Open Source Vulnerabilities

Arbitrary Code Execution

Command Injection

gimp

Updated gimp packages fix security vulnerability

webkit2

Updated webkit2 packages fix security vulnerability

logrotate

Updated logrotate packages fix security vulnerability

webmin

Updated webmin packages fix security vulnerability

mariadb

Updated mariadb packages fix security vulnerability

trojita

Updated trojita packages fix security vulnerability

gogs.io/gogs

Server-Side Request Forgery in gogs webhook

Possible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIO

Invite bypasses user approval in Discourse

adminer, adminer, adminer

adminer vulnerabilities

openvpn, openvpn

Security update for openvpn

hdf5_1_10_8-gnu-hpc, hdf5_1_10_8-gnu-mvapich2-hpc, hdf5_1_10_8-gnu-openmpi1-hpc, suse-hpc

Security update for hdf5, suse-hpc

chromium, chromium

Security update for chromium

patch, patch

Security update for patch

libmobi, libmobi, libmobi

libmobi

Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts

pdfresurrect, pdfresurrect, pdfresurrect, pdfresurrect

pdfresurrect vulnerabilities

Buffer Over-read in bfabiszewski/libmobi

bottle

Denial of service in bottle

SSCMS

Cross site scripting in SSCMS

net.mingsoft:ms-mcms

Code injection in MCMS

github.com/hashicorp/nomad, github.com/hashicorp/nomad, github.com/hashicorp/nomad

Privilege escalation in Hashicorp Nomad

flower

Flower OAuth authentication bypass

librenms/librenms

Command injection in librenms

librenms/librenms

Cross site scripting in librenms