Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2022-23006
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2021-41433
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    UBUNTU-CVE-2022-3303
    Fix available
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    27 Sept 2022
    BELL-CVE-2022-3303
    No fix available
    Packages

    Summary

    CVE-2022-3303 does not affect BellSoft software

    Published
    27 Sept 2022
    BELL-CVE-2022-3324
    No fix available
    Packages

    Summary

    CVE-2022-3324 does not affect BellSoft software

    Published
    27 Sept 2022
    UBUNTU-CVE-2022-39835
    No fix available
    Packages

    gajim, gajim, gajim, gajim

    Summary

    Published
    27 Sept 2022
    UBUNTU-CVE-2022-3324
    Fix available
    Packages

    vim, vim, vim, vim, vim

    Summary

    Published
    27 Sept 2022
    CVE-2021-27862
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2021-27861
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2021-27854
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2021-27853
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    USN-5644-1
    Fix available
    Packages

    linux-gcp-5.15

    Summary

    linux-gcp-5.15 vulnerabilities

    Published
    27 Sept 2022
    SUSE-SU-2022:3445-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP2_Update_19, kernel-livepatch-SLE15-SP2_Update_20, kernel-livepatch-SLE15-SP2_Update_25, kernel-livepatch-SLE15-SP2_Update_19, kernel-livepatch-SLE15-SP2_Update_20, kernel-livepatch-SLE15-SP2_Update_25, kernel-livepatch-SLE15-SP2_Update_19, kernel-livepatch-SLE15-SP2_Update_20, kernel-livepatch-SLE15-SP2_Update_25, kernel-livepatch-SLE15-SP3_Update_10

    Summary

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)

    Published
    27 Sept 2022
    GHSA-p6fh-xc6r-g5hw
    Fix available
    Packages

    github.com/brokercap/Bifrost

    Summary

    Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication

    Published
    27 Sept 2022
    SUSE-SU-2022:3441-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    27 Sept 2022
    SUSE-SU-2022:3440-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    27 Sept 2022
    GHSA-8fg9-p83m-x5pq
    Fix available
    Packages

    dparse

    Summary

    ReDoS issue in dparse

    Published
    27 Sept 2022
    CVE-2022-40816
    Fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2022-40817
    Fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2022-39258
    Fix available
    Packages

    Summary

    mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI

    Published
    27 Sept 2022
    CVE-2022-39256
    Fix available
    Packages

    Summary

    Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.

    Published
    27 Sept 2022
    CVE-2022-37209
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    SUSE-SU-2022:3439-1
    Fix available
    Packages

    flatpak, flatpak, flatpak, flatpak

    Summary

    Security update for flatpak

    Published
    27 Sept 2022
    CVE-2022-31367
    Fix available
    Packages

    Summary

    Published
    27 Sept 2022
    USN-5643-1
    Fix available
    Packages

    ghostscript, ghostscript, ghostscript

    Summary

    ghostscript vulnerabilities

    Published
    27 Sept 2022
    SUSE-SU-2022:3433-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP3_Update_11, kernel-livepatch-SLE15-SP3_Update_13, kernel-livepatch-SLE15-SP3_Update_11, kernel-livepatch-SLE15-SP3_Update_13

    Summary

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP3)

    Published
    27 Sept 2022
    SUSE-SU-2022:3432-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP3_Update_19

    Summary

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)

    Published
    27 Sept 2022
    OESA-2022-1964
    Fix available
    Packages

    mod_security_crs, mod_security_crs, mod_security_crs

    Summary

    mod_security_crs security update

    Published
    27 Sept 2022
    SUSE-SU-2022:3430-1
    Fix available
    Packages

    dpdk, dpdk, dpdk, dpdk, dpdk, dpdk, dpdk, dpdk

    Summary

    Security update for dpdk

    Published
    27 Sept 2022
    SUSE-SU-2022:3429-1
    Fix available
    Packages

    dpdk, dpdk-thunderx, dpdk, dpdk-thunderx, dpdk, dpdk, dpdk-thunderx, dpdk, dpdk, dpdk, dpdk, dpdk, dpdk-thunderx

    Summary

    Security update for dpdk

    Published
    27 Sept 2022
    SUSE-SU-2022:3428-1
    Fix available
    Packages

    libcaca, libcaca, libcaca

    Summary

    Security update for libcaca

    Published
    27 Sept 2022
    openSUSE-SU-2022:10131-1
    Fix available
    Packages

    opera

    Summary

    Security update for opera

    Published
    27 Sept 2022
    SUSE-SU-2022:3425-1
    Fix available
    Packages

    grafana

    Summary

    Security update for grafana

    Published
    27 Sept 2022
    SUSE-SU-2022:3424-1
    Fix available
    Packages

    kernel-livepatch-SLE15_Update_29

    Summary

    Security update for the Linux Kernel (Live Patch 29 for SLE 15)

    Published
    27 Sept 2022
    SUSE-SU-2022:3422-1
    Fix available
    Packages

    kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt

    Summary

    Security update for the Linux Kernel

    Published
    27 Sept 2022
    CVE-2022-40199
    Fix available
    Packages

    ,

    Summary

    Published
    27 Sept 2022
    CVE-2022-38975
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2022-41571
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    CVE-2022-41570
    No fix available
    Packages

    Summary

    Published
    27 Sept 2022
    OSV-2022-964
    Fix available
    Packages

    lcms

    Summary

    Use-of-uninitialized-value in cmsMLUgetASCII

    Published
    27 Sept 2022
    OSV-2022-963
    Fix available
    Packages

    janino

    Summary

    Security exception in org.codehaus.janino.Parser.parseConditionalExpression

    Published
    27 Sept 2022
    OSV-2022-962
    Fix available
    Packages

    xstream

    Summary

    Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

    Published
    27 Sept 2022
    OSV-2022-961
    Fix available
    Packages

    opensc

    Summary

    Heap-double-free in sc_pkcs15_encode_df

    Published
    27 Sept 2022
    GHSA-6hrg-qmvc-2xh8
    Fix available
    Packages

    joblib

    Summary

    joblib vulnerable to arbitrary code execution

    Published
    27 Sept 2022
    GHSA-grjp-4jmr-mjcw
    Fix available
    Packages

    express-xss-sanitizer

    Summary

    express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute

    Published
    27 Sept 2022
    GHSA-hrj7-f62f-j7x7
    Fix available
    Packages

    rdiffweb

    Summary

    rdiffweb allows unlimited length of root directory name, which could result in DoS

    Published
    27 Sept 2022
    GHSA-qq29-5vjh-vxwr
    Fix available
    Packages

    rdiffweb

    Summary

    rdiffweb vulnerable to Improper Cleanup on Thrown Exception

    Published
    27 Sept 2022
    GHSA-rv5q-72p2-2q24
    Fix available
    Packages

    centreon/centreon, centreon/centreon, centreon/centreon

    Summary

    Centreon contains cross-site scripting vulnerability via esc_name parameter

    Published
    27 Sept 2022
    GHSA-25gv-wg6f-6frp
    Fix available
    Packages

    centreon/centreon, centreon/centreon, centreon/centreon

    Summary

    Centreon SQL Injection vulnerability via esc_name parameter

    Published
    27 Sept 2022
    GHSA-qrj3-hrgj-fm7r
    Fix available
    Packages

    rdiffweb

    Summary

    rdiffweb's unlimited length email field can lead to DoS

    Published
    27 Sept 2022