Open Source Vulnerabilities

prestashop/prestashop, prestashop/prestashop

PrestaShop some attribute not escaped in Validate::isCleanHTML method

safe_pqc_kyber

safe_pqc_kyber leaks parts of secret keys

github.com/gravitational/teleport, github.com/gravitational/teleport, github.com/gravitational/teleport

Withdrawn Advisory: User-provided environment values allow execution on macOS agents

github.com/gravitational/teleport, github.com/gravitational/teleport, github.com/gravitational/teleport

Withdrawn Advisory: SFTP is possible on the Proxy server for any user with SFTP access

github.com/gravitational/teleport, github.com/gravitational/teleport

Withdrawn Advisory: Teleport Access List owners can escalate their privileges

github.com/gravitational/teleport, github.com/gravitational/teleport, github.com/gravitational/teleport

Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users

wrangler, wrangler

Arbitrary remote code execution within `wrangler dev` Workers sandbox

wrangler

Arbitrary remote file read in Wrangler dev server

proftpd, proftpd

Security update for proftpd

exim, exim

Security update for exim

github.com/karmada-io/karmada

The DES/3DES cipher was used as part of the TLS protocol by installation tools

gpac, gpac, gpac, gpac, gpac, gpac

Newtonsoft.Json

Duplicate Advisory: Improper Handling of Exceptional Conditions in Newtonsoft.Json

tinymce

Duplicate Advisory: Cross-site scripting vulnerability in TinyMCE

PeterO.Cbor

Duplicate Advisory: Denial of service in CBOR library

tinymce

Duplicate Advisory: Cross-site scripting vulnerability in TinyMCE

tinymce

Duplicate Advisory: Cross-site scripting vulnerability in TinyMCE plugins

sqlite3, sqlite3

sqlite3 vulnerabilities

openssh, openssh

openssh vulnerabilities

apktool, apktool, apktool

libssh, libssh, libssh, libssh, libssh, libssh

libssh, libssh, libssh

libssh

CVE-2023-6004 affecting package libssh for versions less than 0.10.6-1

apktool, apktool, apktool, apktool, apktool, apktool, apktool, apktool

libssh, libssh, libssh, libssh

packagekit, packagekit, packagekit, packagekit, packagekit, packagekit, packagekit, packagekit

Packagekitd: use-after-free in idle function callback

Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname

Arbitrary file write on Decoding

Integer overflow in URI leading to potential host spoofing

Craft CMS Privilege Escalation

laf logs leak

CubeFS leaks users key in logs

CubeFS leaks magic secret key when starting Blobstore access service

Insecure random string generator used for sensitive data

Timing attack can leak user passwords

tinymce, tinymce, tinymce

tinymce, tinymce, tinymce

tinymce, tinymce, tinymce

newtonsoft-json, newtonsoft-json, newtonsoft-json, newtonsoft-json, newtonsoft-json

github.com/cubefs/cubefs

CubeFS leaks users key in logs

github.com/cubefs/cubefs

CubeFS leaks magic secret key when starting Blobstore access service

github.com/cubefs/cubefs

Insecure random string generator used for sensitive data

github.com/cubefs/cubefs

CubeFS timing attack can leak user passwords