CVE-2020-28424

This affects all versions of package s3-kilatstorage...

py-flask-security -- user redirect to arbitrary URL vulnerability

Snyk reports: This affects all versions of package Flask-Security. When using the getpostlogoutredirect and getpostloginredirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerabilit...

CVE-2020-7677

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization...

GHSA-CJ7V-27PG-WF7Q vulnerabilities

Vulnerabilities for packages: druid, spark...

MGASA-2022-0248 Updated ruby-git packages fix security vulnerability

Command Injection via git argument injection CVE-2022-25648...

MAL-2022-654 Malicious code in @tinkoff-react-bui/highlighter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f35ba0953c3d1b55af3ac66481e856e15f84300b58641282f67339e9fa1bbb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-275 Malicious code in @flameshot/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8bbca4a9cd0a35a35928860188f38aa877f6edfa6b4eb2b65c110d2d83990bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security fix for the ALT Linux 10 package php8.2 version 8.1.7-alt1

June 16, 2022 Anton Farygin 8.1.7-alt1 - 8.1.6 - 8.1.7 Fixes: CVE-2022-31626, CVE-2022-31625...

MGASA-2022-0227 Updated docker-containerd packages fix security vulnerability

A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the 'ExecSync' API. CVE-2022-31030...

GHSA-CQJ8-47CH-RVVQ vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2021-4157 affecting package kernel 5.10.109.1-2

CVE-2021-4157 affecting package kernel 5.10.109.1-2. A patched version of the package is available...

CVE-2022-25634 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2022-25634 affecting package qt5-qtsvg for versions less than 5.12.11-3. A patched version of the package is available...

CVE-2015-3276 affecting package openldap for versions less than 2.4.57-5

CVE-2015-3276 affecting package openldap for versions less than 2.4.57-5. A patched version of the package is available...

CVE-2022-24769 vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester, ctop...

CVE-2022-23812

This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. Note: from versions 11.0.0 onwards, instead of having malicious code directly in the sourc...

Booking Package < 1.5.29 - Unauthenticated Sensitive Data Disclosure

The plugin requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability. When a guest make a booking via sending "action:...

Mageia: Security Advisory (MGASA-2018-0436)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types...

GHSA-897M-RJF5-JP39 Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +169 more potentially affected by CVE-2021-41217 via tensorflow-gpu (>=1.10.1 <=2.4.2)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 - cctv-analysis =0.0.2 - chatbot-nlu =1.0.0 and more Source cves: CVE-2021-41217 Source advisory: OSV:PYSEC-2021-824...