CVE-2022-2428

A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests...

CVE-2022-38334

XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree at Catalog.cc...

PT-2022-25032 · Ibm · Lotus 1-2-3 R3 For Unix

Name of the Vulnerable Software and Affected Versions: 123elf Lotus 1-2-3 versions prior to 1.0.0rc3 Lotus 1-2-3 R3 for UNIX and other platforms versions prior to 9.8.2 Description: The issue allows attackers to execute arbitrary code via a crafted worksheet. This occurs because of a stack-based...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.310.7.1 - rds: copyfromuser only once per rdssendmsg system call Hans Westgaard Ry Orabug: 33981855 CVE-2022-21385...

CVE-2022-35166

libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal...

CVE-2022-35452

OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c...

CVE-2022-21485 affecting package mysql for versions less than 8.0.29-1

CVE-2022-21485 affecting package mysql for versions less than 8.0.29-1. An upgraded version of the package is available that resolves this issue...

Tor - Unspecified high severity vulnerability

Tor organization reports: TROVE-2022-001...

CVE-2022-2060

Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0...

CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files...

CVE-2021-40145 affecting package gd for versions less than 2.3.0-5

CVE-2021-40145 affecting package gd for versions less than 2.3.0-5. A patched version of the package is available...

CVE-2022-27652

A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby Docker Engine where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs...

CVE-2021-37159 affecting package kernel for versions less than 5.15.2.1-1

CVE-2021-37159 affecting package kernel for versions less than 5.15.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-45095 affecting package kernel for versions less than 5.15.18.1-1

CVE-2021-45095 affecting package kernel for versions less than 5.15.18.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-29265 affecting package kernel for versions less than 5.10.78.1-1

CVE-2021-29265 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2021-32675 affecting package redis for versions less than 6.2.6-1

CVE-2021-32675 affecting package redis for versions less than 6.2.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-26635

Removed by vendor...

ROS-20220301-02

Vim text editor vulnerability, related to NULL pointer dereferencing error in Vim when switching tabs in command line window. when switching tabs in a command line window. Exploitation of the vulnerability could allow an attacker, remotely to perform a denial-of-service DoS attack...

CVE-2022-21719

GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9.5.7 contains a patch for this issue. There are no known workarounds...

UBUNTU-CVE-2021-44717

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion...