Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    SUSE-SU-2023:4295-1
    Fix available
    Packages

    nodejs10, nodejs10, nodejs10, nodejs10, nodejs10, nodejs10, nodejs10

    Summary

    Security update for nodejs10

    Published
    31 Oct 2023
    SUSE-SU-2023:4294-1
    Fix available
    Packages

    webkit2gtk3-soup2, webkit2gtk3-soup2, webkit2gtk3, webkit2gtk3, webkit2gtk4, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4

    Summary

    Security update for webkit2gtk3

    Published
    31 Oct 2023
    SUSE-SU-2023:4293-1
    Fix available
    Packages

    xwayland, xwayland

    Summary

    Security update for xwayland

    Published
    31 Oct 2023
    SUSE-SU-2023:4292-1
    Fix available
    Packages

    xorg-x11-server, xorg-x11-server, xorg-x11-server

    Summary

    Security update for xorg-x11-server

    Published
    31 Oct 2023
    SUSE-SU-2023:4291-1
    Fix available
    Packages

    poppler, poppler, poppler-qt5, poppler, poppler-qt5, poppler-qt6

    Summary

    Security update for poppler

    Published
    31 Oct 2023
    SUSE-SU-2023:4290-1
    Fix available
    Packages

    redis, redis, redis, redis

    Summary

    Security update for redis

    Published
    31 Oct 2023
    SUSE-SU-2023:4289-1
    Fix available
    Packages

    java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk

    Summary

    Security update for java-17-openjdk

    Published
    31 Oct 2023
    CVE-2023-46210
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    SUSE-SU-2023:4288-1
    Fix available
    Packages

    python-Werkzeug, python-Werkzeug, python-Werkzeug, python-Werkzeug

    Summary

    Security update for python-Werkzeug

    Published
    31 Oct 2023
    CVE-2023-5873
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Published
    31 Oct 2023
    CVE-2023-46451
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    DEBIAN-CVE-2023-46361
    No fix available
    Packages

    jbig2dec, jbig2dec, jbig2dec

    Summary

    Published
    31 Oct 2023
    Packages

    jbig2dec, jbig2dec

    Summary

    Published
    31 Oct 2023
    CVE-2023-43139
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-36263
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-47174
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-46356
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-45378
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-27846
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    GHSA-34w4-wrqp-j47g
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq

    Published
    31 Oct 2023
    GHSA-4gpm-r23h-gprw
    Fix available
    Packages

    generator-jhipster

    Summary

    generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character

    Published
    31 Oct 2023
    GHSA-f728-prhw-2g68
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    Insufficient Session Expiration in thorsten/phpmyfaq

    Published
    31 Oct 2023
    GHSA-g5hp-328h-jj98
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    phpMyFAQ Cross-site Scripting vulnerability

    Published
    31 Oct 2023
    GHSA-prrv-r843-4p75
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    Cross-site Scripting (XSS) in thorsten/phpmyfaq

    Published
    31 Oct 2023
    GHSA-7q5f-29gx-57ff
    Fix available
    Packages

    microweber/microweber

    Summary

    Cross-site Scripting (XSS) in microweber/microweber

    Published
    31 Oct 2023
    GHSA-j4vj-w5rj-8grw
    Fix available
    Packages

    thorsten/phpmyfaq

    Summary

    phpMyFAQ Cross-site Scripting vulnerability

    Published
    31 Oct 2023
    CVE-2023-46040
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-45899
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    Packages

    mupdf, mupdf, mupdf

    Summary

    Published
    31 Oct 2023
    UBUNTU-CVE-2023-31794
    No fix available
    Packages

    mupdf, mupdf

    Summary

    Published
    31 Oct 2023
    GHSA-q74f-rf27-8hxc
    Fix available
    Packages

    org.opencrx:opencrx-client

    Summary

    OpenCRX allows a remote attacker to execute arbitrary code via a crafted request

    Published
    31 Oct 2023
    Packages

    golang-github-nats-io-nkeys, golang-github-nats-io-nkeys, nats-server, nats-server

    Summary

    Published
    31 Oct 2023
    AZL-31792
    Fix available
    Packages

    telegraf

    Summary

    CVE-2023-46129 affecting package telegraf for versions less than 1.27.4-1

    Published
    31 Oct 2023
    AZL-35298
    Fix available
    Packages

    telegraf

    Summary

    CVE-2023-46129 affecting package telegraf for versions less than 1.29.4-1

    Published
    31 Oct 2023
    UBUNTU-CVE-2023-46129
    No fix available
    Packages

    golang-github-nats-io-nkeys, golang-github-nats-io-nkeys

    Summary

    Published
    31 Oct 2023
    CVE-2023-5866
    Fix available
    Packages

    Summary

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq

    Published
    31 Oct 2023
    CVE-2023-5867
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Published
    31 Oct 2023
    CVE-2023-5865
    Fix available
    Packages

    Summary

    Insufficient Session Expiration in thorsten/phpmyfaq

    Published
    31 Oct 2023
    CVE-2023-5864
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Published
    31 Oct 2023
    CVE-2023-5863
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    Published
    31 Oct 2023
    CVE-2023-5861
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in microweber/microweber

    Published
    31 Oct 2023
    CVE-2023-5862
    Fix available
    Packages

    Summary

    Missing Authorization in hamza417/inure

    Published
    31 Oct 2023
    CVE-2023-46361
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-46378
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-45996
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    CVE-2023-31794
    No fix available
    Packages

    Summary

    Published
    31 Oct 2023
    DSA-5544-1
    Fix available
    Packages

    zookeeper, zookeeper

    Summary

    zookeeper - security update

    Published
    31 Oct 2023
    DSA-5543-1
    Fix available
    Packages

    open-vm-tools, open-vm-tools

    Summary

    open-vm-tools - security update

    Published
    31 Oct 2023
    DLA-3643-1
    Fix available
    Packages

    pmix

    Summary

    pmix - security update

    Published
    31 Oct 2023
    DLA-3642-1
    Fix available
    Packages

    request-tracker4

    Summary

    request-tracker4 - security update

    Published
    31 Oct 2023