Open Source Vulnerabilities

org.opensearch.plugin:opensearch-security, org.opensearch.plugin:opensearch-security

OpenSearch Issue with tenant read-only permissions

org.opensearch.plugin:opensearch-security, org.opensearch.plugin:opensearch-security

OpenSearch uncontrolled resource consumption

github.com/consensys/gnark

Plonk verifier KZG multi point verification

@seal-security/mongoose-fixed

Prototype Pollution in ali-security/mongoose

github.com/crewjam/saml

Cross-site Scripting via missing Binding syntax validation

mantisbt/mantisbt

MantisBT may disclose project names to unauthorized users

linux-azure

linux-azure vulnerabilities

nocodb

nocodb SQL Injection vulnerability

silverstripe/graphql, silverstripe/graphql, silverstripe/graphql, silverstripe/graphql, silverstripe/graphql

Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries

com.webauthn4j:webauthn4j-spring-security-core

WebAuthn4J Spring Security Improper signature counter value handling

nghttp2, nghttp2, nghttp2

Security update for nghttp2

conmon, conmon, conmon, conmon, conmon, conmon, conmon

Security update for conmon

buildah, buildah, buildah, buildah, buildah, buildah, buildah

Security update for buildah

buildah

Security update for buildah

suse-module-tools, suse-module-tools, suse-module-tools

Security update for suse-module-tools

samba, samba, samba, samba, samba, samba, samba, samba, samba

Security update for samba

libucl

Heap-buffer-overflow in ucl_hash_destroy

kernel-default, kernel-livepatch-SLE15-SP3_Update_37, kernel-default, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-zfcpdump, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-default, kernel-default-base, kernel-preempt, kernel-source, kernel-zfcpdump, kernel-default, kernel-default-base, kernel-default, kernel-default-base, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms

Security update for the Linux Kernel

apache-poi

Security exception in org.apache.poi.util.IOUtils.safelyAllocate

com.xwiki.identity-oauth:identity-oauth-ui

XWiki Identity Oauth Privilege escalation (PR)/remote code execution from login screen through unescaped URL parameter

github.com/kumahq/kuma, github.com/kumahq/kuma, github.com/kumahq/kuma, github.com/kumahq/kuma, github.com/kumahq/kuma

github.com/kumahq/kuma affected by CVE-2023-44487

github.com/gofiber/fiber/v2

Go Fiber CSRF Token Validation Vulnerability

github.com/gofiber/fiber/v2

CSRF Token Reuse Vulnerability

com.liferay:com.liferay.oauth2.provider.rest, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class

com.liferay:com.liferay.wiki.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget

com.liferay:com.liferay.layout.impl, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu

ghostscript, ghostscript

ghostscript vulnerability

samba

samba vulnerabilities

libcue

libcue vulnerability

python2.7, python2.7, python2.7

python2.7 vulnerability

curl

curl vulnerabilities