CVE-2023-51257 affecting package jasper for versions less than 4.2.1-1

CVE-2023-51257 affecting package jasper for versions less than 4.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2929 affecting package dhcp for versions less than 4.4.3.P1-1

CVE-2022-2929 affecting package dhcp for versions less than 4.4.3.P1-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-13631 affecting package ceph for versions less than 18.2.1-1

CVE-2020-13631 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-28321 affecting package tensorflow for versions less than 2.16.1-1

CVE-2023-28321 affecting package tensorflow for versions less than 2.16.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1

CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-52071 affecting package tensorflow for versions less than 2.16.1-1

CVE-2023-52071 affecting package tensorflow for versions less than 2.16.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20505 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20505 affecting package ceph for versions less than 18.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23551 affecting package nmi for versions less than 1.8.17-1

CVE-2022-23551 affecting package nmi for versions less than 1.8.17-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-20169 affecting package kernel for versions less than 6.6.22.1-2

CVE-2018-20169 affecting package kernel for versions less than 6.6.22.1-2. An upgraded version of the package is available that resolves this issue...

PT-2024-19322 · Unknown · Icegram Email Subscribers & Newsletters

Name of the Vulnerable Software and Affected Versions: Icegram Email Subscribers & Newsletters versions n/a through 5.7.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS...

CVE-2023-28736 affecting package mdadm for versions less than 4.2-1

CVE-2023-28736 affecting package mdadm for versions less than 4.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-3255 affecting package qemu for versions less than 8.2.0-1

CVE-2023-3255 affecting package qemu for versions less than 8.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1

CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package moby-engine for versions less than 25.0.3-1

CVE-2022-29526 affecting package moby-engine for versions less than 25.0.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1

CVE-2023-23916 affecting package cmake for versions less than 3.28.2-1. An upgraded version of the package is available that resolves this issue...

BIT-ENVOY-2021-39204 Excessive CPU usage in Pomerium

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams with excessive complexity. This can lead to high CPU utilization when a large number of streams are reset. This can result in a DoS condition. Pomerium versio...

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

Summary IBM Cognos Analytics is affected and considered vulnerable, based on current information, to vulnerabilities in Open-Source Software OSS components consumed by IBM Cognos Analytics. IBM Cognos Analytics has addressed the applicable CVEs by upgrading or removing the vulnerable libraries...

CVE-2021-44716 affecting package nmi for versions less than 1.8.11-2

CVE-2021-44716 affecting package nmi for versions less than 1.8.11-2. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Cognos Transformer is affected by security vulnerabilities

Summary There are vulnerabilities in Apache Xalan, Apache Commons Codec, IBM® Java™ Version 8, and OpenSSL that are consumed by IBM Cognos Transformer. These have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for...