Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2021-4082
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    CVE-2021-4081
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    openSUSE-SU-2021:1566-1
    Fix available
    Packages

    wireshark

    Summary

    Security update for wireshark

    Published
    10 Dec 2021
    openSUSE-SU-2021:1560-1
    Fix available
    Packages

    glibc, glibc-testsuite-src

    Summary

    Security update for glibc

    Published
    10 Dec 2021
    OESA-2021-1461
    Fix available
    Packages

    samba, samba

    Summary

    samba security update

    Published
    10 Dec 2021
    OESA-2021-1460
    Fix available
    Packages

    gmp, gmp

    Summary

    gmp security update

    Published
    10 Dec 2021
    OESA-2021-1459
    Fix available
    Packages

    bind, bind

    Summary

    bind security update

    Published
    10 Dec 2021
    OESA-2021-1458
    Fix available
    Packages

    edk2, edk2

    Summary

    edk2 security update

    Published
    10 Dec 2021
    OESA-2021-1457
    Fix available
    Packages

    vim, vim

    Summary

    vim security update

    Published
    10 Dec 2021
    OESA-2021-1456
    Fix available
    Packages

    mailman, mailman

    Summary

    mailman security update

    Published
    10 Dec 2021
    OESA-2021-1455
    Fix available
    Packages

    php, php

    Summary

    php security update

    Published
    10 Dec 2021
    CVE-2021-44228
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    DEBIAN-CVE-2021-44228
    Fix available
    Packages

    apache-log4j2, apache-log4j2, apache-log4j2

    Summary

    Published
    10 Dec 2021
    openSUSE-SU-2021:1557-1
    Fix available
    Packages

    webkit2gtk3

    Summary

    Security update for webkit2gtk3

    Published
    10 Dec 2021
    openSUSE-SU-2021:1554-1
    Fix available
    Packages

    glib-networking

    Summary

    Security update for glib-networking

    Published
    10 Dec 2021
    openSUSE-SU-2021:1553-1
    Fix available
    Packages

    python-Babel, python-Babel-doc

    Summary

    Security update for python-Babel

    Published
    10 Dec 2021
    openSUSE-SU-2021:1552-1
    Fix available
    Packages

    nodejs14

    Summary

    Security update for nodejs14

    Published
    10 Dec 2021
    GHSA-jfh8-c2jp-5v3q
    Fix available
    Packages

    org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-core, com.guicedee.services:log4j-core, org.xbib.elasticsearch:log4j, uk.co.nichesolutions.logging.log4j:log4j-core, org.ops4j.pax.logging:pax-logging-log4j2, org.ops4j.pax.logging:pax-logging-log4j2, org.ops4j.pax.logging:pax-logging-log4j2, org.ops4j.pax.logging:pax-logging-log4j2

    Summary

    Remote code injection in Log4j

    Published
    10 Dec 2021
    CVE-2021-43803
    Fix available
    Packages

    Summary

    Published
    10 Dec 2021
    ALPINE-CVE-2021-43803
    Fix available
    Packages

    nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs, nodejs

    Summary

    Published
    10 Dec 2021
    OSV-2021-1663
    Fix available
    Packages

    c-blosc2

    Summary

    Heap-buffer-overflow in ndlz4_decompress

    Published
    10 Dec 2021
    OSV-2021-1658
    No fix available
    Packages

    istio

    Summary

    Null-dereference READ in istio.io/istio/security/pkg/util.ExtractJwtAud

    Published
    10 Dec 2021
    DSA-5019-1
    Fix available
    Packages

    wireshark

    Summary

    wireshark - security update

    Published
    10 Dec 2021
    UBUNTU-CVE-2021-44228
    Fix available
    Packages

    apache-log4j2, apache-log4j2, apache-log4j2

    Summary

    Published
    10 Dec 2021
    CVE-2021-43802
    Fix available
    Packages

    Summary

    Published
    9 Dec 2021
    CVE-2021-43982
    No fix available
    Packages

    Summary

    Published
    9 Dec 2021
    CVE-2021-37861
    No fix available
    Packages

    Summary

    Published
    9 Dec 2021
    CVE-2021-4033
    Fix available
    Packages

    Summary

    Published
    9 Dec 2021
    CVE-2021-44514
    No fix available
    Packages

    Summary

    Published
    9 Dec 2021
    CVE-2021-43608
    Fix available
    Packages

    Summary

    Published
    9 Dec 2021
    UBUNTU-CVE-2021-43608
    No fix available
    Packages

    php-doctrine-dbal

    Summary

    Published
    9 Dec 2021
    GHSA-vj54-cjrx-x696
    Fix available
    Packages

    github.com/argoproj/argo-cd

    Summary

    Observable Discrepancy in Argo

    Published
    9 Dec 2021
    GHSA-v39h-qm32-8gwq
    No fix available
    Packages

    express-mock-middleware

    Summary

    Improperly Controlled Modification of Dynamically-Determined Object Attributes in express-mock-middleware

    Published
    9 Dec 2021
    GHSA-3p94-vj97-fm4q
    No fix available
    Packages

    fsa

    Summary

    OS Command Injection in fsa

    Published
    9 Dec 2021
    GHSA-4m6q-rxhm-675w
    No fix available
    Packages

    adb-driver

    Summary

    OS Command Injection in adb-driver

    Published
    9 Dec 2021
    GHSA-3q9x-w53p-jg53
    Fix available
    Packages

    heroku-addonpool

    Summary

    OS Command Injection in heroku-addonpool

    Published
    9 Dec 2021
    GHSA-76qm-4f93-fg6f
    No fix available
    Packages

    xdlocalstorage

    Summary

    Improper Input Validation in xdLocalStorage

    Published
    9 Dec 2021
    GHSA-c6c4-jmqx-3r33
    No fix available
    Packages

    xdlocalstorage

    Summary

    Open Redirect in xdLocalStorage

    Published
    9 Dec 2021
    GHSA-vrc7-6g8w-jh56
    No fix available
    Packages

    xdlocalstorage

    Summary

    Improper Input Validation in xdLocalStorage

    Published
    9 Dec 2021
    GHSA-7q9f-x6rm-qmxr
    No fix available
    Packages

    compass-compile

    Summary

    Command Injection in compass-compile

    Published
    9 Dec 2021
    GHSA-xmc8-26q4-qjhx
    Fix available
    Packages

    com.fasterxml.jackson.dataformat:jackson-dataformat-cbor, com.fasterxml.jackson.dataformat:jackson-dataformat-cbor

    Summary

    Denial of Service (DoS) in Jackson Dataformat CBOR

    Published
    9 Dec 2021
    GHSA-vfqx-33qm-g869
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-r695-7vr9-jgc2
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-f9xh-2qgp-cq57
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-9m6f-7xcq-8vf8
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-m6x4-97wx-4q27
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-8c4j-34r4-xr8g
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-cvm9-fjm9-3572
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-8w26-6f25-cm9x
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021
    GHSA-9gph-22xh-8x98
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

    Summary

    Unsafe Deserialization in jackson-databind

    Published
    9 Dec 2021