Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-7cj4-gj8m-m2f7
    Fix available
    Packages

    org.apache.shiro:shiro-spring

    Summary

    Authentication bypass in Apache Shiro

    Published
    22 Apr 2021
    GHSA-5c66-v29h-xjh8
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-oldcore, org.xwiki.platform:xwiki-platform-web, org.xwiki.platform:xwiki-platform-web

    Summary

    XSS Cross Site Scripting

    Published
    22 Apr 2021
    GHSA-6hgr-2g6q-3rmc
    Fix available
    Packages

    com.vaadin:flow-client

    Summary

    Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

    Published
    22 Apr 2021
    GHSA-mr8h-j9cv-4m8h
    Fix available
    Packages

    com.vaadin:vaadin-bom

    Summary

    Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

    Published
    22 Apr 2021
    GHSA-fvrf-9428-527m
    Fix available
    Packages

    openmage/magento-lts, openmage/magento-lts

    Summary

    Backport for CVE-2021-21024 Blind SQLi from Magento 2

    Published
    22 Apr 2021
    GHSA-m496-x567-f98c
    Fix available
    Packages

    openmage/magento-lts, openmage/magento-lts

    Summary

    Fixes a bug in Zend Framework's Stream HTTP Wrapper

    Published
    22 Apr 2021
    SUSE-SU-2021:1305-1
    Fix available
    Packages

    qemu

    Summary

    Security update for qemu

    Published
    22 Apr 2021
    GHSA-2fw4-mgq9-39cx
    No fix available
    Packages

    oauth2-server

    Summary

    Code Injection in oauth2-server

    Published
    22 Apr 2021
    CVE-2021-22540
    Fix available
    Packages

    Summary

    Published
    22 Apr 2021
    Packages

    thunderbird, thunderbird

    Summary

    Published
    22 Apr 2021
    Packages

    thunderbird, thunderbird

    Summary

    Published
    22 Apr 2021
    Packages

    thunderbird, thunderbird

    Summary

    Published
    22 Apr 2021
    Packages

    firefox, firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78

    Summary

    Published
    22 Apr 2021
    Packages

    firefox, firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78

    Summary

    Published
    22 Apr 2021
    CVE-2021-27736
    Fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-3287
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    Packages

    opera

    Summary

    Security update for opera

    Published
    22 Apr 2021
    USN-4916-2
    Fix available
    Packages

    linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon, linux-gke-5.3, linux-hwe, linux-raspi2-5.3, linux-oem-5.6

    Summary

    linux, linux-aws, linux-gke-5.3, linux-hwe, linux-kvm, linux-lts-xenial, linux-oem-5.6, linux-raspi2, linux-raspi2-5.3, linux-snapdragon regression

    Published
    22 Apr 2021
    CVE-2021-31555
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31554
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31553
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31552
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31551
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31550
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31549
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31548
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31547
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31546
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-31545
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-29466
    Fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-29465
    Fix available
    Packages

    Summary

    Published
    22 Apr 2021
    CVE-2021-29467
    No fix available
    Packages

    Summary

    Published
    22 Apr 2021
    OSV-2021-671
    Fix available
    Packages

    libaom

    Summary

    Heap-buffer-overflow in av1_cdef_init_fb_row_mt

    Published
    22 Apr 2021
    OSV-2021-670
    Fix available
    Packages

    libaom

    Summary

    Heap-buffer-overflow in av1_free_cdef_buffers

    Published
    22 Apr 2021
    OSV-2021-669
    Fix available
    Packages

    php

    Summary

    Heap-buffer-overflow in _estrdup

    Published
    22 Apr 2021
    OSV-2021-668
    Fix available
    Packages

    ghostscript

    Summary

    Stack-use-after-return in pdf14_initialize

    Published
    22 Apr 2021
    DSA-4898-1
    Fix available
    Packages

    wpa

    Summary

    wpa - security update

    Published
    22 Apr 2021
    DSA-4897-1
    Fix available
    Packages

    thunderbird

    Summary

    thunderbird - security update

    Published
    22 Apr 2021
    DSA-4896-1
    Fix available
    Packages

    wordpress

    Summary

    wordpress - security update

    Published
    22 Apr 2021
    DLA-2632-1
    Fix available
    Packages

    thunderbird

    Summary

    thunderbird - security update

    Published
    22 Apr 2021
    CVE-2021-1078
    No fix available
    Packages

    Summary

    Published
    21 Apr 2021
    Packages

    nvidia-graphics-drivers, nvidia-graphics-drivers, nvidia-graphics-drivers

    Summary

    Published
    21 Apr 2021
    CVE-2021-1077
    No fix available
    Packages

    Summary

    Published
    21 Apr 2021
    CVE-2021-1076
    No fix available
    Packages

    Summary

    Published
    21 Apr 2021
    Packages

    nvidia-graphics-drivers, nvidia-graphics-drivers, nvidia-graphics-drivers

    Summary

    Published
    21 Apr 2021
    CVE-2021-1075
    No fix available
    Packages

    Summary

    Published
    21 Apr 2021
    CVE-2021-1074
    No fix available
    Packages

    Summary

    Published
    21 Apr 2021
    CVE-2020-27569
    No fix available
    Packages

    Summary

    Published
    21 Apr 2021
    Packages

    openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn

    Summary

    Published
    21 Apr 2021
    CVE-2020-27568
    No fix available
    Packages

    Summary

    Published
    21 Apr 2021