CVE-2021-3101

Hotdog, prior to v1.0.1, did not mimic the capabilities or the SELinux label of the target JVM process. This would allow a container to gain full privileges on the host, bypassing restrictions set on the container...

CVE-2022-21486 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21483 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21484 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21482 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21427 vulnerabilities

Vulnerabilities for packages: mysql...

Privilege Escalation

webkit2gtk is vulnerable to privilege escalation. The vulnerability exists due to a logic issue that was addressed with improved state management which allows remote attackers to gain elevated privileges...

CVE-2022-1341

An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in getcmdlnoptions function in src/options.c...

PYSEC-2022-43153

Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3code.c called indirectly from CompileBranchTable in m3compile.c...

CVE-2022-27814

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

CVE-2020-29653

Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags...

DSA-5119-1 subversion - security update

Bulletin has no description...

GHSA-9H73-W7CH-RH73 Header Injection

Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack appear to be exploitable via Crafting a value to be sent as a cookie. This vulnerability appears to have been fixed in = 1.3.5 or 1.2.5 o...

Arbitrary Code Execution in Cookie Serialization

The default serialization used by Plug session may result in code execution in certain situations. Keep in mind, however, the session cookie is signed and this attack can only be exploited if the attacker has access to your secret key as well as your signing/encryption salts. We recommend users t...

GHSA-J3GG-R6GP-95Q2 XSS in HEEx class attributes

The class attribute was not protected against XSS attacks when using HEEx...

SUSE-SU-2022:1158-1 Security update for xz

This update for xz fixes the following issues: - CVE-2022-1271: Fixed an incorrect escaping of malicious filenames ZDI-CAN-16587. bsc1198062...

DLA-2979-1 usbguard - security update

Bulletin has no description...

MGASA-2022-0133 Updated usbredir packages fix security vulnerability

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparserserialize in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination. CVE-2021-3700...

Memory Corruption

vim is vulnerable to memory corruption. Access of memory location before start of buffer which allows an attacker to cause an application crash...

Insecure Defaults

directus is using insecure defaults. The use of default CORS settings in the Record function of env.ts which are very permissive for uncontrolled environments allows an attacker to access unauthorized resources in the system...