Open Source Vulnerabilities

pimcore/pimcore

Cross-site Scripting in pimcore

snipe/snipe-it

Exposure of Sensitive Information in snipe/snipe-it

github.com/hashicorp/nomad, github.com/hashicorp/nomad, github.com/hashicorp/nomad

HashiCorp Nomad Artifact Download Race Condition

url-parse

Authorization bypass in url-parse

galois_2p8

Buffer Overflow in galois_2p8

snipe/snipe-it

Improper Privilege Management in Snipe-IT

unicorn

UNKNOWN WRITE

Improper Validation of Specified Quantity in Input in microweber/microweber

Uncontrolled Resource Consumption in promhttp

librecad, librecad

librecad - security update

h2database, h2database

h2database - security update

h2database

h2database - security update

libxstream-java

libxstream-java - security update

expat, coin3, xmlrpc-c, expat, coin3, insighttoolkit, libxmltok, swish-e, ayttm, cableswig, insighttoolkit4, matanza, xmlrpc-c, expat, coin3, libxmltok, matanza, swish-e, xmlrpc-c, expat, libxmltok, matanza, swish-e, wbxml2, xmlrpc-c, firefox, matanza, thunderbird, libxmltok, swish-e, xmlrpc-c, libxmltok, matanza, thunderbird, swish-e, xmlrpc-c, matanza, swish-e, thunderbird, matanza, swish-e, thunderbird, matanza, thunderbird, swish-e

expat, coin3, xmlrpc-c, expat, coin3, insighttoolkit, libxmltok, swish-e, ayttm, cableswig, insighttoolkit4, matanza, xmlrpc-c, expat, coin3, libxmltok, matanza, swish-e, tdom, xmlrpc-c, expat, libxmltok, matanza, swish-e, xmlrpc-c, firefox, matanza, thunderbird, libxmltok, swish-e, xmlrpc-c, libxmltok, matanza, thunderbird, swish-e, xmlrpc-c, matanza, swish-e, thunderbird, matanza, swish-e, tdom, thunderbird, matanza, thunderbird, swish-e

Incorrect Authorization in librenms/librenms

enshrined/svg-sanitize

Cross-site Scripting in enshrined/svg-sanitize

github.com/cloudflare/cfrpki

Path traversal in github.com/cloudflare/cfrpki/cmd/octorpki

nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx

wireshark, wireshark, wireshark

wireshark, wireshark, wireshark

wireshark

CVE-2022-0583 affecting package wireshark for versions less than 3.4.14-1

wireshark

CVE-2022-0586 affecting package wireshark for versions less than 3.4.14-1

wireshark, wireshark, wireshark

wireshark, wireshark, wireshark

nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx

nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx

nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx, nginx

mujs, mujs, mujs

wireshark

CVE-2022-0582 affecting package wireshark for versions less than 3.4.14-1

wireshark

CVE-2022-0581 affecting package wireshark for versions less than 3.4.14-1

mujs

wireshark, wireshark, wireshark, wireshark

wireshark, wireshark, wireshark, wireshark

wireshark, wireshark, wireshark, wireshark

wireshark, wireshark, wireshark, wireshark