Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    OESA-2022-1902
    Fix available
    Packages

    unzip, unzip, unzip

    Summary

    unzip security update

    Published
    9 Sept 2022
    OESA-2022-1903
    Fix available
    Packages

    ImageMagick, ImageMagick, ImageMagick

    Summary

    ImageMagick security update

    Published
    9 Sept 2022
    OESA-2022-1904
    Fix available
    Packages

    sudo, sudo, sudo

    Summary

    sudo security update

    Published
    9 Sept 2022
    OESA-2022-1905
    Fix available
    Packages

    samba

    Summary

    samba security update

    Published
    9 Sept 2022
    OESA-2022-1906
    Fix available
    Packages

    poppler, poppler, poppler

    Summary

    poppler security update

    Published
    9 Sept 2022
    USN-5181-1
    Fix available
    Packages

    jqueryui, jqueryui, jqueryui

    Summary

    jqueryui vulnerability

    Published
    9 Sept 2022
    CVE-2022-2528
    No fix available
    Packages

    Summary

    Published
    9 Sept 2022
    CVE-2022-29061
    No fix available
    Packages

    Summary

    Published
    9 Sept 2022
    SUSE-SU-2022:3225-1
    Fix available
    Packages

    mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

    Summary

    Security update for mariadb

    Published
    9 Sept 2022
    CVE-2022-2925
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in appwrite/appwrite

    Published
    9 Sept 2022
    Packages

    linux, linux, linux

    Summary

    Published
    9 Sept 2022
    CVE-2022-40305
    No fix available
    Packages

    Summary

    Published
    9 Sept 2022
    CVE-2022-25765
    No fix available
    Packages

    Summary

    Published
    9 Sept 2022
    AZL-10904
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-40307 affecting package kernel for versions less than 5.15.70.1-1

    Published
    9 Sept 2022
    Packages

    linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux-hwe-edge, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    9 Sept 2022
    DEBIAN-CVE-2022-40299
    No fix available
    Packages

    singular, singular, singular

    Summary

    Published
    9 Sept 2022
    UBUNTU-CVE-2022-40299
    No fix available
    Packages

    singular, singular, singular, singular, singular, singular, singular, singular

    Summary

    Published
    9 Sept 2022
    CVE-2022-40299
    Fix available
    Packages

    Summary

    Published
    9 Sept 2022
    CVE-2022-40297
    No fix available
    Packages

    Summary

    Published
    9 Sept 2022
    OSV-2022-867
    No fix available
    Packages

    wireshark

    Summary

    Heap-buffer-overflow in get_utf_8_string

    Published
    9 Sept 2022
    OSV-2022-866
    Fix available
    Packages

    ghostscript

    Summary

    Stack-buffer-underflow in gs_type2_interpret

    Published
    9 Sept 2022
    OSV-2022-865
    Fix available
    Packages

    xstream

    Summary

    Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

    Published
    9 Sept 2022
    GHSA-w45j-f5g5-w94x
    Fix available
    Packages

    org.apache.james:james-server, org.apache.james:james-server

    Summary

    Apache James vulnerable to buffering attack

    Published
    9 Sept 2022
    GHSA-936v-cg49-m2g5
    Fix available
    Packages

    com.google.cloud.tools:jib-core

    Summary

    com.google.cloud.tools:jib-core vulnerable to Remote Code Execution (RCE)

    Published
    9 Sept 2022
    GHSA-m379-x4xc-38x9
    Fix available
    Packages

    rdiffweb

    Summary

    rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames

    Published
    9 Sept 2022
    OSV-2022-864
    Fix available
    Packages

    hunspell

    Summary

    Heap-buffer-overflow in SuggestMgr::badcharkey_utf

    Published
    9 Sept 2022
    CVE-2022-38266
    Fix available
    Packages

    Summary

    Published
    9 Sept 2022
    CVE-2022-36087
    Fix available
    Packages

    Summary

    OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI

    Published
    9 Sept 2022
    CVE-2022-2526
    Fix available
    Packages

    Summary

    Published
    9 Sept 2022
    DLA-3101-1
    Fix available
    Packages

    libxslt

    Summary

    libxslt - security update

    Published
    9 Sept 2022
    CVE-2022-40307
    Fix available
    Packages

    Summary

    Published
    9 Sept 2022
    PSF-2022-4
    Fix available
    Packages

    Summary

    Prevent DoS by large str-int conversions

    Published
    9 Sept 2022
    CVE-2019-25076
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    DEBIAN-CVE-2019-25076
    No fix available
    Packages

    openvswitch, openvswitch, openvswitch

    Summary

    Published
    8 Sept 2022
    AZL-10905
    Fix available
    Packages

    openvswitch

    Summary

    CVE-2019-25076 affecting package openvswitch for versions less than 2.17.5-1

    Published
    8 Sept 2022
    UBUNTU-CVE-2019-25076
    No fix available
    Packages

    openvswitch, openvswitch, openvswitch, openvswitch, openvswitch, openvswitch, openvswitch, openvswitch

    Summary

    Published
    8 Sept 2022
    UBUNTU-CVE-2022-40281
    No fix available
    Packages

    0ad, 0ad, 0ad, 0ad, 0ad, 0ad, 0ad, 0ad

    Summary

    Published
    8 Sept 2022
    CVE-2022-36084
    Fix available
    Packages

    Summary

    cruddl vulnerable to AQL injection through flexSearch

    Published
    8 Sept 2022
    CVE-2022-38269
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    CVE-2022-38268
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    CVE-2022-38267
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    CVE-2022-38265
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    USN-5604-1
    Fix available
    Packages

    tiff, tiff

    Summary

    tiff vulnerabilities

    Published
    8 Sept 2022
    CVE-2022-36100
    Fix available
    Packages

    Summary

    XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection

    Published
    8 Sept 2022
    CVE-2022-40280
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    CVE-2022-40278
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    CVE-2022-40279
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    CVE-2022-40281
    No fix available
    Packages

    Summary

    Published
    8 Sept 2022
    CVE-2022-36098
    Fix available
    Packages

    Summary

    XWiki Platform Mentions UI vulnerable to Cross-site Scripting

    Published
    8 Sept 2022
    CVE-2022-36099
    Fix available
    Packages

    Summary

    XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability

    Published
    8 Sept 2022