CVE-2021-35612 affecting package mysql for versions less than 8.0.28-1

CVE-2021-35612 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21344 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21344 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-35645 affecting package mysql for versions less than 8.0.28-1

CVE-2021-35645 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-35610 affecting package mysql for versions less than 8.0.28-1

CVE-2021-35610 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2010-0298 affecting package kernel for versions less than 5.10.78.1-1

CVE-2010-0298 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2021-44533 affecting package nodejs for versions less than 16.14.0-1

CVE-2021-44533 affecting package nodejs for versions less than 16.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21824 affecting package nodejs for versions less than 16.14.0-1

CVE-2022-21824 affecting package nodejs for versions less than 16.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-22931 affecting package nodejs for versions less than 16.14.0-1

CVE-2021-22931 affecting package nodejs for versions less than 16.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-15136 affecting package etcd for versions less than 3.5.0-3

CVE-2020-15136 affecting package etcd for versions less than 3.5.0-3. An upgraded version of the package is available that resolves this issue...

CVE-2020-15115 affecting package etcd for versions less than 3.5.0-3

CVE-2020-15115 affecting package etcd for versions less than 3.5.0-3. An upgraded version of the package is available that resolves this issue...

CVE-2008-0888 affecting package unzip for versions less than 6.0-19

CVE-2008-0888 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...

CVE-2021-4192 affecting package vim for versions less than 8.2.4081-1

CVE-2021-4192 affecting package vim for versions less than 8.2.4081-1. An upgraded version of the package is available that resolves this issue...

Incorrect protocol extraction via \r, \n and \t characters

\r, \n and \t characters in user-input URLs can potentially lead to incorrect protocol extraction when using npm package urijs prior to version 1.19.11. This can lead to XSS when the module is used to prevent passing in malicious javascript: links into HTML or Javascript see following example:...

CVE-2022-21223

CVE-2022-21223 affects cocoapods-downloader prior to 1.6.2. The flaw is a Command Injection in the download path when using hg, where the URL and/or revision/branch are passed to the hg clone command, allowing extra flags to be injected. Affected component: cocoapods-downloader (Ruby gem). Root c...

CVE-2022-21235

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a command injection...

CVE-2022-21235 Command Injection

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a command injection...

Mageia: Security Advisory (MGASA-2022-0123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21221

The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. Note: This security issue impacts Windows users only...

CVE-2022-25354

The package set-in before 2.0.3 are vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-28273...

Design/Logic Flaw

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. Note: This...