Open Source Vulnerabilities

galera, Judy, mariadb

Moderate: mariadb:10.3 security and bug fix update

Judy, Judy, Judy, galera, galera, mariadb, mariadb, mariadb-backup, mariadb-backup, mariadb-common, mariadb-common, mariadb-devel, mariadb-devel, mariadb-embedded, mariadb-embedded, mariadb-embedded-devel, mariadb-embedded-devel, mariadb-errmsg, mariadb-errmsg, mariadb-gssapi-server, mariadb-gssapi-server, mariadb-oqgraph-engine, mariadb-oqgraph-engine, mariadb-server, mariadb-server, mariadb-server-galera, mariadb-server-galera, mariadb-server-utils, mariadb-server-utils, mariadb-test, mariadb-test

Moderate: mariadb:10.3 security and bug fix update

kernel-rt

Important: kernel-rt security and bug fix update

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Moderate: vim security update

vim

Moderate: vim security update

alsa-sof-firmware, alsa-sof-firmware-debug

alsa-sof-firmware bug fix and enhancement update

kernel

Important: kernel security and bug fix update

kernel-tools-libs-devel

Important: kernel security and bug fix update

NetworkManager-cloud-setup, NetworkManager-libnm-devel

NetworkManager bug fix and enhancement update

device-mapper-multipath-devel

device-mapper-multipath bug fix and enhancement update

python3-sanlock, sanlk-reset, sanlock, sanlock-devel

sanlock bug fix and enhancement update

polkit, polkit-devel, polkit-docs, polkit-libs

Moderate: polkit security update

polkit

Moderate: polkit security update

mingw32-glib2, mingw32-glib2-static, mingw64-glib2, mingw64-glib2-static

mingw-glib2 bug fix and enhancement update

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-kvm, linux-lowlatency, linux-oracle

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-kvm, linux-lowlatency vulnerabilities

com.adobe.acs:acs-aem-commons

Page Compare Reflected Cross-site Scripting (XSS) vulnerability

openjdk-17, openjdk-17, openjdk-17

openjdk-17 vulnerabilities

openjdk-lts, openjdk-lts, openjdk-lts

openjdk-lts vulnerabilities

git, git, git

git regression

gzip

Important: gzip security update

gzip

Important: gzip security update

xen, xen, xen, xen, xen, xen

Security update for xen

kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt, kernel-rt, kernel-rt

Security update for the Linux Kernel

kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt

Security update for the Linux Kernel

zoneminder, zoneminder, zoneminder

zoneminder, zoneminder, zoneminder

libredwg

Heap-buffer-overflow in decode_preR13_section_hdr

ndpi

Heap-buffer-overflow in ndpi_search_raknet

grok

Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

neorazorx/facturascripts

Cross site scripting in facturascripts

element-plus

element-plus vulnerable to cross-site scripting (XSS) via el-table-column

gibbon

Server side request forgery in gibbon

ejs

ejs template injection vulnerability

com.liferay:com.liferay.journal.content.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP allows arbitrary injection via web content template names

com.liferay:com.liferay.layout.seo.web, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP allows arbitrary injection via the site name

czproject/git-php

Command injection in czproject/git-php

dng_sdk

Stack-use-after-scope in RefCopyBytes

libredwg

Heap-buffer-overflow in dwg_encode_VERTEX_2D

FreeRDP Server authentication might allow invalid credentials to pass

Server side NTLM does not properly check parameters in FreeRDP

Remote Code Execution Vulnerability in Packaging

openjdk-8, icedtea-web, openjdk-9, openjdk-17, openjdk-8, openjdk-lts, icedtea-web, openjdk-17, openjdk-8, openjdk-lts, icedtea-web, openjdk-13, openjdk-16, icedtea-web, openjdk-17, openjdk-18, openjdk-8, openjdk-lts, icedtea-web, icedtea-web, icedtea-web, icedtea-web

flask-session-captcha

Potential Captcha Validate Bypass in flask-session-captcha

golang.org/x/crypto

Denial of service via crafted Signer in golang.org/x/crypto/ssh

libowasp-esapi-java, libowasp-esapi-java

libowasp-esapi-java, libowasp-esapi-java, libowasp-esapi-java, libowasp-esapi-java