Open Source Vulnerabilities

org.elasticsearch:elasticsearch

Withdrawn: Cross-site Scripting in Kibana

org.springframework.cloud:spring-cloud-gateway, org.springframework.cloud:spring-cloud-gateway

Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured

com.hazelcast:hazelcast

XML External Entity Reference in Hazelcast

org.elasticsearch:elasticsearch

Elasticsearch privilege escalation

ghostscript

UNKNOWN READ in pdfi_count_cff_index

A carefully crafted TNEF file can cause an out of memory exception

chromium

chromium - security update

CVE-2021-3737: urllib HTTP client possible infinite loop on a 100 Continue response

cacti, cacti, cacti

linux, linux, linux

qemu, qemu, qemu

,

htmldoc, htmldoc, htmldoc

htmldoc, htmldoc, htmldoc

qemu

CVE-2021-3638 affecting package qemu for versions less than 6.2.0-2

cacti, cacti, cacti, cacti, cacti, cacti, cacti, cacti, cacti

CVE-2021-3640 does not affect BellSoft software

qemu

htmldoc, htmldoc, htmldoc, htmldoc

htmldoc, htmldoc, htmldoc, htmldoc

linux, linux, linux

edk2, edk2, edk2

kernel

CVE-2021-4002 affecting package kernel for versions less than 5.15.32.1-2

edk2

elasticsearch

edk2, edk2, edk2, edk2

,

,

Improper Restriction of XML External Entity Reference in hazelcast/hazelcast

Exposure of home directory through shescape on Unix with Bash

twisted, twisted, twisted

node-uri-js, node-uri-js, node-uri-js, node-uri-js, node-uri-js, node-uri-js

twisted

twisted, twisted, twisted, twisted, twisted

Improper Input Validation in URI.js

commonmarker

Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption

cmark-gfm, cmark-gfm, cmark-gfm, ghostwriter, ghostwriter, ghostwriter, python-cmarkgfm, python-cmarkgfm, python-cmarkgfm, r-cran-commonmark, r-cran-commonmark, r-cran-commonmark, ruby-commonmarker, ruby-commonmarker, ruby-commonmarker

cmark-gfm

Integer overflow in table parsing extension leads to heap memory corruption