Open Source Vulnerabilities

librenms/librenms

SQL injection in librenms/librenms

linux, linux

linux, linux

kernel

CVE-2023-40791 affecting package kernel for versions less than 5.15.135.1-2

kernel

CVE-2023-45898 affecting package kernel for versions less than 5.15.135.1-2

linux-lts

CVE-2023-40791 does not affect BellSoft software

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-azure-5.19, linux-azure-fde-5.19, linux-gcp-5.19, linux-hwe-5.19, linux-lowlatency-hwe-5.19, linux-oem-5.17, linux-oem-6.0, linux-riscv, linux-riscv-5.19, linux-starfive-5.19

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.5, linux-azure-5.19, linux-azure-6.5, linux-azure-fde-5.19, linux-gcp-5.19, linux-hwe-5.19, linux-intel-iot-realtime, linux-lowlatency-hwe-5.19, linux-nvidia-6.5, linux-oem-5.17, linux-oem-6.0, linux-oem-6.5, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-raspi, linux-raspi-realtime

pleroma

Pleroma Path Traversal vulnerability

SQL Injection in librenms/librenms

aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet-apphost-pack-7.0, dotnet-host, dotnet-hostfxr-7.0, dotnet-runtime-7.0, dotnet-sdk-7.0, dotnet-sdk-7.0-source-built-artifacts, dotnet-targeting-pack-7.0, dotnet-templates-7.0, netstandard-targeting-pack-2.1

Important: .NET 7.0 security update

go-toolset, golang, golang-bin, golang-docs, golang-misc, golang-race, golang-src, golang-tests

Important: go-toolset and golang security and bug fix update

delve, go-toolset, golang, golang-bin, golang-docs, golang-misc, golang-race, golang-src, golang-tests

Important: go-toolset:rhel8 security update

nginx, nginx-all-modules, nginx-filesystem, nginx-mod-devel, nginx-mod-http-image-filter, nginx-mod-http-perl, nginx-mod-http-xslt-filter, nginx-mod-mail, nginx-mod-stream

Moderate: nginx:1.22 security update

nginx, nginx-all-modules, nginx-filesystem, nginx-mod-devel, nginx-mod-http-image-filter, nginx-mod-http-perl, nginx-mod-http-xslt-filter, nginx-mod-mail, nginx-mod-stream

Moderate: nginx:1.20 security update

nginx, nginx-all-modules, nginx-core, nginx-filesystem, nginx-mod-devel, nginx-mod-http-image-filter, nginx-mod-http-perl, nginx-mod-http-xslt-filter, nginx-mod-mail, nginx-mod-stream

Moderate: nginx security update

aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-sdk-6.0-source-built-artifacts, dotnet-targeting-pack-6.0, dotnet-templates-6.0

Important: dotnet6.0 security update

aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet, dotnet-apphost-pack-7.0, dotnet-host, dotnet-hostfxr-7.0, dotnet-runtime-7.0, dotnet-sdk-7.0, dotnet-sdk-7.0-source-built-artifacts, dotnet-targeting-pack-7.0, dotnet-templates-7.0, netstandard-targeting-pack-2.1

Important: dotnet7.0 security update

aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-sdk-6.0-source-built-artifacts, dotnet-targeting-pack-6.0, dotnet-templates-6.0

Important: dotnet6.0 security update

node-babel7, node-babel7

node-babel7 - security update

nghttp2

nghttp2 - security update

poppler

poppler - security update

tomcat9

tomcat9 - regression update

selenium

NULL Pointer Dereference in seleniumhq/selenium

kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversal

urllib3

Authorization Header forwarded on redirect

python-urllib3, python-urllib3, python-urllib3

CVE-2018-25091 does not affect BellSoft software