Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2021-3777
    Fix available
    Packages

    Summary

    Published
    15 Sept 2021
    UBUNTU-CVE-2021-3778
    Fix available
    Packages

    vim, vim, vim, vim

    Summary

    Published
    15 Sept 2021
    CURL-CVE-2021-22947
    Fix available
    Packages

    Summary

    STARTTLS protocol injection via MITM

    Published
    15 Sept 2021
    CURL-CVE-2021-22946
    Fix available
    Packages

    Summary

    Protocol downgrade required TLS bypassed

    Published
    15 Sept 2021
    CURL-CVE-2021-22945
    Fix available
    Packages

    Summary

    UAF and double free in MQTT sending

    Published
    15 Sept 2021
    openSUSE-SU-2021:1266-1
    Fix available
    Packages

    htmldoc

    Summary

    Security update for htmldoc

    Published
    15 Sept 2021
    CVE-2021-3751
    Fix available
    Packages

    Summary

    Published
    15 Sept 2021
    CVE-2021-3706
    Fix available
    Packages

    Summary

    Published
    15 Sept 2021
    USN-5078-1
    Fix available
    Packages

    squashfs-tools, squashfs-tools

    Summary

    squashfs-tools vulnerability

    Published
    15 Sept 2021
    OSV-2021-1262
    Fix available
    Packages

    matio

    Summary

    Heap-buffer-overflow in H5O__chunk_deserialize

    Published
    15 Sept 2021
    OSV-2021-1261
    No fix available
    Packages

    libucl

    Summary

    UNKNOWN READ in kh_get_ucl_hash_node

    Published
    15 Sept 2021
    OSV-2021-1258
    Fix available
    Packages

    poppler

    Summary

    Bad-cast to SplashPattern from invalid vptr

    Published
    15 Sept 2021
    UBUNTU-CVE-2021-3764
    Fix available
    Packages

    linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux-hwe-edge, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gcp-edge, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gke, linux-gkeop, linux-hwe-5.11, linux-hwe-5.13, linux-ibm, linux-kvm, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oracle, linux-oracle-5.11, linux-raspi, linux-riscv-5.11, linux-aws-5.8, linux-azure-5.8, linux-gcp-5.8, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.6, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    15 Sept 2021
    DLA-2758-1
    Fix available
    Packages

    sssd

    Summary

    sssd - security update

    Published
    15 Sept 2021
    UBUNTU-CVE-2021-3744
    Fix available
    Packages

    linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux-hwe-edge, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gcp-edge, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gke, linux-gkeop, linux-hwe-5.11, linux-hwe-5.13, linux-ibm, linux-kvm, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oracle, linux-oracle-5.11, linux-raspi, linux-riscv-5.11, linux-aws-5.8, linux-azure-5.8, linux-gcp-5.8, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.6, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    15 Sept 2021
    UBUNTU-CVE-2021-22947
    Fix available
    Packages

    curl, curl, curl, curl, curl

    Summary

    Published
    15 Sept 2021
    UBUNTU-CVE-2021-22946
    Fix available
    Packages

    curl, curl, curl, curl, curl

    Summary

    Published
    15 Sept 2021
    UBUNTU-CVE-2021-22945
    Fix available
    Packages

    curl

    Summary

    Published
    15 Sept 2021
    CVE-2021-23029
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23027
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23026
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23030
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23028
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23025
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    GHSA-2ghc-6v89-pw9j
    Fix available
    Packages

    body-parser-xml

    Summary

    body-parser-xml vulnerable to Prototype Pollution

    Published
    14 Sept 2021
    GHSA-2rh5-jvgx-pgw3
    Fix available
    Packages

    ezsystems/ezplatform, ezsystems/ezplatform

    Summary

    Any storage file can be downloaded from p.sh if full server path is known

    Published
    14 Sept 2021
    GHSA-gqcf-83rq-gpfr
    Fix available
    Packages

    ibexa/post-install

    Summary

    Any storage file can be downloaded from p.sh if full server path is known

    Published
    14 Sept 2021
    GHSA-23cm-x6j7-6hq3
    Fix available
    Packages

    matrix-js-sdk

    Summary

    matrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver

    Published
    14 Sept 2021
    CVE-2021-23036
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23031
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-39391
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-35493
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23039
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23038
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23037
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23035
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23034
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23033
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23032
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23045
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-41077
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2021-23044
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2020-21082
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    CVE-2020-21081
    No fix available
    Packages

    Summary

    Published
    14 Sept 2021
    DEBIAN-CVE-2020-21050
    Fix available
    Packages

    libsixel, libsixel, libsixel

    Summary

    Published
    14 Sept 2021
    CVE-2020-21050
    Fix available
    Packages

    Summary

    Published
    14 Sept 2021
    DEBIAN-CVE-2020-21049
    Fix available
    Packages

    libsixel, libsixel, libsixel

    Summary

    Published
    14 Sept 2021
    CVE-2020-21049
    Fix available
    Packages

    Summary

    Published
    14 Sept 2021
    DEBIAN-CVE-2020-21048
    Fix available
    Packages

    libsixel, libsixel, libsixel

    Summary

    Published
    14 Sept 2021
    CVE-2020-21048
    Fix available
    Packages

    Summary

    Published
    14 Sept 2021