Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    SUSE-SU-2021:4000-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    12 Dec 2021
    openSUSE-SU-2021:3999-1
    Fix available
    Packages

    log4j

    Summary

    Security update for log4j

    Published
    12 Dec 2021
    CVE-2021-44833
    Fix available
    Packages

    ,

    Summary

    Published
    12 Dec 2021
    CVE-2021-44515
    No fix available
    Packages

    Summary

    Published
    12 Dec 2021
    CVE-2021-41805
    Fix available
    Packages

    Summary

    Published
    12 Dec 2021
    UBUNTU-CVE-2021-41805
    No fix available
    Packages

    consul, consul, consul

    Summary

    Published
    12 Dec 2021
    openSUSE-SU-2021:1575-1
    Fix available
    Packages

    MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    12 Dec 2021
    openSUSE-SU-2021:1574-1
    Fix available
    Packages

    nodejs12

    Summary

    Security update for nodejs12

    Published
    12 Dec 2021
    CVE-2021-4097
    Fix available
    Packages

    Summary

    Published
    12 Dec 2021
    OSV-2021-1672
    No fix available
    Packages

    c-blosc2

    Summary

    Heap-buffer-overflow in blosc_d

    Published
    12 Dec 2021
    OSV-2021-1671
    Fix available
    Packages

    unicorn

    Summary

    UNKNOWN READ in helper_uc_tracecode

    Published
    12 Dec 2021
    OSV-2021-1670
    Fix available
    Packages

    php

    Summary

    Dynamic-stack-buffer-overflow in zend_calc_live_ranges

    Published
    12 Dec 2021
    DLA-2843-1
    Fix available
    Packages

    linux

    Summary

    linux - security update

    Published
    12 Dec 2021
    DLA-2842-1
    Fix available
    Packages

    apache-log4j2

    Summary

    apache-log4j2 - security update

    Published
    12 Dec 2021
    CVE-2021-4092
    Fix available
    Packages

    Summary

    Published
    11 Dec 2021
    OESA-2021-1462
    Fix available
    Packages

    log4j, log4j

    Summary

    log4j security update

    Published
    11 Dec 2021
    MGASA-2021-0556
    Fix available
    Packages

    log4j

    Summary

    Updated log4j packages fix security vulnerability

    Published
    11 Dec 2021
    OSV-2021-1666
    No fix available
    Packages

    libucl

    Summary

    UNKNOWN READ in kh_get_ucl_hash_node

    Published
    11 Dec 2021
    DSA-5020-1
    Fix available
    Packages

    apache-log4j2, apache-log4j2

    Summary

    apache-log4j2 - security update

    Published
    11 Dec 2021
    CVE-2021-41242
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    MGASA-2021-0555
    Fix available
    Packages

    chromium-browser-stable

    Summary

    Updated chromium-browser-stable packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0554
    Fix available
    Packages

    thunderbird, thunderbird-l10n

    Summary

    Updated thunderbird packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0553
    Fix available
    Packages

    opencontainers-runc

    Summary

    Updated opencontainers-runc packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0552
    Fix available
    Packages

    python-django

    Summary

    Updated python-django packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0551
    Fix available
    Packages

    firefox, firefox-l10n

    Summary

    Updated firefox packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0550
    Fix available
    Packages

    speex

    Summary

    Updated speex packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0549
    Fix available
    Packages

    curaengine

    Summary

    Updated curaengine packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0548
    Fix available
    Packages

    fetchmail

    Summary

    Updated fetchmail packages fix security vulnerability

    Published
    10 Dec 2021
    MGASA-2021-0547
    Fix available
    Packages

    libvirt

    Summary

    Updated libvirt packages fix security vulnerability

    Published
    10 Dec 2021
    CVE-2021-43815
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    UBUNTU-CVE-2021-43815
    No fix available
    Packages

    grafana

    Summary

    Published
    10 Dec 2021
    GHSA-4jwx-78vx-gm6g
    Fix available
    Packages

    kevinpapst/kimai2

    Summary

    Cross-Site Request Forgery in kimai2

    Published
    10 Dec 2021
    GHSA-97cc-825c-399g
    No fix available
    Packages

    remdex/livehelperchat

    Summary

    Cross site scripting in remdex/livehelperchat

    Published
    10 Dec 2021
    GHSA-3xph-cp8f-2229
    Fix available
    Packages

    @fabiocaccamo/utils.js

    Summary

    Prototype Pollution in @fabiocaccamo/utils.js

    Published
    10 Dec 2021
    GHSA-792j-9wj3-j634
    No fix available
    Packages

    github-todos

    Summary

    Command injection in github-todos

    Published
    10 Dec 2021
    GHSA-h86j-6h6m-qjqw
    No fix available
    Packages

    remdex/livehelperchat

    Summary

    Cross-Site Request Forgery in remdex/livehelperchat

    Published
    10 Dec 2021
    GHSA-gfhx-jjwq-63gv
    Fix available
    Packages

    org.apereo.cas:cas-server-core-web

    Summary

    Cross-site Scripting in Apereo CAS

    Published
    10 Dec 2021
    GHSA-33gc-6cw9-w3g4
    Fix available
    Packages

    topthink/framework

    Summary

    Deserialization of Untrusted Data in topthink/framework

    Published
    10 Dec 2021
    GHSA-553q-hpvp-q8pc
    Fix available
    Packages

    snipe/snipe-it

    Summary

    Server-Side Request Forgery in snipe/snipe-it

    Published
    10 Dec 2021
    GHSA-hjhp-hwfj-hwf3
    Fix available
    Packages

    grumpydictator/firefly-iii

    Summary

    Cross Site Request Forgery in firefly-iii

    Published
    10 Dec 2021
    GHSA-7289-chwj-7h86
    No fix available
    Packages

    librenms/librenms

    Summary

    Path traversal in librenms/librenms

    Published
    10 Dec 2021
    GHSA-2jhh-5xm2-j4gf
    Fix available
    Packages

    github.com/hashicorp/nomad, github.com/hashicorp/nomad, github.com/hashicorp/nomad

    Summary

    Improper Authentication in HashiCorp Nomad

    Published
    10 Dec 2021
    GHSA-xxfh-x98p-j8fr
    Fix available
    Packages

    org.ops4j.pax.logging:pax-logging-log4j2, org.ops4j.pax.logging:pax-logging-log4j2

    Summary

    Remote code injection in Log4j (through pax-logging-log4j2)

    Published
    10 Dec 2021
    CVE-2021-4089
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    CVE-2021-23639
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    CVE-2021-23463
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    GHSA-hg2p-2cvq-4ppv
    Fix available
    Packages

    lazysizes

    Summary

    Cross-site scripting in lazysizes

    Published
    10 Dec 2021
    GHSA-v3r2-3fp4-rp46
    No fix available
    Packages

    paypal-adaptive

    Summary

    Prototype pollution in paypal-adaptive

    Published
    10 Dec 2021
    GHSA-f78f-353m-cf4j
    Fix available
    Packages

    node-rules

    Summary

    Code Injection in node-rules

    Published
    10 Dec 2021
    GHSA-p33m-7w7f-gmj8
    No fix available
    Packages

    fun-map

    Summary

    Uncontrolled Resource Consumption in fun-map

    Published
    10 Dec 2021