Open Source Vulnerabilities

matrix-synapse

matrix-synapse

matrix-synapse, matrix-synapse, matrix-synapse

kernel-livepatch-SLE15-SP4_Update_15, kernel-livepatch-SLE15-SP5_Update_2

Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)

kgraft-patch-SLE12-SP5_Update_43, kernel-livepatch-SLE15-SP1_Update_42

Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP1)

Synapse vulnerable to leak of remote user device information

golang-github-lucas-clemente-quic-go, golang-github-lucas-clemente-quic-go, golang-github-lucas-clemente-quic-go, golang-github-lucas-clemente-quic-go, golang-github-lucas-clemente-quic-go

pypdf2, pypdf2, pypdf2, pypdf2, pypdf, pypdf2, pypdf, pypdf, pypdf

kgraft-patch-SLE12-SP5_Update_49

Security update for the Linux Kernel (Live Patch 49 for SLE 12 SP5)

Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

lte-pic32-writer's sendto.txt may disclose URL and the API key

kgraft-patch-SLE12-SP5_Update_45

Security update for the Linux Kernel (Live Patch 45 for SLE 12 SP5)

PX4-Autopilot Heap Buffer Overflow Bug

`SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed

pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDF

authentik potential installation takeover when default admin user is deleted

xorg-server, xorg-server, xorg-server

xorg-server vulnerabilities

Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File

CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment

quic-go vulnerable to pointer dereference that can lead to panic

FOG path traversal via unauthenticated endpoint

open-vm-tools, open-vm-tools

open-vm-tools vulnerabilities

linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi, linux-xilinx-zynqmp

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

FOG SSRF via unauthenticated endpoint(s)

FOG stored XSS on log screen via unsanitized request logging