CVE-2022-25844

The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service ReDoS by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat of NUMBERFORMATS.PATTERNS1.posPre with a very high value. Note: 1 This package has been deprecated an...

CVE-2022-25854

The CVE affects @yaireo/tagify before 4.9.8. The root cause is that the placeholder input is not escaped in the Tagify rendering logic (tagify.js), enabling an attacker to inject and trigger XSS via a malicious placeholder value. Impact is XSS in inputs using Tagify; exploitation details are not ...

CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5

CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5. A patched version of the package is available...

CVE-2021-43396 affecting package glibc for versions less than 2.35-1

CVE-2021-43396 affecting package glibc for versions less than 2.35-1. An upgraded version of the package is available that resolves this issue...

CVE-1999-0656 affecting package kernel for versions less than 5.10.78.1-1

CVE-1999-0656 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2

CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2. A patched version of the package is available...

CVE-2022-23772 affecting package golang for versions less than 1.17.8-1

CVE-2022-23772 affecting package golang for versions less than 1.17.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3. An upgraded version of the package is available that resolves this issue...

CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3. An upgraded version of the package is available that resolves this issue...

CVE-2017-6519 affecting package avahi for versions less than 0.8-1

CVE-2017-6519 affecting package avahi for versions less than 0.8-1. An upgraded version of the package is available that resolves this issue...

Command injection

The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable$url, array $refs = NULL function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set...

Slackware: Security Advisory (SSA:2020-124-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2006-178-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-25648 Command Injection

The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetchremote = 'origin', opts = function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform...

CVE-2019-12855 affecting package python-twisted for versions less than 22.2.0-1

CVE-2019-12855 affecting package python-twisted for versions less than 22.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-35637 affecting package mysql for versions less than 8.0.28-1

CVE-2021-35637 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-35627 affecting package mysql for versions less than 8.0.28-1

CVE-2021-35627 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-35612 affecting package mysql for versions less than 8.0.28-1

CVE-2021-35612 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21344 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21344 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...