Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2022-3698
    No fix available
    Packages

    Summary

    Published
    25 Oct 2023
    CVE-2022-38485
    No fix available
    Packages

    Summary

    Published
    25 Oct 2023
    CVE-2022-38484
    No fix available
    Packages

    Summary

    Published
    25 Oct 2023
    UBUNTU-CVE-2023-46120
    No fix available
    Packages

    rabbitmq-java-client, rabbitmq-java-client, rabbitmq-java-client, rabbitmq-java-client, rabbitmq-java-client, rabbitmq-java-client, rabbitmq-java-client

    Summary

    Published
    25 Oct 2023
    UBUNTU-CVE-2023-43281
    No fix available
    Packages

    emscripten, libsfml, love, visp, bibledit, emscripten, goxel, libsfml, love, visp, bibledit, bibledit-cloud, goxel, libsfml, libstb, love, utox, arm-compute-library, armnn, bibledit, bibledit-cloud, emscripten, goxel, libsfml, libstb, love, timg, utox, visp, arm-compute-library, armnn, bibledit, bibledit-cloud, emscripten, goxel, libsfml, libstb, love, timg, tiny-dnn, utox, visp, arm-compute-library, armnn, bibledit, bibledit-cloud, emscripten, goxel, libsfml, libstb, love, timg, tiny-dnn, utox, visp, arm-compute-library, armnn, bibledit, bibledit-cloud, emscripten, goxel, libsfml, libstb, love, timg, tiny-dnn, utox, visp, arm-compute-library, bibledit, bibledit-cloud, emscripten, goxel, libsfml, libstb, love, timg, tiny-dnn, utox, visp

    Summary

    Published
    25 Oct 2023
    UBUNTU-CVE-2023-31582
    No fix available
    Packages

    libjose4j-java, libjose4j-java, libjose4j-java, libjose4j-java, libjose4j-java

    Summary

    Published
    25 Oct 2023
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-fde, linux-azure-fde-5.19, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2, linux-xilinx-zynqmp, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-fips, linux-raspi, linux-raspi-realtime

    Summary

    Published
    25 Oct 2023
    PYSEC-2023-221
    Fix available
    Packages

    werkzeug

    Summary

    Published
    25 Oct 2023
    PYSEC-2023-220
    Fix available
    Packages

    nautobot

    Summary

    Published
    25 Oct 2023
    Packages

    mozjs52, mozjs38, thunderbird, mozjs68, mozjs52, mozjs102, mozjs78, mozjs91, thunderbird, mozjs102, thunderbird

    Summary

    Published
    25 Oct 2023
    Packages

    mozjs52, mozjs38, thunderbird, mozjs68, mozjs52, mozjs102, mozjs78, mozjs91, thunderbird, mozjs102, thunderbird

    Summary

    Published
    25 Oct 2023
    Packages

    traceroute, traceroute, traceroute, traceroute, traceroute

    Summary

    Published
    25 Oct 2023
    UBUNTU-CVE-2023-45960
    No fix available
    Packages

    dom4j, dom4j, dom4j, dom4j, dom4j

    Summary

    Published
    25 Oct 2023
    Packages

    rabbitmq-server, rabbitmq-server, rabbitmq-server, rabbitmq-server, rabbitmq-server

    Summary

    Published
    25 Oct 2023
    UBUNTU-CVE-2023-5752
    No fix available
    Packages

    python-pip, python-pip, python-pip, python-pip, python-pip, python-pip, python-pip

    Summary

    Published
    25 Oct 2023
    PYSEC-2023-228
    Fix available
    Packages

    pip

    Summary

    Published
    25 Oct 2023
    CVE-2022-0353
    No fix available
    Packages

    Summary

    Published
    25 Oct 2023
    GO-2023-2046
    Fix available
    Packages

    github.com/ethereum/go-ethereum

    Summary

    Unbounded memory consumption in github.com/ethereum/go-ethereum

    Published
    25 Oct 2023
    SUSE-SU-2023:4204-1
    Fix available
    Packages

    kgraft-patch-SLE12-SP5_Update_36

    Summary

    Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP5)

    Published
    25 Oct 2023
    CVE-2023-37913
    Fix available
    Packages

    Summary

    org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter

    Published
    25 Oct 2023
    CVE-2023-37912
    Fix available
    Packages

    Summary

    XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

    Published
    25 Oct 2023
    CVE-2023-37911
    Fix available
    Packages

    Summary

    org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents

    Published
    25 Oct 2023
    CVE-2023-37910
    Fix available
    Packages

    Summary

    org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move

    Published
    25 Oct 2023
    CVE-2023-37909
    Fix available
    Packages

    Summary

    Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet

    Published
    25 Oct 2023
    USN-6453-1
    Fix available
    Packages

    xorg-server, xorg-server, xwayland

    Summary

    xorg-server, xwayland vulnerabilities

    Published
    25 Oct 2023
    CVE-2023-37908
    Fix available
    Packages

    Summary

    org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

    Published
    25 Oct 2023
    USN-6452-1
    Fix available
    Packages

    vim, vim, vim, vim, vim

    Summary

    vim vulnerabilities

    Published
    25 Oct 2023
    Packages

    linux-buildinfo-4.4.0-248-tuxcare.els19-generic, linux-buildinfo-4.4.0-248-tuxcare.els19-lowlatency, linux-cloud-tools-4.4.0-248-tuxcare.els19, linux-cloud-tools-4.4.0-248-tuxcare.els19-generic, linux-cloud-tools-4.4.0-248-tuxcare.els19-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-248-tuxcare.els19, linux-headers-4.4.0-248-tuxcare.els19-generic, linux-headers-4.4.0-248-tuxcare.els19-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-248-tuxcare.els19-generic, linux-image-unsigned-4.4.0-248-tuxcare.els19-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-248-tuxcare.els19-generic, linux-modules-4.4.0-248-tuxcare.els19-lowlatency, linux-modules-extra-4.4.0-248-tuxcare.els19-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-248-tuxcare.els19, linux-tools-4.4.0-248-tuxcare.els19-generic, linux-tools-4.4.0-248-tuxcare.els19-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

    Summary

    Fix of 6 CVEs

    Published
    25 Oct 2023
    CVE-2023-34447
    Fix available
    Packages

    Summary

    iTop XSS vulnerability on pages/UI.php

    Published
    25 Oct 2023
    CVE-2023-34446
    Fix available
    Packages

    Summary

    iTop XSS vulnerability on pages/preferences.php

    Published
    25 Oct 2023
    Packages

    linux-buildinfo-4.4.0-248-tuxcare.els19-generic, linux-buildinfo-4.4.0-248-tuxcare.els19-lowlatency, linux-cloud-tools-4.4.0-248-tuxcare.els19, linux-cloud-tools-4.4.0-248-tuxcare.els19-generic, linux-cloud-tools-4.4.0-248-tuxcare.els19-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-248-tuxcare.els19, linux-headers-4.4.0-248-tuxcare.els19-generic, linux-headers-4.4.0-248-tuxcare.els19-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-248-tuxcare.els19-generic, linux-image-unsigned-4.4.0-248-tuxcare.els19-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-248-tuxcare.els19-generic, linux-modules-4.4.0-248-tuxcare.els19-lowlatency, linux-modules-extra-4.4.0-248-tuxcare.els19-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-248-tuxcare.els19, linux-tools-4.4.0-248-tuxcare.els19-generic, linux-tools-4.4.0-248-tuxcare.els19-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

    Summary

    Fix of 6 CVEs

    Published
    25 Oct 2023
    GHSA-hrfv-mqp8-q5rw
    Fix available
    Packages

    werkzeug, werkzeug

    Summary

    Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

    Published
    25 Oct 2023
    GHSA-jq6c-r9xf-qxjm
    Fix available
    Packages

    dtale

    Summary

    dtale vulnerable to Remote Code Execution through the Custom Filter Input

    Published
    25 Oct 2023
    GHSA-5873-6fwq-463f
    Fix available
    Packages

    stellar-strkey

    Summary

    stellar-strkey vulnerable to panic in SignedPayload::from_payload

    Published
    25 Oct 2023
    OSV-2023-1063
    Fix available
    Packages

    libredwg

    Summary

    Heap-double-free in dwg_free_object

    Published
    25 Oct 2023
    OSV-2023-1062
    Fix available
    Packages

    matio

    Summary

    Heap-buffer-overflow in H5MM_xstrdup

    Published
    25 Oct 2023
    CVE-2023-5717
    Fix available
    Packages

    Summary

    Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

    Published
    25 Oct 2023
    USN-6440-3
    Fix available
    Packages

    linux-aws-hwe

    Summary

    linux-aws-hwe vulnerabilities

    Published
    25 Oct 2023
    USN-6435-2
    Fix available
    Packages

    openssl

    Summary

    openssl vulnerabilities

    Published
    25 Oct 2023
    SUSE-SU-2023:4201-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP4-RT_Update_1

    Summary

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    Published
    25 Oct 2023
    SUSE-SU-2023:4200-1
    Fix available
    Packages

    nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2, nghttp2-python, nghttp2, nghttp2-python

    Summary

    Security update for nghttp2

    Published
    25 Oct 2023
    SUSE-SU-2023:4199-1
    Fix available
    Packages

    nghttp2, nghttp2, nghttp2

    Summary

    Security update for nghttp2

    Published
    25 Oct 2023
    SUSE-SU-2023:4198-1
    Fix available
    Packages

    java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk

    Summary

    Security update for java-11-openjdk

    Published
    25 Oct 2023
    SUSE-RU-2023:4192-1
    Fix available
    Packages

    libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org

    Summary

    Recommended update for libssh2_org

    Published
    25 Oct 2023
    BELL-CVE-2023-5363
    Fix available
    Packages

    openssl, openssl, openssl, openssl

    Summary

    Published
    25 Oct 2023
    USN-6438-2
    Fix available
    Packages

    dotnet6, dotnet7

    Summary

    .Net regressions

    Published
    25 Oct 2023
    USN-6362-2
    Fix available
    Packages

    dotnet6, dotnet7

    Summary

    .Net regressions

    Published
    25 Oct 2023
    SUSE-SU-2023:4190-1
    Fix available
    Packages

    openssl-3, openssl-3

    Summary

    Security update for openssl-3

    Published
    25 Oct 2023
    SUSE-SU-2023:4189-1
    Fix available
    Packages

    openssl-3, openssl-3, openssl-3, openssl-3, openssl-3, openssl-3

    Summary

    Security update for openssl-3

    Published
    25 Oct 2023
    CVE-2023-46135
    Fix available
    Packages

    Summary

    Panic in SignedPayload::from_payload

    Published
    25 Oct 2023