Open Source Vulnerabilities

requestretry

Cookie exposure in requestretry

microweber/microweber

Insertion of Sensitive Information Into Debugging Code in Microweber

mlflow

Insecure Temporary File in mlflow

microweber/microweber

Cross-site Scripting in Microweber

microweber/microweber

Insecure Storage of Sensitive Information in Microweber

github.com/v2fly/v2ray-core/v4, github.com/v2fly/v2ray-core

Off-by-one Error in v2fly/v2ray-core

dolibarr/dolibarr

Improper Authorization in dolibarr/dolibarr

assimp

Heap-buffer-overflow in SuperFastHash

w3m

UNKNOWN READ in GC_generic_malloc_many

ruby, ruby, ruby-devel, ruby-devel, ruby-doc, ruby-doc, ruby-irb, ruby-irb, ruby-libs, ruby-libs, rubygem-abrt, rubygem-abrt, rubygem-abrt-doc, rubygem-abrt-doc, rubygem-bigdecimal, rubygem-bigdecimal, rubygem-bson, rubygem-bson, rubygem-bson-doc, rubygem-bundler, rubygem-bundler-doc, rubygem-did_you_mean, rubygem-did_you_mean, rubygem-io-console, rubygem-io-console, rubygem-json, rubygem-json, rubygem-minitest, rubygem-minitest, rubygem-mongo, rubygem-mongo-doc, rubygem-mysql2, rubygem-mysql2, rubygem-mysql2-doc, rubygem-net-telnet, rubygem-net-telnet, rubygem-openssl, rubygem-openssl, rubygem-pg, rubygem-pg, rubygem-pg-doc, rubygem-power_assert, rubygem-power_assert, rubygem-psych, rubygem-psych, rubygem-rake, rubygem-rdoc, rubygem-rdoc, rubygem-test-unit, rubygem-test-unit, rubygem-xmlrpc, rubygems, rubygems, rubygems-devel, rubygems-devel

Moderate: ruby:2.5 security update

,

SQL injection in anuko timetracker

Stored XSS vulnerability in anuko/timetracker

Missing server signature validation in OctoberCMS

b2sdk

b2

B2 Command Line Tool TOCTOU application key disclosure

b2-sdk-python TOCTOU application key disclosure

github.com/clastix/capsule-proxy

Improper Authentication in Capsule Proxy

rudloff/alltube

Open Redirect in AllTube

october/system, october/system, october/system

Authenticated remote code execution in October CMS

golang-v2ray-core, golang-v2ray-core, golang-v2ray-core

golang-v2ray-core

dolibarr

Unsafe default configuration values in Nginx version all version

Authenticated remote code execution in octobercms

Improper Access Control (IDOR) in dolibarr/dolibarr

drupal/govuk_theme

radare2, radare2, radare2, radare2, radare2, radare2, radare2

drupal/entity_reference_tree

Denial of Service in radareorg/radare2

istio.io/istio, istio.io/istio, istio.io/istio

Unauthenticated control plane denial of service attack in Istio

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-0729 affecting package vim for versions less than 8.2.4743-1