Open Source Vulnerabilities

curl

curl, curl, curl, curl, curl

curl, curl, curl

Heap-based Buffer Overflow in vim/vim

NULL Pointer Dereference in vim/vim

vim, vim, vim

vim

CVE-2022-2206 affecting package vim for versions less than 8.2.5172-1

CVE-2022-2206 does not affect BellSoft software

vim, vim, vim, vim, vim

linux, linux, linux

linux, linux, linux

kernel

CVE-2022-34494 affecting package kernel for versions less than 5.15.55.1-1

kernel

CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-gcp-5.15, linux-gke-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-gcp-5.15, linux-gke-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

c-blosc2

UNKNOWN READ in zfp_getcell

yara

Heap-buffer-overflow in read_blob_signed

libcoap

Heap-buffer-overflow in coap_split_uri_sub

openssl, openssl

openssl - security update

libsndfile

libsndfile - security update

maven-shared-utils

maven-shared-utils - security update

Out-of-bounds Read in vim/vim

wdiff, wdiff

Security update for wdiff

dbus-broker, dbus-broker

Security update for dbus-broker

clipboard

clipboard is Unmaintained

Expression Always True vulnerability in Zulip Server

Argo CD vulnerable to Uncontrolled Memory Consumption

salt, salt, salt

Salt's PAM auth fails to reject locked accounts

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

CloudCore UDS Server: Malicious Message can crash CloudCore

jsrsasign

JWS and JWT signature validation vulnerability with special characters

github.com/cloudflare/cfrpki

Path traversal mitigation bypass in OctoRPKI

prestashop/blockwishlist

BlockWishList SQL Injection vulnerability

github.com/kubeedge/kubeedge, github.com/kubeedge/kubeedge

CloudCore CSI Driver: Malicious response from KubeEdge can crash CSI Driver controller server

Cross Site Scripting in Wire Messages

Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

ghostscript

Heap-use-after-free in psi_device_ref_finalize

concrete5/core, concrete5/core

Path traversal in Concrete CMS

concrete5/core, concrete5/core

Cross site scripting in Concrete CMS

rails-html-sanitizer

Rails::Html::Sanitizer vulnerable to Cross-site Scripting

concrete5/core, concrete5/core

Code injection in concrete CMS

mantisbt/mantisbt

MantisBT XSS through crafted SVG documents in file_download.php

deep-get-set

Prototype Pollution in deep-get-set