CVE-2022-4144 affecting package qemu for versions less than 6.2.0-12

CVE-2022-4144 affecting package qemu for versions less than 6.2.0-12. A patched version of the package is available...

CVE-2022-45939 affecting package emacs for versions less than 28.1-5

CVE-2022-45939 affecting package emacs for versions less than 28.1-5. A patched version of the package is available...

CVE-2022-43551 affecting package curl for versions less than 7.86.0-2

CVE-2022-43551 affecting package curl for versions less than 7.86.0-2. A patched version of the package is available...

CVE-2022-23525 affecting package helm for versions less than 3.9.4-4

CVE-2022-23525 affecting package helm for versions less than 3.9.4-4. A patched version of the package is available...

CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2. A patched version of the package is available...

CVE-2023-22456

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability that affects versions prior to 1.2.2 and 1.1.29. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository...

WordPress Blockonomics Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Blockonomics Type Plugin Vulnerable versions = 3.5.7 Fixed in 3.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID a483f702894f Credits N/A Required privilege...

CVE-2022-46173 Elrond go Processing: fallback search of SCRs when not found in the main cache

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between t...

Authentication flaw

authentik is an open-source Identity Provider focused on flexibility and versatility. Versions prior to 2022.11.4 and 2022.10.4 are vulnerable to Improper Authentication. Token reuse in invitation URLs leads to access control bypass via the use of a different enrollment flow than in the one...

DEBIAN-CVE-2022-41966

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack uses the hash code implementation for...

CVE-2022-41966 XStream Denial of Service via stack overflow

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack uses the hash code implementation for...

CVE-2022-3112 affecting package kernel 5.10.155.1-1

CVE-2022-3112 affecting package kernel 5.10.155.1-1. A patched version of the package is available...

CVE-2022-3111 affecting package kernel 5.10.155.1-1

CVE-2022-3111 affecting package kernel 5.10.155.1-1. A patched version of the package is available...

CVE-2022-3107 affecting package kernel 5.10.155.1-1

CVE-2022-3107 affecting package kernel 5.10.155.1-1. A patched version of the package is available...

CVE-2022-3104 affecting package kernel 5.10.155.1-1

CVE-2022-3104 affecting package kernel 5.10.155.1-1. A patched version of the package is available...

CVE-2022-3113 affecting package kernel 5.10.155.1-1

CVE-2022-3113 affecting package kernel 5.10.155.1-1. A patched version of the package is available...

CVE-2022-43945 affecting package kernel 5.10.155.1-1

CVE-2022-43945 affecting package kernel 5.10.155.1-1. A patched version of the package is available...

CVE-2022-23471 affecting package moby-containerd 1.6.6+azure-4

CVE-2022-23471 affecting package moby-containerd 1.6.6+azure-4. A patched version of the package is available...

CVE-2022-3204 affecting package unbound 1.10.0-4

CVE-2022-3204 affecting package unbound 1.10.0-4. A patched version of the package is available...

CVE-2021-32692 Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt

Activity Watch is a free and open-source automated time tracker. Versions prior to 0.11.0 allow an attacker to execute arbitrary commands on any macOS machine with ActivityWatch running. The attacker can exploit this vulnerability by having the user visiting a website with the page title set to a...