Open Source Vulnerabilities

era-compiler-vyper First Immutable Variable Initialization vulnerability

twisted.web has disordered HTTP pipeline response

D-Tale vulnerable to Remote Code Execution through the Custom Filter Input

crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

xorg-server, xorg-server, xorg-server

xorg-server, xorg-server, xorg-server

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

xorg-x11-server

CVE-2023-5574 affecting package xorg-x11-server 1.20.10-6

xorg-x11-server

CVE-2023-5367 affecting package xorg-x11-server 1.20.10-6

xorg-x11-server

CVE-2023-5380 affecting package xorg-x11-server 1.20.10-6

xorg-x11-server

CVE-2023-5574 affecting package xorg-x11-server for versions less than 1.20.10-10

xorg-x11-server

CVE-2023-5380 affecting package xorg-x11-server for versions less than 1.20.10-10

xorg-x11-server

CVE-2023-5367 affecting package xorg-x11-server for versions less than 1.20.10-10

XWiki Platform XSS with edit right in the create document form for existing pages

XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled

XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

Ingress nginx annotation injection causes arbitrary command execution

Ingress-nginx `path` sanitization can be bypassed with `log_format` directive

webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit