Open Source Vulnerabilities

clementine, clementine, clementine, clementine, clementine, clementine, clementine

clementine, clementine, clementine, clementine, clementine, clementine, clementine

mruby, mruby, mruby

mruby, mruby, mruby, mruby, mruby, mruby, mruby

ghostscript

Heap-buffer-overflow in chunk_obj_alloc

ghostscript

Heap-use-after-free in stell

openssl-src

Invalid handling of `X509_verify_cert()` internal errors in libssl

flatbuffers

Heap-buffer-overflow in flexbuffers::Verifier::VerifyRef

mediawiki

mediawiki - security update

mediawiki

mediawiki - security update

nim

Security update for nim

github.com/owncast/owncast

Unsafe inline XSS in pasting DOM element into chat

@openzeppelin/contracts, @openzeppelin/contracts-upgradeable

OpenZeppelin Contracts initializer reentrancy may lead to double initialization

com.splunk.logging:splunk-library-javalogging, com.splunk.logging:splunk-library-javalogging

Remote code injection in Log4j

org.opencastproject:opencast-ingest-service-impl

Files Accessible to External Parties in Opencast

org.opencastproject:opencast-common

Opencast publishes global system account credentials

org.opencastproject:opencast-common

HTTP Method Spoofing

cgi, cgi, cgi

Buffer overrun in CGI.escape_html

actionpack, actionpack

actionpack Open Redirect in Host Authorization Middleware

jackalope/jackalope-doctrine-dbal

SQL injection in jackalope/jackalope-doctrine-dbal

org.opencastproject:opencast-common, org.opencastproject:opencast-common

Apache Log4j Remote Code Execution

postgresql10

Security update for postgresql10

log4j:log4j, org.zenframework.z8.dependencies.commons:log4j-1.2.17

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data

,

openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl3, openssl3

,

apache-log4j2, apache-log4j2, apache-log4j2

openssl