Open Source Vulnerabilities

linux, linux, linux

kernel

CVE-2021-32399 affecting package kernel for versions less than 5.10.78.1-1

linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gcp-edge, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-bluefield, linux-gcp, linux-gcp-5.8, linux-gke, linux-gkeop, linux-hwe-5.8, linux-kvm, linux-oem-5.10, linux-oracle, linux-oracle-5.8, linux-raspi, linux-azure-fde-5.15, linux-oem-5.6, linux-raspi2, linux-riscv, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

firefox, firefox

firefox vulnerability

openscad, openscad, openscad

openscad, openscad, openscad, openscad, openscad, openscad

github.com/containers/storage

Improper Locking in github.com/containers/storage

doc-path

Prototype Pollution in doc-path

json8-merge-patch

Prototype pollution in json8-merge-patch

json8

Prototype pollution in json8

nodemailer

Command injection in nodemailer

express-validators

Regular expression deinal of service in express-validators

grpc, @grpc/grpc-js

Prototype pollution in grpc and @grpc/grpc-js

json-ptr

Arbitrary Code Execution in json-ptr

linux, linux, linux

@absolunet/kafe

Regular expression denial of service in @absolunet/kafe

npm-user-validate

Regular expression denial of service in npm-user-validate

@tsed/core

Prototype pollution in @tsed/core

chart.js

Prototype pollution in chart.js

joplin

Cross-site scripting in Joplin

droppy

Path Traversal in droppy

reveal.js

Cross-site Scripting in reveal.js

pdf-image

Improper Input Validation and Code Injection in pdf-image

browserless-chrome

Path Traversal in browserless-chrome

codemirror

Regular expression denial of service in codemirror

dat.gui

Regular Expression Denial of Service in dat.gui

trim

Regular Expression Denial of Service in trim

strapi

Authorization bypass in Strapi

osm-static-maps

Injection and Cross-site Scripting in osm-static-maps

perl-Image-ExifTool, perl-Image-ExifTool, perl-Image-ExifTool

Security update for perl-Image-ExifTool

monitoring-plugins-smart, monitoring-plugins-smart, monitoring-plugins-smart

Security update for monitoring-plugins-smart

lightning-server

Cross-site Scripting in lightning-server

mathjs

Prototype Pollution in mathjs