6540 matches found
CVE-2022-2601 affecting package grub2 for versions less than 2.06-8
CVE-2022-2601 affecting package grub2 for versions less than 2.06-8. A patched version of the package is available...
CVE-2022-41973 affecting package device-mapper-multipath for versions less than 0.8.6-4
CVE-2022-41973 affecting package device-mapper-multipath for versions less than 0.8.6-4. A patched version of the package is available...
CVE-2022-47519 affecting package kernel 5.10.158.1-1
CVE-2022-47519 affecting package kernel 5.10.158.1-1. A patched version of the package is available...
CVE-2022-1016 affecting package kernel 5.10.189.1-1
CVE-2022-1016 affecting package kernel 5.10.189.1-1. A patched version of the package is available...
CVE-2022-47520 affecting package kernel 5.10.158.1-1
CVE-2022-47520 affecting package kernel 5.10.158.1-1. A patched version of the package is available...
CVE-2022-47521 affecting package kernel 5.10.158.1-1
CVE-2022-47521 affecting package kernel 5.10.158.1-1. A patched version of the package is available...
CVE-2021-4207 affecting package qemu-kvm 4.2.0-46
CVE-2021-4207 affecting package qemu-kvm 4.2.0-46. A patched version of the package is available...
CVE-2022-3872 affecting package qemu-kvm 4.2.0-46
CVE-2022-3872 affecting package qemu-kvm 4.2.0-46. A patched version of the package is available...
CVE-2021-20295 affecting package qemu-kvm 4.2.0-38
CVE-2021-20295 affecting package qemu-kvm 4.2.0-38. A patched version of the package is available...
CVE-2022-2962 affecting package qemu-kvm 4.2.0-43
CVE-2022-2962 affecting package qemu-kvm 4.2.0-43. A patched version of the package is available...
CVE-2022-0358 affecting package qemu-kvm 4.2.0-41
CVE-2022-0358 affecting package qemu-kvm 4.2.0-41. A patched version of the package is available...
CVE-2022-2601 affecting package grub2 2.06~rc1-8
CVE-2022-2601 affecting package grub2 2.06rc1-8. A patched version of the package is available...
CVE-2022-23526 affecting package helm 3.4.1-13
CVE-2022-23526 affecting package helm 3.4.1-13. A patched version of the package is available...
GHSA-8F7F-VQG5-JRV9 .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2023-21538: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to...
.NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2023-21538: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to...
CVE-2022-46163 travel-support-program vulnerable to data exfiltration via Ransack query injection
Travel support program is a rails app to support the travel support program of openSUSE TSP. Sensitive user data bank account details, password Hash can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched version is affected. The...
CVE-2022-46163 travel-support-program vulnerable to data exfiltration via Ransack query injection
Travel support program is a rails app to support the travel support program of openSUSE TSP. Sensitive user data bank account details, password Hash can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched version is affected. The...
Design/Logic Flaw
Discourse Mermaid discourse-mermaid-theme-component allows users of Discourse, open-source forum software, to create graphs using the Mermaid syntax. Users of discourse-mermaid-theme-component version 1.0.0 who can create posts are able to inject arbitrary HTML on that post. The issue has been...
Cross site scripting
ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by a...