Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    UBUNTU-CVE-2021-33155
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    BELL-CVE-2022-0391
    No fix available
    Packages

    Summary

    CVE-2022-0391 does not affect BellSoft software

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-33113
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-33120
    Fix available
    Packages

    intel-microcode, intel-microcode, intel-microcode, intel-microcode, intel-microcode

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-33139
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2022-0534
    Fix available
    Packages

    htmldoc, htmldoc, htmldoc, htmldoc

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2022-0530
    Fix available
    Packages

    unzip, unzip, unzip, unzip, unzip

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2022-0529
    Fix available
    Packages

    unzip, unzip, unzip, unzip, unzip

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2022-0391
    Fix available
    Packages

    python2.7, python3.4, python3.5, python2.7, python3.5, python2.7, python3.6, python3.7, python3.8, python3.8, python2.7, python3.9, python2.7

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-33110
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-33061
    Fix available
    Packages

    linux, linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-hwe-edge, linux-kvm, linux-oracle, linux-fips, linux-fips, linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde-5.15, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0170
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0168
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0166
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0165
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0164
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0161
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0076
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0072
    No fix available
    Packages

    linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware, linux-firmware

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0145
    Fix available
    Packages

    intel-microcode, intel-microcode, intel-microcode, intel-microcode, intel-microcode

    Summary

    Published
    9 Feb 2022
    UBUNTU-CVE-2021-0127
    Fix available
    Packages

    intel-microcode, intel-microcode, intel-microcode, intel-microcode, intel-microcode

    Summary

    Published
    9 Feb 2022
    GHSA-8j36-q8x7-pm6q
    Fix available
    Packages

    systeminformation

    Summary

    OS Command Injection in systeminformation

    Published
    9 Feb 2022
    GHSA-ph76-rhqq-xj7j
    Fix available
    Packages

    org.craftercms:crafter-studio

    Summary

    Cross-site scripting in Crafter CMS Crafter Studio

    Published
    9 Feb 2022
    GHSA-f68h-hfqp-8rmv
    Fix available
    Packages

    org.craftercms:crafter-studio

    Summary

    Path Traversal in Crafter CMS Crafter Studio

    Published
    9 Feb 2022
    GHSA-5hr6-vc97-qxxh
    Fix available
    Packages

    org.craftercms:crafter-studio

    Summary

    XML Injection in Crafter CMS Crafter Studio 3.0.1

    Published
    9 Feb 2022
    GHSA-7c6q-jqwc-4423
    Fix available
    Packages

    org.craftercms:crafter-studio

    Summary

    Path Traversal in Crafter CMS Crafter Studio

    Published
    9 Feb 2022
    GHSA-wq3v-3grq-6f86
    Fix available
    Packages

    org.craftercms:crafter-studio, org.craftercms:crafter-studio

    Summary

    Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

    Published
    9 Feb 2022
    GHSA-8786-wg74-f522
    Fix available
    Packages

    org.craftercms:crafter-studio, org.craftercms:crafter-studio

    Summary

    Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

    Published
    9 Feb 2022
    GHSA-q42q-523g-3fwv
    Fix available
    Packages

    com.softwaremill.akka-http-session:core_2.13, com.softwaremill.akka-http-session:core_2.12, com.softwaremill.akka-http-session:core_2.11

    Summary

    Cross-Site Request Forgery

    Published
    9 Feb 2022
    GHSA-f268-65qc-98vg
    Fix available
    Packages

    org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote

    Summary

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Published
    9 Feb 2022
    GHSA-gc58-v8h3-x2gr
    Fix available
    Packages

    org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

    Summary

    Incorrect Default Permissions in Apache Tomcat

    Published
    9 Feb 2022
    GHSA-53hp-jpwq-2jgq
    Fix available
    Packages

    org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core

    Summary

    Uncontrolled Resource Consumption in Apache Tomcat

    Published
    9 Feb 2022
    GHSA-vvw4-rfwf-p6hx
    Fix available
    Packages

    org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote

    Summary

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    Published
    9 Feb 2022
    GHSA-j8jw-g6fq-mp7h
    Fix available
    Packages

    org.hibernate:hibernate-core, org.hibernate:hibernate-core

    Summary

    SQL injection in hibernate-core

    Published
    9 Feb 2022
    GHSA-8674-26jc-wh98
    Fix available
    Packages

    org.infinispan:infinispan-core

    Summary

    Improper Access Control in infinispan-server-runtime

    Published
    9 Feb 2022
    GHSA-v9mf-jgq3-c28h
    Fix available
    Packages

    com.typesafe.play:play

    Summary

    Data Amplification in Play Framework

    Published
    9 Feb 2022
    GHSA-jc35-q369-45pv
    Fix available
    Packages

    org.apache.struts:struts2-core

    Summary

    Remote code execution in Apache Struts

    Published
    9 Feb 2022
    GHSA-c566-2grg-mjwg
    Fix available
    Packages

    org.apache.tapestry:tapestry-project

    Summary

    Serialization vulnerability in Apache Tapestry

    Published
    9 Feb 2022
    GHSA-926x-m6m5-3mmp
    No fix available
    Packages

    push-dir

    Summary

    push-dir Enables OS Command Injection

    Published
    9 Feb 2022
    GHSA-hjxc-462x-x77j
    Fix available
    Packages

    yarn

    Summary

    TOCTOU Race Condition in Yarn

    Published
    9 Feb 2022
    GHSA-pc58-wgmc-hfjr
    Fix available
    Packages

    mout

    Summary

    Prototype Pollution in mout

    Published
    9 Feb 2022
    GHSA-394c-5j6w-4xmx
    Fix available
    Packages

    ua-parser-js

    Summary

    ua-parser-js Regular Expression Denial of Service vulnerability

    Published
    9 Feb 2022
    GHSA-mqgv-67vx-g4m5
    Fix available
    Packages

    js-data

    Summary

    Prototype Pollution in js-data

    Published
    9 Feb 2022
    GHSA-jpj4-5xwp-cv23
    Fix available
    Packages

    org.apache.dolphinscheduler:dolphinscheduler

    Summary

    Remote code execution in DolphinScheduler

    Published
    9 Feb 2022
    GHSA-mp28-rq7g-qx62
    Fix available
    Packages

    org.apache.tomee:apache-tomee, org.apache.tomee:apache-tomee, org.apache.tomee:apache-tomee

    Summary

    Remote code execution in Apache TomEE

    Published
    9 Feb 2022
    GHSA-8mfc-v7wv-p62g
    Fix available
    Packages

    yarn

    Summary

    Path Traversal in Yarn

    Published
    9 Feb 2022
    GHSA-h87q-g2wp-47pj
    Fix available
    Packages

    jsrsasign

    Summary

    Signatures are mistakenly recognized to be valid in jsrsasign

    Published
    9 Feb 2022
    GHSA-grc3-8q8m-4j7c
    Fix available
    Packages

    org.apache.accumulo:accumulo-master, org.apache.accumulo:accumulo-master

    Summary

    Improper privilege handling in Apache Accumulo

    Published
    9 Feb 2022
    GHSA-3mqv-8gxg-pfm4
    Fix available
    Packages

    com.twitter:twitter-server_2.12

    Summary

    TwitterServer Cross-site Scripting via /histograms endpoint

    Published
    9 Feb 2022
    GHSA-rvpc-w57p-q95f
    Fix available
    Packages

    org.wso2.transport.http:org.wso2.transport.http.netty

    Summary

    HTTP Response Splitting in WSO2 transport-http

    Published
    9 Feb 2022