CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2

CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2. A patched version of the package is available...

16pixels (>=0.1.10, <=0.1.12), @3dlook/camera (>=2.1.0, <=2.2.0) +1120 more potentially affected by CVE-2022-29244 via npm (>=7.9.0, <=8.8.0)

npm NPM version =7.9.0, =0.1.10, =2.1.0, =5.0.5, =2.0.0, =1.0.0, =1.0.0-beta.2, =2.3.0, =1.0.0, =0.8.0, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =3.0.2 and more Source cves: CVE-2022-29244 Source advisory: OSV:GHSA-HJ9C-8JMM-8C52...

PT-2022-20466 · Bleve +1 · Bleve +1

Name of the Vulnerable Software and Affected Versions: Bleve affected versions not specified Description: The issue concerns the bleve/http package, which is used for demonstration purposes and lacks authentication, authorization, and validation of user inputs. This allows attackers to exploit a...

USN-5446-1: dpkg vulnerability

Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or...

qlib Deserialization of Untrusted Data vulnerability

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function...

Fedora: Security Advisory for golang-github-prometheus-tsdb (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-23592

The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2022-1634)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

CVE-2022-21230

This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure permissions that allow its contents to ...

Code injection

All versions of package masuit.tools.core are vulnerable to Arbitrary Code Execution via the ReceiveVarData function in the SocketClient.cs component. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client...

CVE-2022-25844

The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service ReDoS by providing a custom locale rule that makes it possible to assign the parameter in posPre: ' '.repeat of NUMBERFORMATS.PATTERNS1.posPre with a very high value. Note: 1 This package has been deprecated an...

CVE-2022-25854

The CVE affects @yaireo/tagify before 4.9.8. The root cause is that the placeholder input is not escaped in the Tagify rendering logic (tagify.js), enabling an attacker to inject and trigger XSS via a malicious placeholder value. Impact is XSS in inputs using Tagify; exploitation details are not ...

CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5

CVE-2022-34749 affecting package python-mistune for versions less than 0.8.3-5. A patched version of the package is available...

CVE-2021-43396 affecting package glibc for versions less than 2.35-1

CVE-2021-43396 affecting package glibc for versions less than 2.35-1. An upgraded version of the package is available that resolves this issue...

CVE-1999-0656 affecting package kernel for versions less than 5.10.78.1-1

CVE-1999-0656 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2

CVE-2022-27223 affecting package kernel for versions less than 5.15.32.1-2. A patched version of the package is available...

CVE-2022-23772 affecting package golang for versions less than 1.17.8-1

CVE-2022-23772 affecting package golang for versions less than 1.17.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2020-24742 affecting package qt5-qtsvg for versions less than 5.12.11-3. An upgraded version of the package is available that resolves this issue...

CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3

CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3. An upgraded version of the package is available that resolves this issue...