Open Source Vulnerabilities

lcms

Heap-use-after-free in cmsFreeNamedColorList

ghostscript

Heap-buffer-overflow in Ins_NPUSHB

exotel

exotel-py includes code execution backdoor inserted by a third party

pcl

UNKNOWN READ in pcl::PLYReader::read

Use After Free in vim/vim

puma

puma - security update

mariadb-10.5

mariadb-10.0, mariadb-10.1, mariadb-10.3, mariadb-10.6

CVE-2022-38791 does not affect BellSoft software

exotel

varnish, varnish

Security update for varnish

python-Django, python-Django

Security update for python-Django

freeciv, freeciv

Security update for freeciv

nim, nim

Security update for nim

schroot, schroot, schroot

tcpdump, tcpdump, tcpdump

tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump, tcpdump

exiv2

Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

mongoose, mongoose

Mongoose Vulnerable to Prototype Pollution in Schema Object

tomcat

Security exception in java.base/java.util.Arrays.copyOf

org.keycloak:keycloak-core

Keycloak has Files or Directories Accessible to External Parties

org.keycloak:keycloak-core

Duplicate Advisory: Keycloak user may register themselves with same email ID of any existing user

org.keycloak:keycloak-core

Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow

org.wildfly.core:wildfly-server, org.wildfly.core:wildfly-server

wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault

org.jboss.xnio:xnio-all

XNIO `notifyReadClosed` method logging message to unexpected end

deluge

Deluge Web-UI vulnerable to XSS through a crafted torrent file

keystone

Openstack Keystone Incorrect Authorization vulnerability

org.keycloak:keycloak-core

Keycloak XSS via use of malicious payload as group name when creating new group from admin console

org.zkoss.zk:zk, org.zkoss.zk:zk, org.zkoss.zk:zk, org.zkoss.zk:zk, org.zkoss.zk:zk

ZK Framework vulnerable to malicious POST

fluent-bit

Heap-double-free in read_config

dnsmasq

Heap-buffer-overflow in resize_packet

exim4

exim4 - security update

ndpi

ndpi - security update

webkit2gtk

webkit2gtk - security update

wpewebkit

wpewebkit - security update