log4j, log4j

Security update for log4j

logback

Security update for logback

openjdk-8, openjdk-8, openjdk-lts, openjdk-8, openjdk-lts

openjdk-8, openjdk-lts vulnerabilities

mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki

mediawiki

mediawiki

c-blosc2

Heap-buffer-overflow in ndlz4_decompress

ghostscript

Stack-buffer-overflow in pdfi_do_image

topthink/framework

ThinkPHP5 SQL Injection vulnerability

ghostscript

UNKNOWN READ in chunk_free_object

ghostscript

Negative-size-param in general_endcidrange_func

ghostscript

Segv on unknown address in gx_adjust_color_Pattern

ghostscript

Stack-buffer-overflow in pdfi_create_iccbased

ghostscript

UNKNOWN in pdfi_fapi_get_gsubr

libssh2

libssh2 - security update

vault-cli

vault-cli contains possible RCE when reading user-defined data

de.averbis.textanalysis:pear-archetype

Critical vulnerability in log4j may affect generated PEAR projects

yetiforce/yetiforce-crm

YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number

yetiforce/yetiforce-crm

YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

yetiforce/yetiforce-crm

yetiforcecrm is vulnerable to Cross-site Scripting

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069

ssddanbrown/bookstack

BookStack is vulnerable to Improper Access Control.

htmldoc

htmldoc vulnerability

github.com/ulikunitz/xz

Withdrawn Advisory: Infinite loop in xz