Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    SUSE-SU-2023:0426-1
    Fix available
    Packages

    git, git, git, git, git, git, git, git, git, git

    Summary

    Security update for git

    Published
    15 Feb 2023
    GHSA-px8h-6qxv-m22q
    Fix available
    Packages

    werkzeug

    Summary

    Incorrect parsing of nameless cookies leads to __Host- cookies bypass

    Published
    15 Feb 2023
    GHSA-xg9f-g7g7-2323
    Fix available
    Packages

    werkzeug

    Summary

    High resource usage when parsing multipart form data with many fields

    Published
    15 Feb 2023
    SUSE-SU-2023:0425-1
    Fix available
    Packages

    curl, curl, curl

    Summary

    Security update for curl

    Published
    15 Feb 2023
    GHSA-9j65-3f2q-8q2r
    Fix available
    Packages

    org.jenkins-ci.plugins:pipeline-build-step

    Summary

    Cross-site Scripting in Jenkins Pipeline: Build Step Plugin

    Published
    15 Feb 2023
    GHSA-h97r-fchm-m23x
    Fix available
    Packages

    org.jenkins-ci.plugins:email-ext

    Summary

    Cross-site Scripting in Jenkins Email Extension Plugin

    Published
    15 Feb 2023
    GHSA-p2fr-mq9m-6w6p
    Fix available
    Packages

    org.jenkins-ci.plugins:email-ext

    Summary

    Cross-site Scripting in Jenkins Email Extension Plugin

    Published
    15 Feb 2023
    GHSA-ph74-8rgx-64c5
    Fix available
    Packages

    org.jenkins-ci.plugins:junit

    Summary

    Cross-site Scripting in Jenkins JUnit Plugin

    Published
    15 Feb 2023
    GHSA-7j55-28qq-676g
    Fix available
    Packages

    org.jenkins-ci.plugins:azure-credentials

    Summary

    Missing Authorization in Jenkins Azure Credentials Plugin

    Published
    15 Feb 2023
    GHSA-c9c2-wcxh-3w5j
    Fix available
    Packages

    org.jenkins-ci.plugins:email-ext

    Summary

    Sandbox escape in Jenkins Email Extension Plugin

    Published
    15 Feb 2023
    GHSA-px2r-cmr2-phw7
    Fix available
    Packages

    org.jenkins-ci.plugins:azure-credentials

    Summary

    Missing Authorization in Jenkins Azure Credentials Plugin

    Published
    15 Feb 2023
    GHSA-rr93-7c6x-8v4v
    Fix available
    Packages

    org.jenkins-ci.plugins:azure-credentials

    Summary

    Cross-Site Request Forgery in Jenkins Azure Credentials Plugin

    Published
    15 Feb 2023
    CVE-2023-25192
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25191
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    PYSEC-2023-49
    Fix available
    Packages

    starlite

    Summary

    Published
    15 Feb 2023
    CVE-2023-25578
    Fix available
    Packages

    Summary

    Starlite DoS vulnerability when parsing multipart request body

    Published
    15 Feb 2023
    SUSE-SU-2023:0424-1
    Fix available
    Packages

    ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick

    Summary

    Security update for ImageMagick

    Published
    15 Feb 2023
    CVE-2023-25768
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25767
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25766
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25765
    Fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25764
    Fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25763
    Fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25762
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2023-25761
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    DEBIAN-CVE-2023-0841
    No fix available
    Packages

    gpac

    Summary

    Published
    15 Feb 2023
    CVE-2023-0840
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2022-32477
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2022-32475
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2022-32469
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    UBUNTU-CVE-2023-0841
    No fix available
    Packages

    gpac, gpac, gpac, gpac, gpac, gpac

    Summary

    Published
    15 Feb 2023
    CVE-2023-0841
    Fix available
    Packages

    Summary

    GPAC reframe_mp3.c mp3_dmx_process heap-based overflow

    Published
    15 Feb 2023
    OSV-2023-61
    Fix available
    Packages

    libxml2

    Summary

    Heap-buffer-overflow in xmlParseTryOrFinish

    Published
    15 Feb 2023
    OSV-2023-60
    No fix available
    Packages

    spring-boot

    Summary

    Security exception in org.json.JSONTokener.nextValue

    Published
    15 Feb 2023
    USN-5872-1
    Fix available
    Packages

    nss, nss

    Summary

    nss vulnerabilities

    Published
    15 Feb 2023
    SUSE-SU-2023:0423-1
    Fix available
    Packages

    aws-efs-utils, aws-efs-utils, aws-efs-utils, aws-efs-utils, aws-efs-utils

    Summary

    Security update for aws-efs-utils

    Published
    15 Feb 2023
    GHSA-vf8h-2wwj-jq22
    Fix available
    Packages

    org.apache.shenyu:shenyu-admin

    Summary

    Privilege escalation in Apache ShenYu

    Published
    15 Feb 2023
    SUSE-SU-2023:0421-1
    Fix available
    Packages

    ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick, ImageMagick

    Summary

    Security update for ImageMagick

    Published
    15 Feb 2023
    SUSE-SU-2023:0420-1
    Fix available
    Packages

    kernel-default, kernel-source, kernel-syms

    Summary

    Security update for the Linux Kernel

    Published
    15 Feb 2023
    SUSE-SU-2023:0419-1
    Fix available
    Packages

    nodejs18, nodejs18, nodejs18

    Summary

    Security update for nodejs18

    Published
    15 Feb 2023
    SUSE-SU-2023:0418-1
    Fix available
    Packages

    git, git, git, git, git, git, git, git

    Summary

    Security update for git

    Published
    15 Feb 2023
    Packages

    phpMyAdmin, phpMyAdmin

    Summary

    Security update for phpMyAdmin

    Published
    15 Feb 2023
    CVE-2022-45154
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    CVE-2022-45153
    No fix available
    Packages

    Summary

    Published
    15 Feb 2023
    SUSE-SU-2023:0416-1
    Fix available
    Packages

    kernel-default, kernel-ec2, kernel-source, kernel-syms, kernel-trace, kernel-xen

    Summary

    Security update for the Linux Kernel

    Published
    15 Feb 2023
    CVE-2022-42735
    No fix available
    Packages

    Summary

    Apache ShenYu Admin ultra vires

    Published
    15 Feb 2023
    CURL-CVE-2023-23914
    Fix available
    Packages

    Summary

    HSTS ignored on multiple requests

    Published
    15 Feb 2023
    CURL-CVE-2023-23916
    Fix available
    Packages

    Summary

    HTTP multi-header compression denial of service

    Published
    15 Feb 2023
    CURL-CVE-2023-23915
    Fix available
    Packages

    Summary

    HSTS amnesia with --parallel

    Published
    15 Feb 2023
    GHSA-9w8x-5hv5-r6gw
    Fix available
    Packages

    github.com/usememos/memos

    Summary

    Cross Site Scripting in usememos/memos

    Published
    15 Feb 2023