CVE-2022-24760 Command Injection in Parse server

Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution RCE vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution...

Nextcloud Server < 21.0.8, 22.x < 22.2.4, 23.x < 23.0.1 DoS Vulnerability (GHSA-jf3h-xf4q-mh89)

Nextcloud Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GHSA-CRP2-QRR5-8PQ7 vulnerabilities

Vulnerabilities for packages: ctop...

GHSA-CRP2-QRR5-8PQ7 vulnerabilities

Vulnerabilities for packages: ctop...

GHSA-GV9J-4W24-Q7VX vulnerabilities

Vulnerabilities for packages: juicefs...

OpenMRS 1.6 - 2.5.x Directory Traversal Vulnerability (GHSA-8rgr-ww69-jv65)

OpenMRS is prone to a directory traversal vulnerability in the startup filter. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

Ruby on Rails Information Disclosure Vulnerability (GHSA-rmj8-8hhh-gv5h) - Linux

Ruby on Rails is prone to an information disclosure vulnerability in puma. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Ruby on Rails Information Disclosure Vulnerability (GHSA-rmj8-8hhh-gv5h) - Windows

Ruby on Rails is prone to an information disclosure vulnerability in puma. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Ruby on Rails Information Disclosure Vulnerability (GHSA-wh98-p28r-vrc9) - Windows

Ruby on Rails is prone to an information disclosure vulnerability in Action Pack. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

GHSA-WF43-55JJ-VWQ8 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

GHSA-QRRC-WW9X-R43G vulnerabilities

Vulnerabilities for packages: beats-fips, beats...

Duplicate Advisory: TLS certificate validation error in mellium.im/xmpp

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h289-x5wc-xcv8. This link is maintained to preserve external references. Original Description In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket...

GHSA-F5PG-7WFW-84Q9 vulnerabilities

Vulnerabilities for packages: mattermost, loki, external-secrets-operator, zot, k3d, opentelemetry-collector, kots...

GHSA-F5PG-7WFW-84Q9 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, opentelemetry-collector, loki, argo-cd, dapr-fips, elastic-agent-fips, cloud-sql-proxy, grafana, external-secrets-operator, grafana-fips, rancher-agent, kube-arangodb, consul-fips, elastic-agent, prometheus, vault-fips,...

GHSA-76WF-9VGP-PJ7W vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-7F33-F4F5-XWGW vulnerabilities

Vulnerabilities for packages: mattermost, loki, external-secrets-operator, zot, k3d, opentelemetry-collector, kots...

CVE-2022-23633

Action Pack is a framework for handling and responding to web requests. Under certain circumstances response bodies will not be closed. In the event a response is not notified of a close, ActionDispatch::Executor will not know to reset thread local state for the next request. This can lead to dat...

Design/Logic Flaw

Action Pack is a framework for handling and responding to web requests. Under certain circumstances response bodies will not be closed. In the event a response is not notified of a close, ActionDispatch::Executor will not know to reset thread local state for the next request. This can lead to dat...