Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    OSV-2022-847
    Fix available
    Packages

    c-blosc2

    Summary

    Heap-use-after-free in ndlz4_decompress

    Published
    6 Sept 2022
    GHSA-hhhw-99gj-p3c3
    Fix available
    Packages

    org.yaml:snakeyaml

    Summary

    snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

    Published
    6 Sept 2022
    GHSA-9w3m-gqgf-c4p9
    Fix available
    Packages

    org.yaml:snakeyaml

    Summary

    snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write

    Published
    6 Sept 2022
    GHSA-98wm-3w3q-mw94
    Fix available
    Packages

    org.yaml:snakeyaml

    Summary

    snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

    Published
    6 Sept 2022
    GHSA-c4r9-r8fh-9vj2
    Fix available
    Packages

    org.yaml:snakeyaml, be.cylab:snakeyaml, com.alipay.sofa.acts:acts-common-util, io.prometheus.jmx:jmx_prometheus_httpserver, io.prometheus.jmx:jmx_prometheus_httpserver_java6, org.testifyproject.external:external-snakeyaml, pl.droidsonroids.yaml:snakeyaml

    Summary

    snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write

    Published
    6 Sept 2022
    GHSA-c86f-9grv-pmqf
    Fix available
    Packages

    org.apache.iotdb:iotdb-grafana-connector

    Summary

    Apache IoTDB grafana-connector contains an interface without authorization

    Published
    6 Sept 2022
    GHSA-g6vm-3ch8-c6jq
    Fix available
    Packages

    org.apache.iotdb:iotdb-server, apache-iotdb

    Summary

    Apache IoTDB Session Fixation vulnerability

    Published
    6 Sept 2022
    CVE-2022-36067
    Fix available
    Packages

    Summary

    vm2 vulnerable to Sandbox Escape before v3.9.11

    Published
    6 Sept 2022
    CVE-2022-36040
    Fix available
    Packages

    Summary

    Rizin Out-of-bounds Write vulnerability in pyc/marshal.c

    Published
    6 Sept 2022
    CVE-2022-38530
    Fix available
    Packages

    Summary

    Published
    6 Sept 2022
    CVE-2022-36044
    Fix available
    Packages

    Summary

    Rizin Out-of-bounds Write vulnerability in Lua binary plugin

    Published
    6 Sept 2022
    CVE-2022-36043
    Fix available
    Packages

    Summary

    Rizin Double Free in bobj.c when using qnx binary plugin

    Published
    6 Sept 2022
    CVE-2022-36042
    Fix available
    Packages

    Summary

    Rizin Out-of-bounds Write vulnerability in dyld cache binary plugin

    Published
    6 Sept 2022
    CVE-2022-36041
    Fix available
    Packages

    Summary

    Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin

    Published
    6 Sept 2022
    DSA-5226-1
    Fix available
    Packages

    pcs

    Summary

    pcs - security update

    Published
    6 Sept 2022
    DSA-5225-1
    Fix available
    Packages

    chromium

    Summary

    chromium - security update

    Published
    6 Sept 2022
    DSA-5224-1
    Fix available
    Packages

    poppler

    Summary

    poppler - security update

    Published
    6 Sept 2022
    ALSA-2022:6358
    Fix available
    Packages

    open-vm-tools, open-vm-tools-desktop, open-vm-tools-sdmp, open-vm-tools-test

    Summary

    Important: open-vm-tools security update

    Published
    6 Sept 2022
    ALSA-2022:6357
    Fix available
    Packages

    open-vm-tools, open-vm-tools-desktop, open-vm-tools-sdmp

    Summary

    Important: open-vm-tools security update

    Published
    6 Sept 2022
    CVE-2022-3134
    Fix available
    Packages

    Summary

    Use After Free in vim/vim

    Published
    6 Sept 2022
    USN-5600-1
    Fix available
    Packages

    linux-hwe-5.4

    Summary

    linux-hwe-5.4 vulnerabilities

    Published
    5 Sept 2022
    USN-5599-1
    Fix available
    Packages

    linux-oracle

    Summary

    linux-oracle vulnerabilities

    Published
    5 Sept 2022
    USN-5598-1
    Fix available
    Packages

    linux-oracle

    Summary

    linux-oracle vulnerability

    Published
    5 Sept 2022
    USN-5597-1
    Fix available
    Packages

    linux-oracle

    Summary

    linux-oracle vulnerability

    Published
    5 Sept 2022
    CVE-2022-38367
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    SUSE-SU-2022:3080-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP3_Update_23

    Summary

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP3)

    Published
    5 Sept 2022
    CVE-2021-28398
    Fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-39838
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-31814
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-30331
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    PYSEC-2022-43064
    No fix available
    Packages

    pytigergraph

    Summary

    Published
    5 Sept 2022
    SUSE-SU-2022:3072-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP4_Update_1

    Summary

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)

    Published
    5 Sept 2022
    SUSE-SU-2022:3064-1
    Fix available
    Packages

    kgraft-patch-SLE12-SP5_Update_34, kernel-livepatch-SLE15_Update_32, kernel-livepatch-SLE15-SP1_Update_33

    Summary

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1)

    Published
    5 Sept 2022
    SUSE-SU-2022:3030-1
    Fix available
    Packages

    MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE, MozillaFirefox, MozillaFirefox-branding-SLE

    Summary

    Security update for MozillaFirefox

    Published
    5 Sept 2022
    SUSE-SU-2022:3029-1
    Fix available
    Packages

    389-ds, 389-ds

    Summary

    Security update for 389-ds

    Published
    5 Sept 2022
    CVE-2022-3122
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-3121
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-2775
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-2657
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-2597
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-2565
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-2543
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-2271
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-2083
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    CVE-2022-3127
    Fix available
    Packages

    Summary

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Published
    5 Sept 2022
    CVE-2022-2376
    Fix available
    Packages

    Summary

    Directorist < 7.3.1 - Unauthenticated Email Address Disclosure

    Published
    5 Sept 2022
    CVE-2022-2830
    No fix available
    Packages

    Summary

    Published
    5 Sept 2022
    DEBIAN-CVE-2022-38752
    Fix available
    Packages

    snakeyaml, snakeyaml, snakeyaml

    Summary

    Published
    5 Sept 2022
    DEBIAN-CVE-2022-38751
    Fix available
    Packages

    snakeyaml, snakeyaml, snakeyaml

    Summary

    Published
    5 Sept 2022
    DEBIAN-CVE-2022-38750
    Fix available
    Packages

    snakeyaml, snakeyaml, snakeyaml

    Summary

    Published
    5 Sept 2022