CVE-2021-3632: Improper Authentication

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow...

CVE-2022-2255: Use of Less Trusted Source

A vulnerability was found in modwsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing...

MAL-2022-4241 Malicious code in kuvp-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5748a8ba514319f3aca366e59b06abb3d5410635f32ebf3804e778fc99d004d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kuvp-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5748a8ba514319f3aca366e59b06abb3d5410635f32ebf3804e778fc99d004d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7

CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7. A patched version of the package is available...

CVE-2022-1652 affecting package kernel for versions less than 5.15.55.1-1

CVE-2022-1652 affecting package kernel for versions less than 5.15.55.1-1. A patched version of the package is available...

CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1

CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1. A patched version of the package is available...

CVE-2022-2344 affecting package vim for versions less than 9.0.0050-2

CVE-2022-2344 affecting package vim for versions less than 9.0.0050-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-2345 affecting package vim for versions less than 9.0.0050-2

CVE-2022-2345 affecting package vim for versions less than 9.0.0050-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-32206 affecting package curl for versions less than 7.84.0-1

CVE-2022-32206 affecting package curl for versions less than 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32207 affecting package curl for versions less than 7.84.0-1

CVE-2022-32207 affecting package curl for versions less than 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32205 affecting package curl for versions less than 7.84.0-1

CVE-2022-32205 affecting package curl for versions less than 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-31150

undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to eliminate \r\n is a workaround for this...

CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1

CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-30115 affecting package curl for versions less than 7.83.1-1

CVE-2022-30115 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27781 affecting package curl for versions less than 7.83.1-1

CVE-2022-27781 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1215 affecting package libinput for versions less than 1.21.0-1

CVE-2022-1215 affecting package libinput for versions less than 1.21.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1785 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1

CVE-2022-1733 affecting package vim for versions less than 8.2.5064-1. An upgraded version of the package is available that resolves this issue...