Open Source Vulnerabilities

Incorrect Conversion between Numeric Types in Besu Ethereum Client

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph

kgraft-patch-SLE12-SP5_Update_29, kgraft-patch-SLE12-SP5_Update_31, kgraft-patch-SLE12-SP5_Update_29, kgraft-patch-SLE12-SP5_Update_31, kernel-livepatch-SLE15-SP1_Update_28, kernel-livepatch-SLE15-SP1_Update_30, kernel-livepatch-SLE15-SP1_Update_28, kernel-livepatch-SLE15-SP1_Update_30

Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1)

Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices

ghostscript

Heap-use-after-free in s_file_write_flush

exiv2

Heap-buffer-overflow in Exiv2::MemIo::read

dng_sdk

Stack-use-after-scope in RefCopyBytes

perfetto

UNKNOWN WRITE in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

javaparser

Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

kgraft-patch-SLE12-SP4_Update_30, kernel-livepatch-SLE15_Update_30, kernel-livepatch-SLE15_Update_32, kernel-livepatch-SLE15_Update_30, kernel-livepatch-SLE15_Update_32

Security update for the Linux Kernel (Live Patch 32 for SLE 15)

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-3278 affecting package vim for versions less than 9.0.0614-1

vim

pallet-ethereum

Weight not properly refunded after EVM execution

github.com/mohammed90/caddy-ssh

Caddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library

protobuf, protobuf, protobuf, protobuf

protobuf-cpp and protobuf-python have potential Denial of Service issue

org.hyperledger.besu:evm

Besu VM vulnerable to gas allocation error in CALL operations

,

webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit

kernel-livepatch-SLE15_Update_28

Security update for the Linux Kernel (Live Patch 28 for SLE 15)