Open Source Vulnerabilities

Generation of Error Message Containing Sensitive Information in snipe/snipe-it

remdex/livehelperchat

Cross-site Scripting in livehelperchat

urijs

Authorization Bypass Through User-Controlled Key in urijs

snipe/snipe-it

Improper Privilege Management in Snipe-IT

litespeed.js, appwrite/server-ce, appwrite/server-ce

Prototype Pollution in litespeed.js and appwrite/server-ce

magento/community-edition, magento/community-edition

Magento improper input validation vulnerability

cn.hutool:hutool-http

Improper Certificate Validation in Hutool

org.jeecgframework.boot:jeecg-boot-base, org.jeecgframework.boot:jeecg-boot-base-core

SQL Injection in Jeecg-boot

org.jeecgframework.boot:jeecg-boot-base, org.jeecgframework.boot:jeecg-boot-base-core

SQL Injection in Jeecg-boot

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

chromium

chromium - security update

Stack-based Buffer Overflow in vim/vim

drupal7, drupal7

pollbot

open redirect in pollbot

sanic

Server crash if running Python 3.10 w/ Sanic 20.12

mellium.im/xmpp

Improper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket

crossbeam-utils

crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64

wasmtime, wasmtime

Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals

github.com/traefik/traefik/v2

Skip the router TLS configuration when the host header is an FQDN

github.com/prometheus/client_golang

Uncontrolled Resource Consumption in promhttp

Invalid drop of partially-initialized instances in wasmtime

,

,

linux, linux, linux

kernel

CVE-2022-25265 affecting package kernel for versions less than 5.15.26.1-1

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

asterisk, ring

pjproject, asterisk, asterisk, pjproject, ring, ring, asterisk, asterisk, asterisk, asterisk, asterisk, asterisk

pjproject, asterisk, asterisk, pjproject, ring, ring, asterisk, asterisk, asterisk, asterisk, asterisk, asterisk