Open Source Vulnerabilities

ghostscript, ghostscript, ghostscript

CVE-2018-19134 does not affect BellSoft software

CVE-2018-20191 does not affect BellSoft software

ghostscript, ghostscript, ghostscript

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

linux-azure

linux-azure vulnerabilities

linux-aws-hwe, linux-azure, linux-gcp, linux-hwe

linux-hwe, linux-aws-hwe, linux-azure, linux-gcp vulnerabilities

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities

,

,

org.bedework.caleng:bw-calendar-engine

XML External Entity (XXE) vulnerability in bw-calendar-engine

org.apache.nifi:nifi

Cleartext Transmission of Sensitive Information in Apache nifi

org.apache.nifi:nifi

Cross site scripting in org.apache.nifi:nifi

org.apache.nifi:nifi-framework-cluster

Apache NiFi Improper Input Validation vulnerability

org.apache.nifi:nifi

Improper Restriction of Rendered UI Layers or Frames in Apache nifif

org.exist-db:exist-core

exist-db:exist-core XML External Entity (XXE) vulnerability

org.codelibs.fess:fess

XML External Entity (XXE) vulnerability in codelibs fess

org.neo4j.procedure:apoc

XML External Entity (XXE) vulnerability in neo4j.procedure:apoc

fat_free_crm, fat_free_crm, fat_free_crm, fat_free_crm, fat_free_crm

Fat Free CRM vulnerable to Cross-site Scripting

aiohttp-session

aiohttp-session creates non-expiring sessions

luigi

Cross-Site Request Forgery (CSRF) in Luigi

org.springframework.security:spring-security-core, org.springframework.security:spring-security-oauth2-jose

Spring Security vulnerable to Authorization Bypass

org.apache.oozie:oozie-core

Moderate severity vulnerability that affects org.apache.oozie:oozie-core

qemu, qemu, qemu

,

,

qemu, qemu, qemu

,

qemu, qemu, qemu