Ecosystem

Alpine

10,780 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,741 results · Feed

Medium 5.3

CVE-2022-21366

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21365

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21360

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21349

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Suppo…

Oracle Java SE JDK and JRE openjdk-8 openjdk8 Ubuntu Alpine

Jan 19, 2022
Medium 5.3

CVE-2022-21341

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21340 Public exploit

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21305

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21299

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21296

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21294

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21293

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21291

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21283

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21282

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21277

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21271

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Solaris Operating System openjdk11 openjdk-9-jre Ubuntu Alpine Wolfi

Jan 19, 2022
Low 3.7

CVE-2022-21248

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Unscored —

CVE-2021-33913 EPSS 10%

libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via…

libspf2 libspf2 libspf2 Debian Ubuntu Alpine

Jan 19, 2022
Unscored —

CVE-2021-33912 EPSS 10%

libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary…

libspf2 libspf2 libspf2 Debian Ubuntu Alpine

Jan 19, 2022
Medium 4.3

CVE-2022-21673

OAuth Identity Token exposure in Grafana

Grafana is an open-source platform for monitoring and observability. In affected versions when a data source has the Forward OAuth Identity feature enabled, sending a query to that datasource with an API token (and no other user credentials) will forward the …

Grafana Grafana grafana grafana Web / CMS Ubuntu Alpine

Jan 18, 2022
Medium 6.2

CVE-2022-0240

NULL Pointer Dereference in mruby/mruby

mruby is vulnerable to NULL Pointer Dereference

mruby mruby/mruby mruby mruby Debian Ubuntu Alpine

Jan 17, 2022
Unscored —

CVE-2022-23303 Public exploit

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks…

wpa wpa hostapd wpa_supplicant Debian Ubuntu Azure Linux Alpine

Jan 17, 2022
Unscored —

CVE-2022-23304

The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel att…

wpa wpa hostapd wpa_supplicant Debian Ubuntu Azure Linux Alpine

Jan 17, 2022
Unscored —

CVE-2022-23094

Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cra…

libreswan libreswan libreswan Debian Ubuntu Alpine

Jan 15, 2022
Unscored —

CVE-2021-46021

An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentat…

recutils recutils recutils Debian Ubuntu Alpine

Jan 14, 2022
High 7.5

CVE-2022-20698

Clam AntiVirus (ClamAV) Denial of Service Vulnerability

A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulner…

Cisco ClamAV clamav clamav Network devices Debian Ubuntu Azure Linux Alpine

Jan 14, 2022
Medium 6.8

CVE-2022-0213

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Jan 14, 2022
Unscored —

CVE-2021-46022

An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmenta…

recutils recutils recutils Debian Ubuntu Alpine

Jan 14, 2022
Unscored —

CVE-2021-46019

An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fau…

recutils recutils recutils Debian Ubuntu Alpine

Jan 14, 2022
High 7.7

CVE-2022-21682

flatpak-builder can access files outside the build directory.

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will have t…

Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine

Jan 13, 2022
Unscored —

CVE-2021-37530

A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readp…

fig2dev fig2dev Debian Alpine

Jan 12, 2022
Unscored —

CVE-2021-37529

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c,…

fig2dev fig2dev Debian Alpine

Jan 12, 2022
Medium 4.3

CVE-2022-20612

Cross-Site Request Forgery in Jenkins

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven

Jan 12, 2022
Unscored —

CVE-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream o…

gdk-pixbuf gdk-pixbuf gdk-pixbuf Debian Ubuntu Alpine

Jan 12, 2022
High 8.2

CVE-2021-43860

Permissions granted to applications can be hidden from the user at install time

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions granted to the app …

Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine

Jan 12, 2022
Critical 9.6

CVE-2022-0173

Out-of-bounds Read in radareorg/radare2

radare2 is vulnerable to Out-of-bounds Read

radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine

Jan 11, 2022
Unscored —

CVE-2021-43566

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a direct…

samba samba samba samba Debian Ubuntu Azure Linux Alpine

Jan 11, 2022
Medium 6.8

CVE-2022-0156

Use After Free in vim/vim

vim is vulnerable to Use After Free

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Jan 10, 2022
Medium 6.8

CVE-2022-0158

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Jan 10, 2022
Unscored —

CVE-2021-35452

An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.

libde265 libde265 libde265 Debian Ubuntu Alpine

Jan 10, 2022