Open Source Vulnerabilities

arrow2

Arrow2 allows double free in `safe` code

coreos-installer

Incorrect signature verification on gzip-compressed install images

Cross-site Scripting (XSS) - Generic in hestiacp/hestiacp

spacewalk-java, susemanager-sync-data

Security update for SUSE Manager Server 4.2

libeconf, shadow, util-linux, util-linux-systemd, util-linux-systemd, libeconf, libeconf, shadow, util-linux, util-linux-systemd

Security update for libeconf, shadow and util-linux

libeconf, python3-libmount, shadow, util-linux, util-linux-systemd

Security update for libeconf, shadow and util-linux

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

Security update for mariadb

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

Security update for mariadb

go1.16, go1.16, go1.16, go1.16, go1.16, go1.16, go1.16, go1.16, go1.16, go1.16, go1.16

Security update for go1.16

go1.16

Security update for go1.16

go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17

Security update for go1.17

go1.17

Security update for go1.17

wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark

Security update for wireshark

wireshark

Security update for wireshark

kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware, kernel-firmware

Security update for kernel-firmware

containerd, containerd, containerd

Security update for containerd

containerd

Security update for containerd

containerd

Security update for containerd

gnutls, gnutls, gnutls, gnutls

Security update for gnutls

gnutls

Security update for gnutls

wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant, wpa_supplicant

Security update for wpa_supplicant

wpa_supplicant

Security update for wpa_supplicant

nodejs14, nodejs14, nodejs14, nodejs14, nodejs14, nodejs14, nodejs14, nodejs14, nodejs14, nodejs14

Security update for nodejs14

nodejs14

Security update for nodejs14

expat, expat

Security update for expat

expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat

Security update for expat

expat

Security update for expat

flatpak, flatpak, flatpak, flatpak, flatpak, flatpak, flatpak, flatpak, flatpak, flatpak, flatpak

Security update for flatpak

flatpak

Security update for flatpak

OS Command Injection in part-db/part-db

Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp

conmon, libcontainers-common, libseccomp, podman

Security update for conmon, libcontainers-common, libseccomp, podman

webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3

Security update for webkit2gtk3

webkit2gtk3

Security update for webkit2gtk3

nova, nova, nova

Open Redirect in CPython that affects users of OpenStack Nova

com.liferay:com.liferay.portal.security.ldap.impl, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP fails to properly import users from LDAP

com.liferay:com.liferay.layout.admin.web, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)

com.liferay:com.liferay.frontend.taglib.clay

Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter

com.liferay:com.liferay.server.admin.web, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console

com.liferay.portal:release.portal.bom, com.liferay.portal:release.dxp.bom, com.liferay:com.liferay.frontend.js.web

Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page

com.liferay:com.liferay.gogo.shell.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module

genix/cms

Cross-site Scripting in GeniXCMS

com.liferay:com.liferay.remote.app.web, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP fails to check origin of event messages

@uppy/companion

Incorrect Authorization in @uppy/companion

npm-lockfile

OS Command injection in npm-lockfile

ansible

Ansible discloses sensitive information in traceback error message

net.mingsoft:ms-mcms

SQL injection in net.mingsoft:ms-mcms

net.mingsoft:ms-mcms

SQL injection in net.mingsoft:ms-mcms

github.com/quay/claircore, github.com/quay/claircore, github.com/quay/claircore

Path traversal in claircore