9836 matches found
CVE-2022-36944 vulnerabilities
Vulnerabilities for packages: spark-scala-2.13...
GHSA-3F7H-MF4Q-VRM4 vulnerabilities
Vulnerabilities for packages: sonarqube-10...
GHSA-VFV3-9W6V-23JP vulnerabilities
Vulnerabilities for packages: efs-utils...
GHSA-PP8R-VV2J-9J5V vulnerabilities
Vulnerabilities for packages: efs-utils...
CVE-2022-40152 vulnerabilities
Vulnerabilities for packages: sonarqube-10...
CVE-2022-32190
JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath"https://go.dev", "../go" returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result...
Fedora: Security Advisory for exim (FEDORA-2022-f9a8388e62)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-32862 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2022-38235
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...
Unspecified Vulnerability in Exim (CNVD-2022-56952)
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim versions prior to 4.95, which stems from a heap-based buffer overflow in the alias list in hostnamelookup when senderhostname is set. No details of t...
CVE-2021-33646
The thread function doesn’t free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak...
CVE-2021-33645
The thread function doesn’t free a variable t-thbuf.gnulonglink after allocating memory, which may cause a memory leak...
[SECURITY] Fedora 36 Update: stargz-snapshotter-0.12.0-2.fc36
Fast container image distribution plugin with lazy pulling...
[SECURITY] Fedora 36 Update: golang-github-facebookincubator-go2chef-1.0-3.fc36
go2chef is a Go tool for bootstrapping Chef installations in a flexible and self-contained way. With go2chef, our goal is to make bootstrapping any node in a Chef deployment as simple as "get go2chef onto a machine and run it"...
[SECURITY] Fedora 36 Update: golang-github-crossdock-0-0.9.20190628git049aabb.fc36
A Go client for Crossdock...
CVE-2022-31097
Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, 8.5.9, 8.4.10, and 8.3.10 are vulnerable to stored cross-site scripting via the Unified Alerting feature of Grafana. An attacker can exploit this vulnerability to escalate...
junit4: TemporaryFolder is shared between all users across system which could result in information disclosure
In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...
netty: Information disclosure via the local system temporary directory
In Netty there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used, a local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the...
php: password of excessive length triggers buffer overflow leading to RCE
A buffer overflow vulnerability was found in PHP when processing passwords in mysqlnd/pdo in mysqlndwireprotocol.c. When using the pdomysql extension with mysqlnd driver, if the third party is allowed to supply a MySQL database server password in the mysqlnd driver to the host for the connection,...