CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

PT-2022-15033

Name of the Vulnerable Software and Affected Versions Flatpak versions prior to 1.12.3 and 1.10.6 Description A path traversal issue affects Flatpak, a Linux application sandboxing and distribution framework. The flatpak-builder applies finish-args last in the build, granting the build directory...

CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

org.typelevel:jawn-ast_2.11 (>=1.0.0-rc1, <=1.0.0-rc2), org.typelevel:jawn-json4s_2.11 (>=1.0.0-rc1, <=1.0.0-rc2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.11 (>=1.0.0-rc1, <=1.0.0-rc2)

org.typelevel:jawn-parser2.11 MAVEN version =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc2 Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_0.27 (1.0.0), org.typelevel:jawn-util_0.27 (1.0.0) potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.0)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.0 - org.typelevel:jawn-util0.27 1.0.0 Source cves: CVE-2022-21653 Sour...

org.typelevel:jawn-ast_0.27 (>=1.0.0, <=1.0.2), org.typelevel:jawn-json4s_0.27 (>=1.0.1, <=1.0.2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (>=1.0.0, <=1.0.2)

org.typelevel:jawn-parser0.27 MAVEN version =1.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.2 Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_0.27 (1.0.2), org.typelevel:jawn-json4s_0.27 (1.0.2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.2)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.2 - org.typelevel:jawn-json4s0.27 1.0.2 - org.typelevel:jawn-play0.27...

org.typelevel:jawn-ast_0.27 (1.0.1), org.typelevel:jawn-json4s_0.27 (1.0.1) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.1)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.1 - org.typelevel:jawn-json4s0.27 1.0.1 - org.typelevel:jawn-play0.27...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-CWVC-87XQ-PC5M...

GHSA-CWVC-87XQ-PC5M Out-of-bounds Write and Race Condition in metrics-util

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

UBUNTU-CVE-2021-44590

In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted SWF file that exploits this vulnerability...

EulerOS Virtualization 3.0.2.6 : util-linux (EulerOS-SA-2021-2864)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to...

AZL-8960 CVE-2021-45953 affecting package dnsmasq for versions less than 2.89-1

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

JQuery UI < 1.13.0 Multiple XSS

The version of JQuery UI library hosted on the remote web server is prior to 1.13.0. It is, therefore, affected by multiple cross-site scripting vulnerabilities: - Accepting the value of the 'altField' option of the Datepicker widget from untrusted sources may execute untrusted code. CVE-2021-411...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-2864)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-2829)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

How to use vhd-util to Scan for Orphaned or Bad VHD Files

This article details how to use vhd-util to scan for Orphaned/Bad VHD Files. Requirements CLI connection to XenServer host, preferably through an SSH client Basic CLI command usage grep, less, tail LVM, EXT, or NFS storage type...

EulerOS Virtualization 3.0.2.0 : util-linux (EulerOS-SA-2021-2829)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...