List of all vulnerabilities

Report a vulnerability
CVE-2023-26242
2/21/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity
CVE-2022-48337
2/20/2023
Affected packages: conf-emacs
Critical severity
CVE-2022-48339
2/20/2023
Affected packages: conf-emacs
High severity
CVE-2022-48338
2/20/2023
Affected packages: conf-emacs
High severity
CVE-2023-23586 – Use after free in io_uring in the Linux Kernel
2/17/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Medium severity
CVE-2023-24329
2/17/2023
Affected packages: conf-python-2-7 • conf-python-2-7-dev • conf-python-3 • conf-python-3-7 • conf-python-3-dev • py • termbox ... (7)
High severity
CVE-2023-23936 – CRLF Injection in Nodejs ‘undici’ via host
2/16/2023
Affected packages: conf-npm
Medium severity
CVE-2023-0361
2/15/2023
Affected packages: conf-gnutls • conf-mingw-w64-gnutls-i686 • conf-mingw-w64-gnutls-x86_64 • conf-srt • conf-srt-gnutls
High severity
CVE-2023-23946 – Git's `git apply` overwriting paths outside the working tree
2/14/2023
Affected packages: conf-git
Medium severity
CVE-2023-22490 – Git vulnerable to local clone-based data exfiltration with non-local transports
2/14/2023
Affected packages: conf-git
Medium severity
CVE-2022-4304 – Timing Oracle in RSA Decryption
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
Medium severity
CVE-2022-4450 – Double free after calling PEM_read_bio_ex
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0215 – Use-after-free following BIO_new_NDEF
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0216 – Invalid pointer dereference in d2i_PKCS7 functions
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0217 – NULL dereference validating DSA public key
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0286 – X.400 address type confusion in X.509 GeneralName
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0401 – NULL dereference during PKCS7 data verification
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0615
2/6/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
Medium severity
CVE-2023-0687
2/6/2023
Affected packages: gettext-stub
Medium severity
CVE-2022-44268
2/6/2023
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity