Open Source Vulnerabilities
hauler
Security update for hauler
go-containerregistry
Security update for go-containerregistry
go-containerregistry
Security update for go-containerregistry
perl-MIME-tools
Security update for perl-MIME-tools
io.netty:netty-codec, io.netty:netty-codec-http, io.netty:netty-codec-redis, io.netty:netty-handler, io.netty:netty-handler-proxy
TuxCare security update for io.netty (6 CVEs)
io.netty:netty-codec/ io.netty:netty-codec-http/ io.netty:netty-codec-redis/ io.netty:netty-handler/ io.netty:netty-handler-proxy
TuxCare security update for io.netty (6 CVEs)
OPNsense: Configuration line injection via multiple GUI text fields
OPNsense: Configuration line injection via multiple GUI text fields
Babelfish for PostgreSQL Privilege Escalation
org.apache.logging.log4j:log4j-1.2-api, org.apache.logging.log4j:log4j-core
TuxCare security update for org.apache.logging.log4j (2 CVEs)
org.apache.logging.log4j:log4j-1.2-api/ org.apache.logging.log4j:log4j-core
TuxCare security update for org.apache.logging.log4j (2 CVEs)
Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary
Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary
zt-zip: ZipUtil.unpack can change file permissions of output directory
zt-zip: ZipUtil.unpack can change file permissions of output directory
zt-zip: Path traversal in fluent API unpack
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
TuxCare security update for 3 packages (1 CVE)
org.apache.tomcat.embed:tomcat-embed-core/ org.apache.tomcat:tomcat/ org.apache.tomcat:tomcat-catalina
TuxCare security update for 3 packages (1 CVE)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (2 CVEs)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (2 CVEs)
org.apache.logging.log4j:log4j-1.2-api, org.apache.logging.log4j:log4j-core
TuxCare security update for org.apache.logging.log4j (1 CVE)
org.apache.logging.log4j:log4j-1.2-api/ org.apache.logging.log4j:log4j-core
TuxCare security update for org.apache.logging.log4j (1 CVE)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (1 CVE)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (1 CVE)
@enspirit/elo
Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
@enspirit/elo
Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
io.netty:netty-codec-http, io.netty:netty-codec-redis
TuxCare security update for io.netty (4 CVEs)
io.netty:netty-codec-http/ io.netty:netty-codec-redis
TuxCare security update for io.netty (4 CVEs)
Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter
Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter
@enspirit/elo
Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
@enspirit/elo
Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (2 CVEs)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (2 CVEs)
NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
NetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateView
@enspirit/elo
Elo backends have code injection via unvalidated emission of programmatic AST fields
@enspirit/elo
Elo backends have code injection via unvalidated emission of programmatic AST fields
Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields
Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields
org.apache.logging.log4j:log4j-1.2-api, org.apache.logging.log4j:log4j-core
TuxCare security update for org.apache.logging.log4j (1 CVE)
org.apache.logging.log4j:log4j-1.2-api/ org.apache.logging.log4j:log4j-core
TuxCare security update for org.apache.logging.log4j (1 CVE)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (1 CVE)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (1 CVE)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (1 CVE)
org.yaml:snakeyaml
TuxCare security update for org.yaml:snakeyaml (1 CVE)
vips, vips, vips, vips, vips, vips
vips vulnerabilities
ch.qos.logback:logback-core
TuxCare security update for ch.qos.logback:logback-core (1 CVE)
ch.qos.logback:logback-core
TuxCare security update for ch.qos.logback:logback-core (1 CVE)
shapelib, shapelib, shapelib, shapelib
shapelib vulnerability
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-websocket
TuxCare security update for 5 packages (6 CVEs)
org.apache.tomcat.embed:tomcat-embed-core/ org.apache.tomcat.embed:tomcat-embed-websocket/ org.apache.tomcat:tomcat/ org.apache.tomcat:tomcat-catalina/ org.apache.tomcat:tomcat-websocket
TuxCare security update for 5 packages (6 CVEs)
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-coyote
TuxCare security update for 4 packages (6 CVEs)
org.apache.tomcat.embed:tomcat-embed-core/ org.apache.tomcat:tomcat/ org.apache.tomcat:tomcat-catalina/ org.apache.tomcat:tomcat-coyote
TuxCare security update for 4 packages (6 CVEs)
