Open Source Vulnerabilities

cluster-api-azure-controller-fips-1.27

cluster-api-azure-controller-fips-1.27

cluster-api-azure-controller-1.27

cluster-api-azure-controller-1.27

grafana-13.1

grafana-13.1

org.thymeleaf:thymeleaf

TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)

nltk

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

nltk

NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read

nltk

NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

nltk

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root

libzypp, zypper

Security update for libzypp, zypper

grafana-tempo-datasource

grafana-tempo-datasource

glibc, glibc

glibc vulnerabilities

percona-toolkit-mongodb-index-check

Snipe-IT before 8.7.0 CSS Injection via Custom CSS

snipe-it before 8.7.0 Missing Authorization via barcode endpoint

snipe-it before 8.7.0 Checkout Request Counter Integrity Failure

snipe-it before 8.7.0 SSRF via IPv6 transition address bypass

Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field

Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore

Craft CMS before 5.10.12 Remote Code Execution via element-index

Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersController

Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE

WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize

AVideo through 29.0 Unauthenticated Disclosure via epg.json.php

AVideo through 29.0 Information Disclosure via stats.json.php

AVideo through 29.0 Information Disclosure via restreamsActive.json.php

grafana-tempo-datasource

grafana-tempo-datasource

grafana-mssql-datasource

grafana-loki-datasource

org.eclipse.jetty.aggregate:jetty-all, org.eclipse.jetty.fcgi:fcgi-client, org.eclipse.jetty.fcgi:fcgi-parent, org.eclipse.jetty.fcgi:fcgi-server, org.eclipse.jetty.gcloud:gcloud-parent, org.eclipse.jetty.gcloud:jetty-gcloud-session-manager, org.eclipse.jetty.http2:http2-client, org.eclipse.jetty.http2:http2-common, org.eclipse.jetty.http2:http2-hpack, org.eclipse.jetty.http2:http2-http-client-transport, org.eclipse.jetty.http2:http2-parent, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.memcached:jetty-memcached-sessions, org.eclipse.jetty.memcached:memcached-parent, org.eclipse.jetty.osgi:jetty-httpservice, org.eclipse.jetty.osgi:jetty-osgi-alpn, org.eclipse.jetty.osgi:jetty-osgi-boot, org.eclipse.jetty.osgi:jetty-osgi-boot-jsp, org.eclipse.jetty.osgi:jetty-osgi-boot-warurl, org.eclipse.jetty.osgi:jetty-osgi-project, org.eclipse.jetty.osgi:test-jetty-osgi, org.eclipse.jetty.osgi:test-jetty-osgi-webapp-resources, org.eclipse.jetty.tests:test-mock-resources, org.eclipse.jetty.websocket:javax-websocket-client-impl, org.eclipse.jetty.websocket:javax-websocket-server-impl, org.eclipse.jetty.websocket:jetty-websocket-tests, org.eclipse.jetty.websocket:websocket-api, org.eclipse.jetty.websocket:websocket-client, org.eclipse.jetty.websocket:websocket-common, org.eclipse.jetty.websocket:websocket-parent, org.eclipse.jetty.websocket:websocket-server, org.eclipse.jetty.websocket:websocket-servlet, org.eclipse.jetty:apache-jsp, org.eclipse.jetty:apache-jstl, org.eclipse.jetty:infinispan-common, org.eclipse.jetty:infinispan-embedded, org.eclipse.jetty:infinispan-embedded-query, org.eclipse.jetty:infinispan-parent, org.eclipse.jetty:infinispan-remote, org.eclipse.jetty:infinispan-remote-query, org.eclipse.jetty:jetty-alpn-client, org.eclipse.jetty:jetty-alpn-conscrypt-client, org.eclipse.jetty:jetty-alpn-conscrypt-server, org.eclipse.jetty:jetty-alpn-java-client, org.eclipse.jetty:jetty-alpn-java-server, org.eclipse.jetty:jetty-alpn-openjdk8-client, org.eclipse.jetty:jetty-alpn-openjdk8-server, org.eclipse.jetty:jetty-alpn-parent, org.eclipse.jetty:jetty-alpn-server, org.eclipse.jetty:jetty-annotations, org.eclipse.jetty:jetty-ant, org.eclipse.jetty:jetty-bom, org.eclipse.jetty:jetty-cdi, org.eclipse.jetty:jetty-client, org.eclipse.jetty:jetty-continuation, org.eclipse.jetty:jetty-deploy, org.eclipse.jetty:jetty-distribution, org.eclipse.jetty:jetty-documentation, org.eclipse.jetty:jetty-hazelcast, org.eclipse.jetty:jetty-home, org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-http-spi, org.eclipse.jetty:jetty-io, org.eclipse.jetty:jetty-jaas, org.eclipse.jetty:jetty-jaspi, org.eclipse.jetty:jetty-jmx, org.eclipse.jetty:jetty-jndi, org.eclipse.jetty:jetty-jspc-maven-plugin, org.eclipse.jetty:jetty-maven-plugin, org.eclipse.jetty:jetty-nosql, org.eclipse.jetty:jetty-openid, org.eclipse.jetty:jetty-plus, org.eclipse.jetty:jetty-project, org.eclipse.jetty:jetty-proxy, org.eclipse.jetty:jetty-quickstart, org.eclipse.jetty:jetty-rewrite, org.eclipse.jetty:jetty-runner, org.eclipse.jetty:jetty-security, org.eclipse.jetty:jetty-server, org.eclipse.jetty:jetty-servlet, org.eclipse.jetty:jetty-servlets, org.eclipse.jetty:jetty-spring, org.eclipse.jetty:jetty-start, org.eclipse.jetty:jetty-unixsocket, org.eclipse.jetty:jetty-util, org.eclipse.jetty:jetty-util-ajax, org.eclipse.jetty:jetty-webapp, org.eclipse.jetty:jetty-xml, org.eclipse.jetty:test-jetty-webapp, org.eclipse.jetty:test-proxy-webapp

TuxCare security update for 90 packages (2 CVEs)

grafana-13.0, grafana-13.0

grafana-13.0, grafana-13.0

percona-toolkit-mongodb-query-digest

grafana-12.1

grafana-12.1

percona-toolkit-mongodb-query-digest

percona-toolkit-mongodb-index-check

aircheng-org iWebShop-5 update.php index authorization

helm

Security update for helm

helm

Security update for helm

percona-toolkit-secure-collect

percona-toolkit-mongodb-summary

A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin (version 9.12)

perl, perl, perl, perl, perl, perl

perl vulnerabilities

org.springframework:framework-docs, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-core-test, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket

TuxCare security update for org.springframework (2 CVEs)

org.springframework:spring, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket

TuxCare security update for org.springframework (8 CVEs)