Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    RUSTSEC-2022-0087
    Fix available
    Packages

    slack-morphism

    Summary

    Slack Webhooks secrets leak in debug logs

    Published
    10 Oct 2022
    SUSE-SU-2022:3553-1
    Fix available
    Packages

    python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python-base

    Summary

    Security update for python

    Published
    10 Oct 2022
    USN-5662-1
    Fix available
    Packages

    libonig, libonig, libonig

    Summary

    libonig vulnerabilities

    Published
    10 Oct 2022
    DEBIAN-CVE-2022-42012
    Fix available
    Packages

    dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    ALPINE-CVE-2022-42012
    Fix available
    Packages

    dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    ALPINE-CVE-2022-42011
    Fix available
    Packages

    dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    DEBIAN-CVE-2022-42011
    Fix available
    Packages

    dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    ALPINE-CVE-2022-42010
    Fix available
    Packages

    dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    DEBIAN-CVE-2022-42010
    Fix available
    Packages

    dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    AZL-11093
    Fix available
    Packages

    dbus

    Summary

    CVE-2022-42012 affecting package dbus for versions less than 1.15.2-2

    Published
    10 Oct 2022
    AZL-11092
    Fix available
    Packages

    dbus

    Summary

    CVE-2022-42011 affecting package dbus for versions less than 1.15.2-2

    Published
    10 Oct 2022
    AZL-11091
    Fix available
    Packages

    dbus

    Summary

    CVE-2022-42010 affecting package dbus for versions less than 1.15.2-2

    Published
    10 Oct 2022
    UBUNTU-CVE-2022-42012
    Fix available
    Packages

    dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    UBUNTU-CVE-2022-42011
    Fix available
    Packages

    dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    UBUNTU-CVE-2022-42010
    Fix available
    Packages

    dbus, dbus, dbus, dbus, dbus

    Summary

    Published
    10 Oct 2022
    CVE-2022-42725
    Fix available
    Packages

    Summary

    Published
    10 Oct 2022
    CVE-2022-42724
    Fix available
    Packages

    Summary

    Published
    10 Oct 2022
    CVE-2022-40257
    Fix available
    Packages

    Summary

    An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

    Published
    10 Oct 2022
    CVE-2022-39292
    Fix available
    Packages

    Summary

    Exposure of sensitive Slack webhook URLs in debug logs and traces

    Published
    10 Oct 2022
    CVE-2022-39288
    Fix available
    Packages

    Summary

    Denial of service in Fastify via Content-Type header

    Published
    10 Oct 2022
    CVE-2022-3438
    Fix available
    Packages

    Summary

    Open Redirect in ikus060/rdiffweb

    Published
    10 Oct 2022
    CVE-2022-3433
    Fix available
    Packages

    Summary

    Published
    10 Oct 2022
    DLA-3143-1
    Fix available
    Packages

    strongswan

    Summary

    strongswan - security update

    Published
    10 Oct 2022
    DLA-3142-1
    Fix available
    Packages

    dbus

    Summary

    dbus - security update

    Published
    10 Oct 2022
    DLA-3141-1
    Fix available
    Packages

    wordpress

    Summary

    wordpress - security update

    Published
    10 Oct 2022
    DLA-3144-1
    Fix available
    Packages

    connman

    Summary

    connman - security update

    Published
    10 Oct 2022
    CVE-2022-40248
    Fix available
    Packages

    Summary

    An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4

    Published
    10 Oct 2022
    UBUNTU-CVE-2022-3424
    Fix available
    Packages

    linux-azure, linux, linux-aws, linux-lts-xenial, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-hwe-edge, linux-kvm, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-5.19, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    10 Oct 2022
    CVE-2022-36063
    Fix available
    Packages

    Summary

    USBX Host CDC ECM integer underflow with buffer overflow

    Published
    10 Oct 2022
    DEBIAN-CVE-2022-42703
    Fix available
    Packages

    linux, linux, linux

    Summary

    Published
    9 Oct 2022
    AZL-11094
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-42703 affecting package kernel for versions less than 5.15.74.1-3

    Published
    9 Oct 2022
    UBUNTU-CVE-2022-42703
    Fix available
    Packages

    linux, linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    9 Oct 2022
    GSD-2022-1006614
    No fix available
    Packages

    Kernel

    Summary

    mm/slub: fix to return errno if kmalloc() fails

    Published
    9 Oct 2022
    GSD-2022-1006613
    No fix available
    Packages

    Kernel

    Summary

    ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header

    Published
    9 Oct 2022
    GSD-2022-1006612
    No fix available
    Packages

    Kernel

    Summary

    s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

    Published
    9 Oct 2022
    GSD-2022-1006611
    No fix available
    Packages

    Kernel

    Summary

    mm/slub: fix to return errno if kmalloc() fails

    Published
    9 Oct 2022
    GSD-2022-1006610
    No fix available
    Packages

    Kernel

    Summary

    ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header

    Published
    9 Oct 2022
    GSD-2022-1006609
    No fix available
    Packages

    Kernel

    Summary

    netfilter: ebtables: fix memory leak when blob is malformed

    Published
    9 Oct 2022
    GSD-2022-1006608
    No fix available
    Packages

    Kernel

    Summary

    s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

    Published
    9 Oct 2022
    GSD-2022-1006607
    No fix available
    Packages

    Kernel

    Summary

    mm/slub: fix to return errno if kmalloc() fails

    Published
    9 Oct 2022
    GSD-2022-1006606
    No fix available
    Packages

    Kernel

    Summary

    ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header

    Published
    9 Oct 2022
    GSD-2022-1006605
    No fix available
    Packages

    Kernel

    Summary

    netfilter: ebtables: fix memory leak when blob is malformed

    Published
    9 Oct 2022
    GSD-2022-1006604
    No fix available
    Packages

    Kernel

    Summary

    s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

    Published
    9 Oct 2022
    GSD-2022-1006603
    No fix available
    Packages

    Kernel

    Summary

    mm/slub: fix to return errno if kmalloc() fails

    Published
    9 Oct 2022
    GSD-2022-1006602
    No fix available
    Packages

    Kernel

    Summary

    netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

    Published
    9 Oct 2022
    GSD-2022-1006601
    No fix available
    Packages

    Kernel

    Summary

    ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header

    Published
    9 Oct 2022
    GSD-2022-1006600
    No fix available
    Packages

    Kernel

    Summary

    net/sched: taprio: avoid disabling offload when it was never enabled

    Published
    9 Oct 2022
    GSD-2022-1006599
    No fix available
    Packages

    Kernel

    Summary

    netfilter: ebtables: fix memory leak when blob is malformed

    Published
    9 Oct 2022
    GSD-2022-1006598
    No fix available
    Packages

    Kernel

    Summary

    net: sched: fix possible refcount leak in tc_new_tfilter()

    Published
    9 Oct 2022
    GSD-2022-1006597
    No fix available
    Packages

    Kernel

    Summary

    s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

    Published
    9 Oct 2022