Open Source Vulnerabilities

catdoc, catdoc, catdoc

catdoc, catdoc, catdoc, catdoc, catdoc, catdoc, catdoc, catdoc

chromium, chromium

chromium - security update

open-vm-tools, open-vm-tools, open-vm-tools, open-vm-tools, open-vm-tools

open-vm-tools, open-vm-tools, open-vm-tools, open-vm-tools

k8s.io/ingress-nginx

Ingress-nginx code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

k8s.io/ingress-nginx

Ingress nginx annotation injection causes arbitrary command execution

k8s.io/ingress-nginx

Ingress-nginx path sanitization can be bypassed

google.golang.org/grpc, google.golang.org/grpc, google.golang.org/grpc

gRPC-Go HTTP/2 Rapid Reset vulnerability

crypto-js

crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

twisted

twisted.web has disordered HTTP pipeline response

cryptojs

twisted, twisted, twisted

python-twisted

CVE-2023-46137 affecting package python-twisted for versions less than 22.10.0-4

python-twisted

CVE-2023-46137 affecting package python-twisted for versions less than 22.10.0-4

twisted

cryptojs, cryptojs, cryptojs, cryptojs, cryptojs

twisted, twisted, twisted, twisted, twisted, twisted

crypto-es

crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web

XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages

org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates

XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled

org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web

XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title

org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-web-standard, org.xwiki.platform:xwiki-platform-web

XWiki Platform XSS vulnerability from account in the create page form via template provider

org.xwiki.platform:xwiki-platform-office-importer, org.xwiki.platform:xwiki-platform-office-importer

org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter

org.xwiki.rendering:xwiki-rendering-macro-footnotes, org.xwiki.rendering:xwiki-rendering-macro-footnotes, org.xwiki.platform:xwiki-core-rendering-macro-footnotes

XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore

org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents

org.xwiki.platform:xwiki-platform-attachment-api, org.xwiki.platform:xwiki-platform-attachment-api

org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move

org.xwiki.platform:xwiki-platform-menu, org.xwiki.platform:xwiki-platform-menu-ui, org.xwiki.platform:xwiki-platform-menu-ui

Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet

org.xwiki.rendering:xwiki-rendering-xml

org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability