Open Source Vulnerabilities

tomcat8, tomcat8, tomcat9, tomcat9

polkit, polkit, polkit

polkit security update

python-numpy_1_13_3-gnu-hpc

Security update for python-numpy

Cross-site Scripting (XSS) - Stored in crater-invoice/crater

vim, vim

vim vulnerabilities

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

asterisk, ring

pjproject, pjproject, ring

pjproject, pjproject, ring, ring

clamav

Heap-buffer-overflow in cli_strlcat

pimcore/pimcore

Cross-site Scripting in Pimcore

bytefury/crater

Missing Authorization in Crater Invoice

Google.Protobuf, google/protobuf, com.google.protobuf:protobuf-java, github.com/protocolbuffers/protobuf, protobuf, github.com/protocolbuffers/protobuf

Withdrawn Advisory: NULL Pointer Dereference in Protocol Buffers

showdoc/showdoc

SQL Injection in showdoc

net.mingsoft:ms-mcms

Mingsoft MCMS SQL injection vulnerability

net.mingsoft:ms-mcms

Mingsoft MCMS vulnerable to Remote Code Execution via file upload.

net.mingsoft:ms-mcms

Mingsoft MCMS SQL injection vulnerability

libplist

Heap-buffer-overflow in strtol

graphicsmagick

graphicsmagick - security update

Local privilege escalation with FileStore

Out-of-bounds read in multipart parsing in PJSIP

Potential out-of-bound read during RTP/RTCP parsing in PJSIP

,

mono, mono, mono, mono, mono

gerapy

@isomorphic-git/cors-proxy

Server side request forgery in @isomorphic-git/cors-proxy

pimcore/pimcore

Cross-site Scripting in pimcore

pimcore/pimcore

Business Logic Errors in pimcore

mono, mono, mono, mono, mono, mono, mono, mono, mono

tightvnc

mono, mono, mono, mono, mono

snipe/snipe-it

Improper Access Control in snipe-it

remdex/livehelperchat

Cross-Site Request Forgery (CSRF) in livehelperchat

remdex/livehelperchat

Cross-Site Request Forgery (CSRF) in livehelperchat

Server Side Twig Template Injection in PrestaShop

virtualbox, kmod-virtualbox

Updated virtualbox packages fix security vulnerability

expat, expat, expat, libxmltok

expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat