Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2023-29247
    Fix available
    Packages

    Summary

    Stored XSS on Apache Airflow

    Published
    8 May 2023
    CVE-2023-31039
    Fix available
    Packages

    Summary

    Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution

    Published
    8 May 2023
    CVE-2023-31038
    Fix available
    Packages

    Summary

    Apache Log4cxx: SQL injection when using ODBC appender

    Published
    8 May 2023
    USN-6059-1
    Fix available
    Packages

    erlang, erlang

    Summary

    erlang vulnerability

    Published
    8 May 2023
    CVE-2023-2534
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30018
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30257
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-29944
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-2513
    Fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-1094
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-2566
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    Published
    8 May 2023
    CVE-2023-30790
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30788
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30787
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30334
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30185
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30019
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-2583
    Fix available
    Packages

    Summary

    Code Injection in jsreport/jsreport

    Published
    8 May 2023
    CVE-2023-2478
    Fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-1031
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-30789
    No fix available
    Packages

    Summary

    Published
    8 May 2023
    CVE-2023-32233
    Fix available
    Packages

    ,

    Summary

    Published
    8 May 2023
    UBUNTU-CVE-2023-2430
    Fix available
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-azure-5.19, linux-azure-fde-5.19, linux-gcp-5.19, linux-hwe-5.19, linux-lowlatency-hwe-5.19, linux-oem-6.0, linux-oem-6.1, linux-riscv, linux-riscv-5.19, linux-starfive-5.19

    Summary

    Published
    8 May 2023
    UBUNTU-CVE-2023-21106
    Fix available
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-azure-5.19, linux-hwe-5.19, linux-lowlatency-hwe-5.19, linux-oem-6.0, linux-oem-6.1, linux-riscv

    Summary

    Published
    8 May 2023
    UBUNTU-CVE-2023-1999
    Fix available
    Packages

    libwebp, libwebp, libwebp, mozjs52, mozjs38, libwebp, mozjs68, mozjs52, libwebp, mozjs78, mozjs91, thunderbird, thunderbird, thunderbird, thunderbird, thunderbird

    Summary

    Published
    8 May 2023
    UBUNTU-CVE-2023-21102
    Fix available
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-gcp-5.15, linux-gke-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-azure-5.19, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    8 May 2023
    CVE-2023-2565
    No fix available
    Packages

    Summary

    Published
    7 May 2023
    OSV-2023-380
    Fix available
    Packages

    harfbuzz

    Summary

    UNKNOWN WRITE in bool OT::Layout::Common::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filt

    Published
    7 May 2023
    OSV-2023-379
    Fix available
    Packages

    harfbuzz

    Summary

    Heap-buffer-overflow in void sort_r_simple<>

    Published
    7 May 2023
    OSV-2023-377
    Fix available
    Packages

    harfbuzz

    Summary

    UNKNOWN WRITE in bool OT::Layout::Common::CoverageFormat2_4<OT::Layout::MediumTypes>::serialize<h

    Published
    7 May 2023
    OSV-2023-376
    Fix available
    Packages

    harfbuzz

    Summary

    UNKNOWN WRITE in OT::Layout::GPOS_impl::CursivePosFormat1::subset

    Published
    7 May 2023
    OSV-2023-375
    Fix available
    Packages

    hdf5

    Summary

    Heap-buffer-overflow in H5MM_memcpy

    Published
    7 May 2023
    GHSA-r3xc-prgr-mg9p
    Fix available
    Packages

    django, django, django

    Summary

    Django bypasses validation when using one form field to upload multiple files

    Published
    7 May 2023
    CVE-2023-32290
    No fix available
    Packages

    Summary

    Published
    7 May 2023
    DEBIAN-CVE-2023-31047
    Fix available
    Packages

    python-django, python-django, python-django

    Summary

    Published
    7 May 2023
    PYSEC-2023-61
    Fix available
    Packages

    django

    Summary

    Published
    7 May 2023
    CVE-2023-24400
    No fix available
    Packages

    Summary

    Published
    7 May 2023
    CVE-2023-2564
    Fix available
    Packages

    Summary

    OS Command Injection in sbs20/scanservjs

    Published
    7 May 2023
    CVE-2023-31047
    Fix available
    Packages

    Summary

    Published
    7 May 2023
    CVE-2023-25491
    No fix available
    Packages

    Summary

    Published
    6 May 2023
    MGASA-2023-0163
    Fix available
    Packages

    git

    Summary

    Updated git packages fix security vulnerability

    Published
    6 May 2023
    MGASA-2023-0162
    Fix available
    Packages

    parcellite

    Summary

    Updated parcellite packages fix security vulnerability

    Published
    6 May 2023
    MGASA-2023-0161
    Fix available
    Packages

    imagemagick, imagemagick

    Summary

    Updated imagemagick packages fix security vulnerability

    Published
    6 May 2023
    MGASA-2023-0160
    Fix available
    Packages

    virtualbox, kmod-virtualbox

    Summary

    Updated virtualbox packages fix security vulnerabilities

    Published
    6 May 2023
    MGASA-2023-0159
    Fix available
    Packages

    libfastjson

    Summary

    Updated libfastjson packages fix security vulnerability

    Published
    6 May 2023
    MGASA-2023-0158
    Fix available
    Packages

    avahi

    Summary

    Updated avahi packages fix security vulnerability

    Published
    6 May 2023
    MGASA-2023-0157
    Fix available
    Packages

    libxml2

    Summary

    Updated libxml2 packages fix security vulnerability

    Published
    6 May 2023
    OSV-2023-372
    Fix available
    Packages

    harfbuzz

    Summary

    UNKNOWN WRITE in hb_ot_layout_substitute_start

    Published
    6 May 2023
    OSV-2023-371
    No fix available
    Packages

    clamav

    Summary

    Memcpy-param-overlap in repeat

    Published
    6 May 2023
    OSV-2023-370
    No fix available
    Packages

    hdf5

    Summary

    Heap-buffer-overflow in H5FS__sect_link

    Published
    6 May 2023