Open Source Vulnerabilities

org.apache.uima:uimaj

Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability

Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats

org.wildfly.core:wildfly-controller

wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability

cacti, cacti

cacti - security update

python-urllib3

python-urllib3 - security update

Log Injection

rusty-paseto

rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency

Prometheus Metrics Accessible Pre-Authentication

org.xwiki.platform:xwiki-platform-display-api, org.xwiki.platform:xwiki-platform-display-api

XWiki Platform privilege escalation from script right to programming right through title displayer

org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action

org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token

gpac

gpac, gpac, gpac, gpac, gpac, gpac

libxml2, libxml2-devel, libxml2-python, libxml2-static

libxml2: Fix of CVE-2016-4658

github.com/projectcapsule/capsule, github.com/projectcapsule/capsule-proxy

capsule-proxy service discloses Namespaces of colliding tenants to owners of different tenants with the same ServiceAccount name

samba, samba, samba

samba, samba, samba, samba, samba, samba, samba

samba

CVE-2023-4154 affecting package samba 4.18.3-2