Open Source Vulnerabilities

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server

gnome-control-center, gnome-control-center, gnome-control-center, gnome-control-center, gnome-control-center

nautobot

microcode_ctl

microcode_ctl: Fix of CVE-2023-23583

microcode_ctl

microcode_ctl: Fix of CVE-2023-23583

microcode_ctl

microcode_ctl: Fix of CVE-2023-23583

microcode_ctl

microcode_ctl: Fix of CVE-2023-23583

squid, squid-cgi, squid-common, squid-purge, squid3, squidclient

Fix CVE(s): CVE-2023-46728

squid, squid-cgi, squid-common, squid-purge, squid3, squidclient

Fix CVE(s): CVE-2023-46728

Nautobot allows unauthenticated db-file-storage views

ansible, ansible, ansible, ansible-core, ansible-core, ansible-core

undertow

ansible

CVE-2023-5764 affecting package ansible for versions less than 2.17.0-1

ansible

CVE-2023-5764 affecting package ansible for versions less than 2.14.12-2

ansible, ansible, ansible, ansible-core, ansible, ansible-core, ansible-core, ansible-core, ansible-core

undertow, undertow, undertow, undertow, undertow, undertow, undertow, undertow

Ansible: template injection

github.com/elastic/beats/v7, github.com/elastic/beats, github.com/elastic/beats

Elastic Beats inserts sensitive information into log file

fish, fish

Updated fish packages fix a security vulnerability

php-dompdf-svg-lib

php-dompdf-svg-lib

php-svg-lib unsafe attributes merge when parsing `use` tag

php-svg-lib possible DoS caused by infinite recursion when parsing SVG document

linux-oracle-5.4, linux-raspi-5.4, linux-raspi

linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Laf env causes sensitive information disclosure

h2o

h2o, h2o, h2o, h2o

h2o QUIC state exhaustion DoS

h2o vulnerable to TLS session resumption misdirection

Umbraco CMS vulnerable to stored XSS via SVG File Upload

Umbraco CMS brute force exploit can be used to collect valid usernames

Umbraco CMS SMTP misconfiguration exposes potential registered user email

Umbraco CMS vulnerable to Privilege Escalation using Spoofing

Umbraco CMS possible path traversal when creating packages from backoffice

mltable

Exposure of Sensitive Information in mltable

Elastic Agent Insertion of Sensitive Information into Log File