Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-jrmq-rv9w-63rv
    Fix available
    Packages

    Umbraco.Cms.Core

    Summary

    Umbraco ApplicationURL Overwrite

    Published
    21 Jan 2022
    GHSA-c697-r227-pq6h
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Unrestricted Upload of File with Dangerous Type in pimcore

    Published
    21 Jan 2022
    GHSA-fxmx-pfm2-85m2
    Fix available
    Packages

    codechecker

    Summary

    Cross-site Scripting in Ericsson CodeChecker

    Published
    21 Jan 2022
    GHSA-4f5x-q4jc-xfcf
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Cross-site Scripting in pimcore

    Published
    21 Jan 2022
    GHSA-6m93-343m-3jrc
    Fix available
    Packages

    spipu/html2pdf

    Summary

    Cross-site Scripting in HTML2PDF

    Published
    21 Jan 2022
    GHSA-fh56-85cw-5pq6
    Fix available
    Packages

    ujson

    Summary

    UltraJSON vulnerable to Out-of-bounds Write

    Published
    21 Jan 2022
    GHSA-w9p3-5cr8-m3jj
    No fix available
    Packages

    log4j:log4j, org.zenframework.z8.dependencies.commons:log4j-1.2.17

    Summary

    Deserialization of Untrusted Data in Log4j 1.x

    Published
    21 Jan 2022
    GHSA-65fg-84f6-3jq3
    No fix available
    Packages

    log4j:log4j, org.zenframework.z8.dependencies.commons:log4j-1.2.17

    Summary

    SQL Injection in Log4j 1.2.x

    Published
    21 Jan 2022
    GHSA-vxh4-x6gv-mphf
    No fix available
    Packages

    livehelperchat/livehelperchat

    Summary

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    Published
    21 Jan 2022
    GHSA-v57x-gxfj-484q
    Fix available
    Packages

    com.hazelcast.jet:hazelcast-jet, com.hazelcast:hazelcast, com.hazelcast:hazelcast, com.hazelcast:hazelcast, com.hazelcast:hazelcast

    Summary

    Security Advisory for "Log4Shell"

    Published
    21 Jan 2022
    GHSA-44m4-9cjp-j587
    Fix available
    Packages

    ezsystems/ezpublish-kernel

    Summary

    IBX-1392: Image filenames sanitization

    Published
    21 Jan 2022
    GHSA-4vf4-qmvg-mh7h
    Fix available
    Packages

    cgi, cgi, cgi

    Summary

    Cookie Prefix Spoofing in CGI::Cookie.parse

    Published
    21 Jan 2022
    GHSA-fj2w-wfgv-mwq6
    Fix available
    Packages

    com.upokecenter:cbor

    Summary

    Denial of service in CBOR library

    Published
    21 Jan 2022
    GHSA-x7wr-283h-5h2v
    Fix available
    Packages

    onionshare-cli

    Summary

    Out-of-bounds Read in Onionshare

    Published
    21 Jan 2022
    GHSA-jh82-c5jw-pxpc
    Fix available
    Packages

    onionshare-cli

    Summary

    Denial of Service in Onionshare

    Published
    21 Jan 2022
    GHSA-ch22-x2v3-v6vq
    Fix available
    Packages

    onionshare-cli

    Summary

    OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend

    Published
    21 Jan 2022
    GHSA-w9m4-7w72-r766
    Fix available
    Packages

    onionshare-cli

    Summary

    Improper Access Control in Onionshare

    Published
    21 Jan 2022
    GHSA-gjj5-998g-v36v
    Fix available
    Packages

    onionshare-cli

    Summary

    Improper Access Control in Onionshare

    Published
    21 Jan 2022
    GHSA-jgm9-xpfj-4fq6
    Fix available
    Packages

    onionshare-cli

    Summary

    Path traversal in Onionshare

    Published
    21 Jan 2022
    GHSA-h29c-wcm8-883h
    Fix available
    Packages

    onionshare-cli

    Summary

    Incorrect Permission Assignment for Critical Resource in OnionShare

    Published
    21 Jan 2022
    GHSA-99p8-9p2c-49j4
    Fix available
    Packages

    onionshare-cli

    Summary

    Improper Access Control in Onionshare

    Published
    21 Jan 2022
    GHSA-68vr-8f46-vc9f
    Fix available
    Packages

    onionshare-cli

    Summary

    Username spoofing in OnionShare

    Published
    21 Jan 2022
    GHSA-2457-2263-mm9f
    Fix available
    Packages

    io.micronaut:micronaut-http

    Summary

    Memory leak in micronaut-core

    Published
    21 Jan 2022
    CVE-2022-23366
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    CVE-2022-23365
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    CVE-2022-23364
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    CVE-2022-23363
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    Packages

    golang-github-graph-gophers-graphql-go, golang-github-graph-gophers-graphql-go, golang-github-graph-gophers-graphql-go

    Summary

    Published
    21 Jan 2022
    UBUNTU-CVE-2022-21708
    No fix available
    Packages

    golang-github-graph-gophers-graphql-go

    Summary

    Published
    21 Jan 2022
    GHSA-r8hp-5m7c-jhv4
    Fix available
    Packages

    OrchardCore.Application.Cms.Targets

    Summary

    Cross-site Scripting OrchardCore.Application.Cms.Targets

    Published
    21 Jan 2022
    GHSA-45hx-wfhj-473x
    Fix available
    Packages

    com.h2database:h2

    Summary

    Arbitrary code execution in H2 Console

    Published
    21 Jan 2022
    GHSA-8434-v7xw-8m9x
    Fix available
    Packages

    apkleaks

    Summary

    Improper Neutralization of Argument Delimiters in a Decompiling Package Process in APKLeaks

    Published
    21 Jan 2022
    GHSA-h79x-98r2-g6qc
    Fix available
    Packages

    pocketmine/pocketmine-mp

    Summary

    Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP

    Published
    21 Jan 2022
    GHSA-wjfq-88q2-r34j
    Fix available
    Packages

    pocketmine/pocketmine-mp

    Summary

    Unhandled exception when decoding form response JSON

    Published
    21 Jan 2022
    CVE-2022-21708
    Fix available
    Packages

    Summary

    Denial of Service in graphql-go

    Published
    21 Jan 2022
    CVE-2022-21707
    Fix available
    Packages

    Summary

    Incorrect Authorization in wasmCloud

    Published
    21 Jan 2022
    CVE-2021-39480
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    MGASA-2022-0027
    Fix available
    Packages

    kernel-linus

    Summary

    Updated kernel-linus packages fix security vulnerability

    Published
    21 Jan 2022
    MGASA-2022-0026
    Fix available
    Packages

    kernel, kmod-virtualbox, kmod-xtables-addons

    Summary

    Updated kernel packages fix security vulnerability

    Published
    21 Jan 2022
    Packages

    ruby-sidekiq, ruby-sidekiq, ruby-sidekiq

    Summary

    Published
    21 Jan 2022
    CVE-2022-22553
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    CVE-2022-22552
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    CVE-2022-22551
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    CVE-2021-46313
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    DEBIAN-CVE-2021-46313
    No fix available
    Packages

    gpac

    Summary

    Published
    21 Jan 2022
    CVE-2021-46311
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    DEBIAN-CVE-2021-46311
    No fix available
    Packages

    gpac

    Summary

    Published
    21 Jan 2022
    Packages

    hdf5, hdf5, hdf5

    Summary

    Published
    21 Jan 2022
    CVE-2021-46244
    No fix available
    Packages

    Summary

    Published
    21 Jan 2022
    DEBIAN-CVE-2021-46243
    No fix available
    Packages

    hdf5, hdf5, hdf5

    Summary

    Published
    21 Jan 2022