Open Source Vulnerabilities

arm-trusted-firmware, arm-trusted-firmware, arm-trusted-firmware, linux, linux, linux

openssh, openssh, openssh

openssh, openssh, openssh, openssh, openssh, openssh

openssh

CVE-2021-36368 affecting package openssh for versions less than 8.9p1-1

CVE-2021-36368 does not affect BellSoft software

microweber/microweber

Cross-site Scripting in microweber

microweber/microweber

Cross-site Scripting in microweber

showdoc/showdoc

Cross-site Scripting in ShowDoc

github.com/Xhofe/alist

Cross-site Scripting in Alist

microweber/microweber

Cross-site Scripting in microweber

libphp-adodb, libphp-adodb

libphp-adodb - security update

haproxy

haproxy - security update

debian-archive-keyring

debian-archive-keyring - security update

expat, expat

expat - regression update

gpac

linux, linux, linux

kernel

CVE-2022-26966 affecting package kernel for versions less than 5.15.26.1-2

linux-azure, linux, linux-aws, linux-lts-xenial, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-hwe-edge, linux-kvm, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

gpac, gpac, gpac, gpac, gpac, gpac

File upload filter bypass leading to stored XSS in microweber/microweber

kernel, kernel, kernel

kernel security update

vim, vim, vim

vim security update

polkit, polkit, polkit

polkit security update

bluez, bluez, bluez

bluez security update

virglrenderer, virglrenderer, virglrenderer

virglrenderer security update

libsolv, libsolv, libsolv

libsolv security update

ganglia, ganglia, ganglia

ganglia security update

zsh, zsh, zsh

zsh security update

XSS on dynamic_text module in microweber/microweber

File upload filter bypass leading to stored XSS in microweber/microweber

Cross-site Scripting (XSS) - Stored in star7th/showdoc

gnutls

Updated gnutls packages fix security vulnerability

php

Segv on unknown address in i_zval_ptr_dtor

freetakserver-ui

SQL Injection in FreeTAKServer-UI

freetakserver-ui

Cross-site Scripting in FreeTAKServer-UI

freetakserver-ui

Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

freetakserver-ui

Path traversal in FreeTAKServer-UI

freetakserver

Improper Authentication in FreeTAKServer

freetakserver

Hard coded credentials in FreeTAKServer

com.fasterxml.jackson.core:jackson-databind, com.fasterxml.jackson.core:jackson-databind

Deeply nested json in jackson-databind

swagger-ui-dist

Spoofing attack in swagger-ui-dist

microweber/microweber

Integer Overflow or Wraparound in Microweber

swagger-ui, org.webjars:swagger-ui

Spoofing attack in swagger-ui