Open Source Vulnerabilities

clamav

Null-dereference READ in cl_finish_hash

github.com/ethereum/go-ethereum

Denial of Service in Go-Ethereum

github.com/ethereum/go-ethereum

Denial of Service in Go-Ethereum

pimcore/pimcore

Cross-site Scripting in Pimcore

intelliants/subrion

Cross Site Request Forgery in intelliants/subrion

intelliants/subrion

Cross-site Scripting in intelliants/subrion

pimcore/pimcore

Cross-site Scripting in Pimcore

intelliants/subrion

Cross-site Scripting in Subrion CMS

org.liquibase:liquibase-core

Improper Restriction of XML External Entity Reference in Liquibase

org.apache.poi:poi-scratchpad

Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad

weblate

Duplicate Advisory: Command injection in Weblate

net.mingsoft:ms-mcms

Remote code execution in net.mingsoft:ms-mcms

clamav

Heap-buffer-overflow in cli_bcomp_freemeta

An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor

weblate

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Weblate

weblate

Remote Code Execution (RCE)

pypy3, pypy3, pypy3

linux, linux, linux

CVE-2021-3737 does not affect BellSoft software

Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg, openjpeg

openjpeg2, openjpeg2, openjpeg2

linux, linux, linux

openjpeg2

CVE-2021-3575 affecting package openjpeg2 2.3.1-12

,

openexr, openexr, openexr

,

openexr, openexr, openexr