Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    UBUNTU-CVE-2022-21661
    No fix available
    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    UBUNTU-CVE-2022-21662
    No fix available
    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    UBUNTU-CVE-2022-21663
    No fix available
    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    UBUNTU-CVE-2022-21664
    No fix available
    Packages

    wordpress, wordpress, wordpress

    Summary

    Published
    6 Jan 2022
    GHSA-w2pm-r78h-4m7v
    Fix available
    Packages

    laravel/framework

    Summary

    OS Command Injection in Laravel Framework

    Published
    6 Jan 2022
    CVE-2022-21662
    Fix available
    Packages

    Summary

    Stored XSS in WordPress

    Published
    6 Jan 2022
    CVE-2022-21663
    Fix available
    Packages

    Summary

    Authenticated Object Injection in Multisites in WordPress

    Published
    6 Jan 2022
    CVE-2022-21664
    Fix available
    Packages

    Summary

    SQL injection in WordPress

    Published
    6 Jan 2022
    GHSA-w6jr-wj64-mc9x
    Fix available
    Packages

    codeigniter4/framework

    Summary

    Deserialization of Untrusted Data in Codeigniter4

    Published
    6 Jan 2022
    CVE-2022-21661
    Fix available
    Packages

    Summary

    SQL injection in WordPress

    Published
    6 Jan 2022
    GHSA-x9r5-jxvq-4387
    Fix available
    Packages

    jquery.terminal

    Summary

    jquery.terminal self XSS on user input

    Published
    6 Jan 2022
    GHSA-8cw5-rv98-5c46
    Fix available
    Packages

    drupal/drupal, drupal/drupal, drupal/drupal, drupal/core, drupal/core, drupal/core

    Summary

    Arbitrary PHP code execution in Drupal

    Published
    6 Jan 2022
    GHSA-x8rq-rc7x-5fg5
    Fix available
    Packages

    @uppy/companion

    Summary

    uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)

    Published
    6 Jan 2022
    GHSA-rqjh-jp2r-59cj
    Fix available
    Packages

    nltk

    Summary

    NLTK Vulnerable to REDoS

    Published
    6 Jan 2022
    GHSA-mw25-f5r2-hpc6
    Fix available
    Packages

    org.apache.geode:geode-core, org.apache.geode:geode-core

    Summary

    Insertion of Sensitive Information into Log File in Apache Geode

    Published
    6 Jan 2022
    GHSA-5mj6-3cmq-fh34
    Fix available
    Packages

    showdoc/showdoc

    Summary

    showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

    Published
    6 Jan 2022
    GHSA-cv25-3gmg-c6m8
    Fix available
    Packages

    userfrosting/userfrosting

    Summary

    Injection in UserFrosting

    Published
    6 Jan 2022
    GHSA-q4xr-rc97-m4xx
    Fix available
    Packages

    celery

    Summary

    OS Command Injection in celery

    Published
    6 Jan 2022
    GHSA-5r5w-h76p-m726
    Fix available
    Packages

    github.com/foxcpp/maddy

    Summary

    Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy

    Published
    6 Jan 2022
    GHSA-9qj6-4rfq-vm84
    Fix available
    Packages

    actix-web

    Summary

    Out-of-bounds Write in actix-web

    Published
    6 Jan 2022
    GHSA-55m5-whcv-c49c
    Fix available
    Packages

    smallvec

    Summary

    Use of Uninitialized Resource in smallvec

    Published
    6 Jan 2022
    GHSA-hxjf-h2mh-r6hj
    Fix available
    Packages

    libpulse-binding

    Summary

    Use After Free in libpulse-binding

    Published
    6 Jan 2022
    GHSA-7x36-h62w-vw65
    Fix available
    Packages

    actix-web

    Summary

    Out-of-bounds Write in actix-web

    Published
    6 Jan 2022
    GHSA-fgfm-hqjw-3265
    Fix available
    Packages

    actix-web

    Summary

    Out-of-bounds Write in actix-web

    Published
    6 Jan 2022
    GHSA-p46c-w9m3-7qr2
    Fix available
    Packages

    flumedb

    Summary

    Use of Uninitialized Resource in flumedb.

    Published
    6 Jan 2022
    GHSA-xvcg-2q82-r87j
    Fix available
    Packages

    libpulse-binding

    Summary

    Panic mishandled in libpulse-binding

    Published
    6 Jan 2022
    GHSA-24g6-5rx7-58wj
    Fix available
    Packages

    pnet

    Summary

    Missing Initialization of Resource in pnet

    Published
    6 Jan 2022
    GHSA-jqpv-jm4m-86j9
    Fix available
    Packages

    libpulse-binding

    Summary

    Use After Free in libpulse-binding

    Published
    6 Jan 2022
    GHSA-799f-r78p-gq9c
    No fix available
    Packages

    acc_reader

    Summary

    Use of Uninitialized Resource in acc_reader.

    Published
    6 Jan 2022
    GHSA-p4cr-64x4-f92f
    No fix available
    Packages

    acc_reader

    Summary

    Use of Uninitialized Resource in acc_reader.

    Published
    6 Jan 2022
    GHSA-v938-qcc9-rwv8
    No fix available
    Packages

    buffoon

    Summary

    Use of Uninitialized Resource in buffoon.

    Published
    6 Jan 2022
    GHSA-v2ch-fc8f-qm33
    No fix available
    Packages

    bite

    Summary

    Use of Uninitialized Resource in bite.

    Published
    6 Jan 2022
    GHSA-jv2r-jx6q-89jg
    No fix available
    Packages

    bronzedb-protocol

    Summary

    Use of Uninitialized Resource in bronzedb-protocol.

    Published
    6 Jan 2022
    GHSA-w4cc-pc2h-whcj
    No fix available
    Packages

    derive-com-impl

    Summary

    Out-of-bounds Write in derive-com-impl

    Published
    6 Jan 2022
    GHSA-x76r-966h-5qv9
    Fix available
    Packages

    vec-const

    Summary

    Out-of-bounds Write in vec-const

    Published
    6 Jan 2022
    GHSA-cw4j-cf6c-mmfv
    No fix available
    Packages

    binjs_io

    Summary

    Use of Uninitialized Resource in binjs_io.

    Published
    6 Jan 2022
    GHSA-2rxc-8f9w-fjq8
    No fix available
    Packages

    rdiff

    Summary

    Window may read from uninitialized memory locations in rdiff

    Published
    6 Jan 2022
    GHSA-9783-42pm-x5jq
    Fix available
    Packages

    csv-sniffer

    Summary

    Use of Uninitialized Resource in csv-sniffer.

    Published
    6 Jan 2022
    GHSA-9mp7-45qh-r8j8
    No fix available
    Packages

    columnar

    Summary

    columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())

    Published
    6 Jan 2022
    GHSA-w428-f65r-h4q2
    Fix available
    Packages

    raw-cpuid

    Summary

    Deserialization of Untrusted Data in rust-cpuid

    Published
    6 Jan 2022
    GHSA-64wv-8vwp-xgw2
    Fix available
    Packages

    ash

    Summary

    Use of Uninitialized Resource in ash.

    Published
    6 Jan 2022
    GHSA-jqjj-r4qp-x2gh
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs.

    Published
    6 Jan 2022
    GHSA-jwfh-j623-m97h
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs

    Published
    6 Jan 2022
    GHSA-hr52-f9vp-582c
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs.

    Published
    6 Jan 2022
    GHSA-ff2r-xpwq-6whj
    No fix available
    Packages

    gfx-auxil

    Summary

    Use of Uninitialized Resource in gfx-auxil

    Published
    6 Jan 2022
    GHSA-vw5m-qw2r-m923
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs.

    Published
    6 Jan 2022