Open Source Vulnerabilities

qt5-qtbase

qt5-qtbase security update

kernel

kernel security update

fwupd, fwupd, fwupd

fwupd security update

uboot-tools

uboot-tools security update

shim, shim, shim

shim security update

golang

golang security update

raptor2, raptor2, raptor2

raptor2 security update

Code Injection in hestiacp/hestiacp

wavpack, wavpack, wavpack

Security update for wavpack

wavpack, wavpack, wavpack, wavpack, wavpack, wavpack

Security update for wavpack

buildah, buildah

Security update for buildah

Incorrect Privilege Assignment in hestiacp/hestiacp

libz-mingw-w64, libz-mingw-w64, libz-mingw-w64, zlib, zlib, zlib

zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib, zlib-ng, zlib-ng

ogdi

CVE-2022-37434 affecting package ogdi 4.1.1-3

gpsbabel

CVE-2022-37434 affecting package gpsbabel 1.8.0-4

clucene

CVE-2022-37434 affecting package clucene 2.3.3.4-40

fltk

CVE-2022-37434 affecting package fltk 1.3.8-1

deltarpm

CVE-2022-37434 affecting package deltarpm 3.6.5-2

openjpeg2

CVE-2022-37434 affecting package openjpeg2 2.3.1-12

crash

CVE-2022-37434 affecting package crash for versions less than 8.0.4-2

teckit

CVE-2022-37434 affecting package teckit for versions less than 2.5.12-4

gdal

CVE-2022-37434 affecting package gdal 3.6.3-2

cloud-hypervisor-cvm

CVE-2022-37434 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1

ogdi

CVE-2022-37434 affecting package ogdi 4.1.0-9

zlib

CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2

klibc, zlib, klibc, rsync, zlib, rsync, zlib, klibc, klibc, rsync, zlib, klibc, zlib, klibc

Arbitrary Command Injection

hashed password of the user who created or revoked the link disclosure in Slack version between April 17, 2017 and July 17, 2022

mruby

Heap-buffer-overflow in udiv

org.apache.jspwiki:jspwiki-main

Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp

org.apache.jspwiki:jspwiki-main

Apache JSPWiki CSRF due to crafted invocation on the Image plugin

org.apache.jspwiki:jspwiki-main

Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp

org.apache.jspwiki:jspwiki-main

Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369

org.apache.jspwiki:jspwiki-main

Apache JSPWiki XSS due to crafted request in WeblogPlugin

org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common

Apache Hadoop argument injection vulnerability

raneto

Raneto v0.17.0 employs weak password complexity requirements

raneto

Raneto vulnerable to Cross-site Scripting

raneto

Raneto Denial of Service via crafted payload injected into `Search` parameter

toolchain

Remote command execution via "go get" with "-u" flag in cmd/go

Ability to bypass attestation verification in sigstore PolicyController

Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG

Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG