spotify-song-suggestor (=0.0.0), transcend-boilerplate-multipage-react (>=1.0.0 <=1.0.1) +8 more potentially affected by CVE-2021-29486 via cumulative-distribution-function (=1.0.3)

cumulative-distribution-function NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cumulative-distribution-function and may be impacted: - spotify-song-suggestor =0.0.0 - transcend-boilerplate-multipage-react =1.0.0, =1.0.2, =1.0.1,...

OPENSUSE-SU-2021:0634-1 Security update for librsvg

This update for librsvg fixes the following issues: - librsvg was updated to 2.46.5: Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2021-25900 bsc1183403 This update was imported from the SUSE:SLE-15-SP2:Update update project...

SUSE-SU-2021:1408-1 Security update for librsvg

This update for librsvg fixes the following issues: - librsvg was updated to 2.46.5: Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2021-25900 bsc1183403...

SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2021:1310-1)

This update for librsvg fixes the following issues : librsvg was updated to 2.42.9 : - Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 bsc1148293 -the bundled version of the cssparser crate now builds correctly on Rust 1.43...

SUSE-SU-2021:1310-1 Security update for librsvg

This update for librsvg fixes the following issues: - librsvg was updated to 2.42.9: Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 bsc1148293 -the bundled version of the cssparser crate now builds correctly on Rust 1.43 bsc11815...

Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries

Summary Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries Vulnerability Details Summary Resilient OnPrem v31.0 has addressed vulnerabilities in a number of dependent libraries. Vulnerability Details CVEID: CVE-2017-9735 DESCRIPTION: Jetty cou...

coop (>=0.3.1 <=2.10.2), django-oscar-wagtail (=0.0.5) +36 more potentially affected by CVE-2021-29434 via wagtail (>=1.0.0 <=2.10.2)

wagtail PYPI version =1.0.0, =0.3.1, =0.1.1, =5.22.3, =6.3.0, =0.0.1, =0.1.0, =2.0.7, =0.3.1, =0.5.4, =0.4.1, =1.1.1 and more Source cves: CVE-2021-29434 Source advisory: OSV:PYSEC-2021-114...

ariadne-jwt (>=0.1.0 <=0.1.3), balder (=0.1.24) +30 more potentially affected by CVE-2020-24584 via django (>=3.1.0 <=3.1.0rc1)

django PYPI version =3.1.0, =0.1.0, =20.13.1, =0.1.0, =0.10.0, =0.9.0, =0.4.0, =0.12.0, =0.5.0, =0.7.0, =0.8.0, =0.13.2 and more Source cves: CVE-2020-24584 Source advisory: OSV:GHSA-FR28-569J-53C4...

grub2: Use-after-free in rmmod command

A flaw was found in grub2. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The...

aglvq (=1.0.0), beacon-trellis (=0.1.0) +64 more potentially affected by CVE-2020-26271 via tensorflow (>=2.1.0 <=2.1.2)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.0.2, =0.1.0, =1.1.0, =0.2.0rc1, =0.2.0rc3 and more Source cves: CVE-2020-26271 Source advisory: OSV:PYSEC-2020-257...

accuinsight (>=1.0.47 <=1.0.61), alphad3m (>=0.10.0 <=0.10.0.dev1) +86 more potentially affected by CVE-2020-26266 via tensorflow (>=2.2.0 <=2.2.1)

tensorflow PYPI version =2.2.0, =1.0.47, =0.10.0, =0.5.0, =0.2.0, =0.0.6, =1.2.0, =1.0.0, =0.0.15, =0.0.16 and more Source cves: CVE-2020-26266 Source advisory: OSV:GHSA-QHXX-J73R-QPM2...

safe_dns (=0.3.0), safe_launcher (=0.1.0) +1 more potentially affected by unknown CVE via safe_core (=0.3.0)

safecore CARGO version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on safecore and may be impacted: - safedns =0.3.0 - safelauncher =0.1.0 - safenfs =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0086...

@mdslab/iotronic-lightning-rod (>=2.3.1 <=2.3.6), connection-test-table (>=0.1.0 <=0.1.3) +9 more potentially affected by CVE-2020-7781 via connection-tester (>=0.0.7 <=0.2.0)

connection-tester NPM version =0.0.7, =2.3.1, =0.1.0, =0.0.1, =0.0.1, =0.0.10, =1.1.3, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2020-7781 Source advisory: SNYK:JS-CONNECTIONTESTER-1048337...

WIBU CodeMeter vulnerabilities fixed

Wibu-Systems has fixed vulnerabilities in CodeMeter. Successful exploitation of these vulnerabilities could allow a malicious person to modify and forge a license file, create a denial-of-service condition, potentially execute remote code execute, read heap data, and disrupt the normal operation ...

abra (=0.0.1), abrute (>=0.1.7 <=0.1.9) +702 more potentially affected by CVE-2020-26235 via chrono (>=0.2.16 <=0.4.2)

chrono CARGO version =0.2.16, =0.1.7, =0.1.0, =0.1.0, =0.0.11, =0.7.0, =1.1.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.2.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0159...

ALPINE-CVE-2020-12401

During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox 80 and Firefox for Android 80...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +99 more potentially affected by CVE-2020-15201 via tensorflow-cpu (>=1.15.0 <=2.2.3)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.0.1, =0.3.3 and more Source cves: CVE-2020-15201 Source advisory: OSV:PYSEC-2020-281...

accuinsight (>=1.0.47 <=1.0.61), alphad3m (>=0.10.0 <=0.10.0.dev1) +82 more potentially affected by CVE-2020-15204 via tensorflow (=2.2.0)

tensorflow PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - accuinsight =1.0.47, =0.10.0, =0.5.0, =0.2.0, =0.0.6, =1.2.0, =1.0.0, =0.0.15, =0.0.16 and more Source cves: CVE-2020-15204 Source advisory...

adapt-diagnostics (=1.2.0), adversarial-friend (=1.1.8) +64 more potentially affected by CVE-2020-15205 via tensorflow (=2.3.0)

tensorflow PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adapt-diagnostics =1.2.0 - adversarial-friend =1.1.8 - aliby-baby =0.1.0, =0.0.1a0, =0.0.1, =1.0.1.0, =0.1.0, =2.0.0, =0.1.0, =0.0.17, =0.1...

CVE-2020-24890

libraw 20.0 has a null pointer dereference vulnerability in parsetiffifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way...