Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2018-20345
    Fix available
    Packages

    Summary

    Published
    21 Dec 2018
    GHSA-7x9j-7223-rg5m
    Fix available
    Packages

    commons-fileupload:commons-fileupload

    Summary

    Improper Access Control in commons-fileupload

    Published
    21 Dec 2018
    GHSA-xx68-jfcg-xmmf
    Fix available
    Packages

    commons-fileupload:commons-fileupload, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

    Summary

    Commons FileUpload Denial of service vulnerability

    Published
    21 Dec 2018
    GHSA-6x48-j4x4-cqw3
    Fix available
    Packages

    org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main

    Summary

    Path Traversal in Hadoop

    Published
    21 Dec 2018
    GHSA-rqj9-cq6j-958r
    Fix available
    Packages

    org.apache.hadoop:hadoop-main

    Summary

    Arbitrary Command Execution in Hadoop

    Published
    21 Dec 2018
    GHSA-mq8p-h798-xcrp
    Fix available
    Packages

    org.apache.hadoop:hadoop-main

    Summary

    Exposure of Sensitive Information in Hadoop

    Published
    21 Dec 2018
    GHSA-3v44-382q-55f4
    Fix available
    Packages

    org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main

    Summary

    Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main

    Published
    21 Dec 2018
    GHSA-99qr-9cc9-fv2x
    Fix available
    Packages

    org.apache.hadoop:hadoop-main

    Summary

    Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main

    Published
    21 Dec 2018
    SUSE-SU-2018:4236-1
    Fix available
    Packages

    MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss

    Summary

    Security update for MozillaFirefox, mozilla-nspr and mozilla-nss

    Published
    21 Dec 2018
    GHSA-9448-c9wq-jg9v
    Fix available
    Packages

    org.apache.karaf:apache-karaf

    Summary

    Improper Privilege Management in Apache Karaf

    Published
    21 Dec 2018
    GHSA-gf2j-7qwg-4f5x
    Fix available
    Packages

    org.keycloak:keycloak-core

    Summary

    Improper Authentication in Keycloak

    Published
    21 Dec 2018
    GHSA-j379-9jr9-w5cq
    Fix available
    Packages

    com.squareup.retrofit2:retrofit

    Summary

    XML External Entity (XXE) vulnerability in Square Retrofit

    Published
    21 Dec 2018
    GHSA-8p8g-f9vg-r7xr
    Fix available
    Packages

    com.squareup.retrofit2:retrofit

    Summary

    Directory Traversal vulnerability in Square Retrofit

    Published
    21 Dec 2018
    GHSA-fvm3-cfvj-gxqq
    Fix available
    Packages

    commons-fileupload:commons-fileupload

    Summary

    High severity vulnerability that affects commons-fileupload:commons-fileupload

    Published
    21 Dec 2018
    SUSE-SU-2018:4235-1
    Fix available
    Packages

    mozilla-nspr, mozilla-nss, MozillaFirefox

    Summary

    Security update for MozillaFirefox, mozilla-nspr and mozilla-nss

    Published
    21 Dec 2018
    GHSA-h4x4-5qp2-wp46
    Fix available
    Packages

    com.fasterxml.jackson.datatype:jackson-datatype-jsr310

    Summary

    Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353

    Published
    21 Dec 2018
    GHSA-gfv6-cj92-g3hx
    Fix available
    Packages

    pykmip

    Summary

    PyKMIP Denial of service vulnerability

    Published
    21 Dec 2018
    GHSA-hjm9-576q-399p
    Fix available
    Packages

    org.esigate:esigate-core

    Summary

    Remote Code Execution in esigate-core

    Published
    21 Dec 2018
    GHSA-c289-47qf-rvrr
    Fix available
    Packages

    easymon

    Summary

    Cross Site Scripting (XSS) vulnerability in easymon

    Published
    21 Dec 2018
    CVE-2018-5202
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-5201
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-5196
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-18332
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-18331
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-18330
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    SUSE-SU-2018:4217-1
    Fix available
    Packages

    netatalk, netatalk, netatalk, netatalk, netatalk, netatalk

    Summary

    Security update for netatalk

    Published
    21 Dec 2018
    SUSE-SU-2018:4215-1
    Fix available
    Packages

    enigmail

    Summary

    Security update for enigmail

    Published
    21 Dec 2018
    CVE-2018-20339
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-20338
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-20337
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    Packages

    libraw, libraw, libraw

    Summary

    Published
    21 Dec 2018
    CVE-2018-20332
    Fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-20330
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    Packages

    libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo, libjpeg-turbo

    Summary

    Published
    21 Dec 2018
    Packages

    libjpeg-turbo, libjpeg-turbo, libjpeg-turbo

    Summary

    Published
    21 Dec 2018
    CVE-2018-20329
    Fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-20328
    Fix available
    Packages

    Summary

    Published
    21 Dec 2018
    CVE-2018-20327
    Fix available
    Packages

    Summary

    Published
    21 Dec 2018
    SUSE-SU-2018:4214-1
    Fix available
    Packages

    netatalk

    Summary

    Security update for netatalk

    Published
    21 Dec 2018
    CVE-2018-20318
    No fix available
    Packages

    Summary

    Published
    21 Dec 2018
    DLA-1612-1
    Fix available
    Packages

    libarchive

    Summary

    libarchive - security update

    Published
    21 Dec 2018
    Packages

    sqlite3, sqlite3, sqlite3

    Summary

    Published
    21 Dec 2018
    Packages

    darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee

    Summary

    Published
    21 Dec 2018
    USN-3848-2
    Fix available
    Packages

    linux-aws, linux-lts-xenial

    Summary

    linux-lts-xenial, linux-aws vulnerabilities

    Published
    20 Dec 2018
    USN-3849-1
    Fix available
    Packages

    linux

    Summary

    linux vulnerabilities

    Published
    20 Dec 2018
    Packages

    qemu, qemu, qemu

    Summary

    Published
    20 Dec 2018
    CVE-2018-20191
    No fix available
    Packages

    ,

    Summary

    Published
    20 Dec 2018
    CVE-2018-20124
    No fix available
    Packages

    ,

    Summary

    Published
    20 Dec 2018
    Packages

    qemu, qemu, qemu

    Summary

    Published
    20 Dec 2018
    CVE-2018-19242
    No fix available
    Packages

    Summary

    Published
    20 Dec 2018