@glarus-labs/vendure-social-auth (>=0.0.1 <=0.1.1), @mirahi/vendure-adyen-dropin-plugin (>=0.0.1 <=0.0.5) +1 more potentially affected by unknown CVE via @vendure/core (>=0.11.1 <=1.9.6)

@vendure/core NPM version =0.11.1, =0.0.1, =0.0.1, =0.0.5 - @zifahm/vendure-social-auth =0.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-H9WQ-XCQX-MQXM...

PT-2023-21789 · Unknown · Data Modem

Name of the Vulnerable Software and Affected Versions: Data Modem affected versions not specified Description: The issue is related to memory corruption in the Data Modem when processing a DMA buffer release event concerning CFR data. Recommendations: At the moment, there is no information about ...

AeP (>=0.1.0 <=0.1.3), ApacheLogAnonymizer (>=0.1.0 <=0.1.1) +24237 more potentially affected by unknown CVE via atty (>=0.1.2 <=0.2.14)

atty CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.4 - IMAPServer =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G98V-HV3F-HCFR...

ai.grakn:grakn-dist (>=0.15.0 <=0.17.0), ai.grakn:janus-factory (>=0.17.0 <=0.18.0) +1218 more potentially affected by unknown CVE via ch.qos.reload4j:reload4j (>=1.2.18.0 <=1.2.21)

ch.qos.reload4j:reload4j MAVEN version =1.2.18.0, =0.15.0, =0.17.0, =0.15.0, =1.6.0, =3.7.6, =0.6.2, =0.6.0, =0.8.0, =1.6.0-pre - com.aegisql.conveyor-persistence-jdbc:conveyor-persistence-jdbc =1.6.1 - com.aegisql.persistence:conveyor-persistence =1.6.1 -...

GetPDB (>=0.1.0 <=1.0.1), IMAPServer (=0.1.0) +4086 more potentially affected by unknown CVE via memoffset (>=0.1.0 <=0.5.6)

memoffset CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0045...

get-token-user10 (=0.10.1) potentially affected by unknown CVE via http-resources (=0.0.1-security)

http-resources NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on http-resources and may be impacted: - get-token-user10 =0.10.1 Source cves: unknown CVE Source advisory: OSV:MAL-2023-509...

ddev (>=1.4.2 <=2.1.0), hoppr (>=1.7.0 <=1.13.2) +2 more potentially affected by unknown CVE via in-toto (>=1.0.1 <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.2, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard =0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-JJGP-WHRP-GQ8M...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +321 more potentially affected by unknown CVE via mlflow (>=0.8.2 <=2.3.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-83FM-W79M-64R5...

11-builder (=0.1.0), 5argon-react-scripts (>=1.0.3 <=1.0.11) +1337 more potentially affected by unknown CVE via fsevents (>=1.0.14 <=1.1.3)

fsevents NPM version =1.0.14, =1.0.3, =0.0.1, =1.1.0-1, =1.0.0, =1.1.2, =1.0.10, =0.0.0, =0.6.0-private.1, =0.0.1, =2.0.0, =2.1.1 and more Source cves: unknown CVE Source advisory: OSV:MAL-2023-462...

LicenseStore (=0.1.0), NT-anchor-lang (=0.19.0) +943 more potentially affected by unknown CVE via borsh (>=0.2.10 <=0.9.3)

borsh CARGO version =0.2.10, =0.19.0, =0.4.1, =0.1.0, =0.1.0, =1.0.5, =0.0.1, =0.0.1, =0.0.0-alpha, =0.0.1, =0.0.1-alpha.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0033...

acari-lib (>=0.1.11 <=0.1.12), acme-rs (>=0.1.0 <=0.2.0) +299 more potentially affected by unknown CVE via multipart (>=0.10.2 <=0.9.1)

multipart CARGO version =0.10.2, =0.1.11, =0.1.0, =0.9.2, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.4.4, =0.26.1 - authenticator =0.3.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0050...

bsv-wasm (>=0.0.0 <=1.2.0-beta.3), cargo-screeps (>=0.3.3 <=0.4.0) +11 more potentially affected by unknown CVE via openssl (>=0.10.22 <=0.10.40)

openssl CARGO version =0.10.22, =0.0.0, =0.3.3, =0.6.25, =0.1.24, =0.1.22, =0.1.24, =0.1.0, =0.10.4, =0.10.3, =0.21.0 - roaring-landmask =0.4.0 - twetch-sdk =0.0.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0022...

core-lib (>=0.1.0 <=0.2.0), eventsourced-nats (>=0.1.0 <=0.6.0) +25 more potentially affected by unknown CVE via async-nats (>=0.10.1 <=0.27.1)

async-nats CARGO version =0.10.1, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.26.0, =0.25.0, =0.12.0, =0.9.0, =0.16.0, =0.3.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0027...

priyanshbot12 (=1.0.2) potentially affected by unknown CVE via fb-tools (=0.0.1-security)

fb-tools NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on fb-tools and may be impacted: - priyanshbot12 =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2023-327...

cargo-generate (>=0.13.1 <=0.16.0), cargo-smart-release (>=0.1.0 <=0.2.4) +43 more potentially affected by unknown CVE via git-hash (>=0.10.3 <=0.9.11)

git-hash CARGO version =0.10.3, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...

PT-2023-17502 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to an integer overflow in keyinstall, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction...

SUSE CVE-2004-0801

Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands...

SUSE CVE-2004-0957

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "" underscore, grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities...

SUSE CVE-2005-2361

Unknown vulnerability in the 1 AgentX dissector, 2 PER dissector, 3 DOCSIS dissector, 4 SCTP graphs, 5 HTTP dissector, 6 DCERPC, 7 DHCP, 8 RADIUS dissector, 9 Telnet dissector, 10 IS-IS LSP dissector, or 11 NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial...

SUSE CVE-2005-2641

Unknown vulnerability in pamldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges. NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate...