Google Security Advisories · January 2023 — Google Security Advisories
349 advisories 209 CVEs 9 EXPLOITED

GCVE / Google Cloud / Chrome / Android / Project Zero / OSS for 2023-01. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 9 are already weaponised in the wild.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

CVE-2023-21768

GoogleExploitedCISA KEV listedCRITICAL2023-01-10

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVEs:CVE-2023-21768

Affected products

ProductStatusVendorPackageEcosystem
windows_11 affected microsoft — —
windows_server_2022 affected microsoft — —
Upstream advisory

CVE-2023-21674

GoogleExploitedCISA KEV listedCRITICAL2023-01-10

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVEs:CVE-2023-21674

Affected products

ProductStatusVendorPackageEcosystem
windows_10_1507 affected microsoft — —
windows_10_1607 affected microsoft — —
windows_10_1809 affected microsoft — —
windows_10_20h2 affected microsoft — —
windows_10_21h2 affected microsoft — —
windows_10_22h2 affected microsoft — —
windows_11_21h2 affected microsoft — —
windows_11_22h2 affected microsoft — —
windows_rt_8.1 affected microsoft — —
windows_server_2012 affected microsoft — —
windows_server_2016 affected microsoft — —
windows_server_2019 affected microsoft — —
windows_server_2022 affected microsoft — —
Upstream advisory

CVE-2023-0266

GoogleExploitedCISA KEV listedCRITICAL2023-01-17

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the syste...

CVEs:CVE-2023-0266

Affected products

ProductStatusVendorPackageEcosystem
debian_linux affected debian — —
linux_kernel affected linux — —
Upstream advisory

ASB-A-253641805

GoogleWeaponized exploitHIGH2023-01-01

ASB-A-253641805

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel: affected Android :linux_kernel: —
Upstream advisory

ASB-A-253642087

GoogleWeaponized exploitHIGH2023-01-01

ASB-A-253642087

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel: affected Android :linux_kernel: —
Upstream advisory

ASB-A-253642015

GoogleWeaponized exploitHIGH2023-01-01

ASB-A-253642015

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel: affected Android :linux_kernel: —
Upstream advisory

CVE-2023-20928

Open SourceWeaponized exploitHIGH2023-01-03

In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andro...

CVEs:CVE-2023-20928

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20928

GoogleWeaponized exploit2023-01-03

In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254837884References: Upstream kernel

CVEs:CVE-2023-20928

Upstream advisory

ASB-A-254837884

GoogleWeaponized exploitHIGH2023-01-01

ASB-A-254837884

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel: affected Android :linux_kernel: —
Upstream advisory

RHSA-2023:0274

Open SourceActive exploitation (sightings)HIGH2023-01-25

Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (python-XStatic-Angular) security update

Affected products

ProductStatusVendorPackageEcosystem
python3-XStatic-Angular affected Red Hat:openstack:17.0::el9 python3-XStatic-Angular —
python-XStatic-Angular affected Red Hat:openstack:17.0::el9 python-XStatic-Angular —
XStatic-Angular-common affected Red Hat:openstack:17.0::el9 XStatic-Angular-common —
Upstream advisory

ASB-A-257846591

GoogleActive exploitation (sightings)HIGH2023-01-01

ASB-A-257846591

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

RHSA-2023:0446

Open SourcePoC exploitHIGH2023-01-25

Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

Affected products

ProductStatusVendorPackageEcosystem
delve affected Red Hat:enterprise_linux:8::appstream delve —
delve-debuginfo affected Red Hat:enterprise_linux:8::appstream delve-debuginfo —
delve-debugsource affected Red Hat:enterprise_linux:8::appstream delve-debugsource —
golang affected Red Hat:enterprise_linux:8::appstream golang —
golang-bin affected Red Hat:enterprise_linux:8::appstream golang-bin —
golang-docs affected Red Hat:enterprise_linux:8::appstream golang-docs —
golang-misc affected Red Hat:enterprise_linux:8::appstream golang-misc —
golang-race affected Red Hat:enterprise_linux:8::appstream golang-race —
golang-src affected Red Hat:enterprise_linux:8::appstream golang-src —
golang-tests affected Red Hat:enterprise_linux:8::appstream golang-tests —
go-toolset affected Red Hat:enterprise_linux:8::appstream go-toolset —
Upstream advisory

RHSA-2023:0328

Open SourcePoC exploitHIGH2023-01-23

Red Hat Security Advisory: go-toolset and golang security and bug fix update

Affected products

ProductStatusVendorPackageEcosystem
golang affected Red Hat:enterprise_linux:9::appstream golang —
golang-bin affected Red Hat:enterprise_linux:9::appstream golang-bin —
golang-docs affected Red Hat:enterprise_linux:9::appstream golang-docs —
golang-misc affected Red Hat:enterprise_linux:9::appstream golang-misc —
golang-race affected Red Hat:enterprise_linux:9::appstream golang-race —
golang-src affected Red Hat:enterprise_linux:9::appstream golang-src —
golang-tests affected Red Hat:enterprise_linux:9::appstream golang-tests —
Upstream advisory

RHSA-2022:7398

Open SourcePoC exploitHIGH2023-01-17

Red Hat Security Advisory: OpenShift Container Platform 4.12.0 packages and security update

Affected products

ProductStatusVendorPackageEcosystem
afterburn affected Red Hat:openshift:4.12::el8 afterburn —
afterburn affected Red Hat:openshift:4.12::el9 afterburn —
afterburn-debuginfo affected Red Hat:openshift:4.12::el8 afterburn-debuginfo —
afterburn-debuginfo affected Red Hat:openshift:4.12::el9 afterburn-debuginfo —
afterburn-dracut affected Red Hat:openshift:4.12::el9 afterburn-dracut —
ansible-runner affected Red Hat:openshift:4.12::el8 ansible-runner —
ansible-runner-http affected Red Hat:openshift:4.12::el8 ansible-runner-http —
atomic-openshift-service-idler affected Red Hat:openshift:4.12::el8 atomic-openshift-service-idler —
bootupd affected Red Hat:openshift:4.12::el8 bootupd —
bootupd-debuginfo affected Red Hat:openshift:4.12::el8 bootupd-debuginfo —
buildah affected Red Hat:openshift:4.12::el9 buildah —
buildah affected Red Hat:openshift:4.12::el8 buildah —
buildah-debuginfo affected Red Hat:openshift:4.12::el8 buildah-debuginfo —
buildah-debuginfo affected Red Hat:openshift:4.12::el9 buildah-debuginfo —
buildah-debugsource affected Red Hat:openshift:4.12::el9 buildah-debugsource —
buildah-debugsource affected Red Hat:openshift:4.12::el8 buildah-debugsource —
buildah-tests affected Red Hat:openshift:4.12::el9 buildah-tests —
buildah-tests affected Red Hat:openshift:4.12::el8 buildah-tests —
buildah-tests-debuginfo affected Red Hat:openshift:4.12::el8 buildah-tests-debuginfo —
buildah-tests-debuginfo affected Red Hat:openshift:4.12::el9 buildah-tests-debuginfo —
butane affected Red Hat:openshift:4.12::el8 butane —
butane-debuginfo affected Red Hat:openshift:4.12::el8 butane-debuginfo —
butane-debugsource affected Red Hat:openshift:4.12::el8 butane-debugsource —
butane-redistributable affected Red Hat:openshift:4.12::el8 butane-redistributable —
conmon affected Red Hat:openshift:4.12::el9 conmon —
conmon affected Red Hat:openshift:4.12::el8 conmon —
conmon-debuginfo affected Red Hat:openshift:4.12::el8 conmon-debuginfo —
conmon-debuginfo affected Red Hat:openshift:4.12::el9 conmon-debuginfo —
conmon-debugsource affected Red Hat:openshift:4.12::el9 conmon-debugsource —
conmon-debugsource affected Red Hat:openshift:4.12::el8 conmon-debugsource —
conmon-rs affected Red Hat:openshift:4.12::el9 conmon-rs —
conmon-rs affected Red Hat:openshift:4.12::el8 conmon-rs —
console-login-helper-messages affected Red Hat:openshift:4.12::el8 console-login-helper-messages —
console-login-helper-messages-issuegen affected Red Hat:openshift:4.12::el8 console-login-helper-messages-issuegen —
console-login-helper-messages-profile affected Red Hat:openshift:4.12::el8 console-login-helper-messages-profile —
containernetworking-plugins affected Red Hat:openshift:4.12::el8 containernetworking-plugins —
containernetworking-plugins-debuginfo affected Red Hat:openshift:4.12::el8 containernetworking-plugins-debuginfo —
containernetworking-plugins-debugsource affected Red Hat:openshift:4.12::el8 containernetworking-plugins-debugsource —
containers-common affected Red Hat:openshift:4.12::el8 containers-common —
container-selinux affected Red Hat:openshift:4.12::el8 container-selinux —
coreos-installer affected Red Hat:openshift:4.12::el8 coreos-installer —
coreos-installer affected Red Hat:openshift:4.12::el9 coreos-installer —
coreos-installer-bootinfra affected Red Hat:openshift:4.12::el8 coreos-installer-bootinfra —
coreos-installer-bootinfra affected Red Hat:openshift:4.12::el9 coreos-installer-bootinfra —
coreos-installer-bootinfra-debuginfo affected Red Hat:openshift:4.12::el9 coreos-installer-bootinfra-debuginfo —
coreos-installer-bootinfra-debuginfo affected Red Hat:openshift:4.12::el8 coreos-installer-bootinfra-debuginfo —
coreos-installer-debuginfo affected Red Hat:openshift:4.12::el9 coreos-installer-debuginfo —
coreos-installer-debuginfo affected Red Hat:openshift:4.12::el8 coreos-installer-debuginfo —
coreos-installer-debugsource affected Red Hat:openshift:4.12::el9 coreos-installer-debugsource —
coreos-installer-debugsource affected Red Hat:openshift:4.12::el8 coreos-installer-debugsource —
coreos-installer-dracut affected Red Hat:openshift:4.12::el9 coreos-installer-dracut —
cri-o affected Red Hat:openshift:4.12::el8 cri-o —
cri-o affected Red Hat:openshift:4.12::el9 cri-o —
cri-o-debuginfo affected Red Hat:openshift:4.12::el9 cri-o-debuginfo —
cri-o-debuginfo affected Red Hat:openshift:4.12::el8 cri-o-debuginfo —
cri-o-debugsource affected Red Hat:openshift:4.12::el8 cri-o-debugsource —
cri-o-debugsource affected Red Hat:openshift:4.12::el9 cri-o-debugsource —
crit affected Red Hat:openshift:4.12::el8 crit —
cri-tools affected Red Hat:openshift:4.12::el8 cri-tools —
cri-tools affected Red Hat:openshift:4.12::el9 cri-tools —
cri-tools-debuginfo affected Red Hat:openshift:4.12::el9 cri-tools-debuginfo —
cri-tools-debuginfo affected Red Hat:openshift:4.12::el8 cri-tools-debuginfo —
cri-tools-debugsource affected Red Hat:openshift:4.12::el8 cri-tools-debugsource —
cri-tools-debugsource affected Red Hat:openshift:4.12::el9 cri-tools-debugsource —
criu affected Red Hat:openshift:4.12::el8 criu —
criu-debuginfo affected Red Hat:openshift:4.12::el8 criu-debuginfo —
criu-debugsource affected Red Hat:openshift:4.12::el8 criu-debugsource —
criu-devel affected Red Hat:openshift:4.12::el8 criu-devel —
criu-libs affected Red Hat:openshift:4.12::el8 criu-libs —
criu-libs-debuginfo affected Red Hat:openshift:4.12::el8 criu-libs-debuginfo —
crudini affected Red Hat:openshift:4.12::el8 crudini —
crudini affected Red Hat:openshift_ironic:4.12::el9 crudini —
crun affected Red Hat:openshift:4.12::el9 crun —
crun affected Red Hat:openshift:4.12::el8 crun —
crun-debuginfo affected Red Hat:openshift:4.12::el9 crun-debuginfo —
crun-debuginfo affected Red Hat:openshift:4.12::el8 crun-debuginfo —
crun-debugsource affected Red Hat:openshift:4.12::el9 crun-debugsource —
crun-debugsource affected Red Hat:openshift:4.12::el8 crun-debugsource —
fuse-overlayfs affected Red Hat:openshift:4.12::el8 fuse-overlayfs —
fuse-overlayfs-debuginfo affected Red Hat:openshift:4.12::el8 fuse-overlayfs-debuginfo —
fuse-overlayfs-debugsource affected Red Hat:openshift:4.12::el8 fuse-overlayfs-debugsource —
future affected Red Hat:openshift_ironic:4.12::el9 future —
grpc affected Red Hat:openshift:4.12::el8 grpc —
grpc-cli affected Red Hat:openshift:4.12::el8 grpc-cli —
grpc-cli-debuginfo affected Red Hat:openshift:4.12::el8 grpc-cli-debuginfo —
grpc-debuginfo affected Red Hat:openshift:4.12::el8 grpc-debuginfo —
grpc-debugsource affected Red Hat:openshift:4.12::el8 grpc-debugsource —
grpc-devel affected Red Hat:openshift:4.12::el8 grpc-devel —
grpc-plugins affected Red Hat:openshift:4.12::el8 grpc-plugins —
grpc-plugins-debuginfo affected Red Hat:openshift:4.12::el8 grpc-plugins-debuginfo —
haproxy affected Red Hat:openshift:4.12::el8 haproxy —
haproxy22 affected Red Hat:openshift:4.12::el8 haproxy22 —
haproxy22-debuginfo affected Red Hat:openshift:4.12::el8 haproxy22-debuginfo —
haproxy-debugsource affected Red Hat:openshift:4.12::el8 haproxy-debugsource —
ignition affected Red Hat:openshift:4.12::el8 ignition —
ignition affected Red Hat:openshift:4.12::el9 ignition —
ignition-debuginfo affected Red Hat:openshift:4.12::el8 ignition-debuginfo —
ignition-debuginfo affected Red Hat:openshift:4.12::el9 ignition-debuginfo —
ignition-debugsource affected Red Hat:openshift:4.12::el8 ignition-debugsource —
ignition-debugsource affected Red Hat:openshift:4.12::el9 ignition-debugsource —
ignition-validate affected Red Hat:openshift:4.12::el9 ignition-validate —
ignition-validate affected Red Hat:openshift:4.12::el8 ignition-validate —
ignition-validate-debuginfo affected Red Hat:openshift:4.12::el8 ignition-validate-debuginfo —
ignition-validate-debuginfo affected Red Hat:openshift:4.12::el9 ignition-validate-debuginfo —
kata-containers affected Red Hat:openshift:4.12::el8 kata-containers —
kata-containers affected Red Hat:openshift:4.12::el9 kata-containers —
kernel-rt affected Red Hat:openshift:4.12::el8 kernel-rt —
kernel-rt-core affected Red Hat:openshift:4.12::el8 kernel-rt-core —
kernel-rt-debug affected Red Hat:openshift:4.12::el8 kernel-rt-debug —
kernel-rt-debug-core affected Red Hat:openshift:4.12::el8 kernel-rt-debug-core —
kernel-rt-debug-debuginfo affected Red Hat:openshift:4.12::el8 kernel-rt-debug-debuginfo —
kernel-rt-debug-devel affected Red Hat:openshift:4.12::el8 kernel-rt-debug-devel —
kernel-rt-debuginfo affected Red Hat:openshift:4.12::el8 kernel-rt-debuginfo —
kernel-rt-debuginfo-common-x86_64 affected Red Hat:openshift:4.12::el8 kernel-rt-debuginfo-common-x86_64 —
kernel-rt-debug-kvm affected Red Hat:openshift:4.12::el8 kernel-rt-debug-kvm —
kernel-rt-debug-modules affected Red Hat:openshift:4.12::el8 kernel-rt-debug-modules —
kernel-rt-debug-modules-extra affected Red Hat:openshift:4.12::el8 kernel-rt-debug-modules-extra —
kernel-rt-debug-modules-internal affected Red Hat:openshift:4.12::el8 kernel-rt-debug-modules-internal —
kernel-rt-devel affected Red Hat:openshift:4.12::el8 kernel-rt-devel —
kernel-rt-kvm affected Red Hat:openshift:4.12::el8 kernel-rt-kvm —
kernel-rt-modules affected Red Hat:openshift:4.12::el8 kernel-rt-modules —
kernel-rt-modules-extra affected Red Hat:openshift:4.12::el8 kernel-rt-modules-extra —
kernel-rt-modules-internal affected Red Hat:openshift:4.12::el8 kernel-rt-modules-internal —
kernel-rt-selftests-internal affected Red Hat:openshift:4.12::el8 kernel-rt-selftests-internal —
libslirp affected Red Hat:openshift:4.12::el8 libslirp —
libslirp-debuginfo affected Red Hat:openshift:4.12::el8 libslirp-debuginfo —
libslirp-debugsource affected Red Hat:openshift:4.12::el8 libslirp-debugsource —
libslirp-devel affected Red Hat:openshift:4.12::el8 libslirp-devel —
NetworkManager affected Red Hat:openshift:4.12::el8 NetworkManager —
NetworkManager-adsl affected Red Hat:openshift:4.12::el8 NetworkManager-adsl —
NetworkManager-adsl-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-adsl-debuginfo —
NetworkManager-bluetooth affected Red Hat:openshift:4.12::el8 NetworkManager-bluetooth —
NetworkManager-bluetooth-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-bluetooth-debuginfo —
NetworkManager-cloud-setup affected Red Hat:openshift:4.12::el8 NetworkManager-cloud-setup —
NetworkManager-cloud-setup-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-cloud-setup-debuginfo —
NetworkManager-config-connectivity-redhat affected Red Hat:openshift:4.12::el8 NetworkManager-config-connectivity-redhat —
NetworkManager-config-server affected Red Hat:openshift:4.12::el8 NetworkManager-config-server —
NetworkManager-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-debuginfo —
NetworkManager-debugsource affected Red Hat:openshift:4.12::el8 NetworkManager-debugsource —
NetworkManager-dispatcher-routing-rules affected Red Hat:openshift:4.12::el8 NetworkManager-dispatcher-routing-rules —
NetworkManager-libnm affected Red Hat:openshift:4.12::el8 NetworkManager-libnm —
NetworkManager-libnm-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-libnm-debuginfo —
NetworkManager-libnm-devel affected Red Hat:openshift:4.12::el8 NetworkManager-libnm-devel —
NetworkManager-ovs affected Red Hat:openshift:4.12::el8 NetworkManager-ovs —
NetworkManager-ovs-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-ovs-debuginfo —
NetworkManager-ppp affected Red Hat:openshift:4.12::el8 NetworkManager-ppp —
NetworkManager-ppp-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-ppp-debuginfo —
NetworkManager-team affected Red Hat:openshift:4.12::el8 NetworkManager-team —
NetworkManager-team-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-team-debuginfo —
NetworkManager-tui affected Red Hat:openshift:4.12::el8 NetworkManager-tui —
NetworkManager-tui-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-tui-debuginfo —
NetworkManager-wifi affected Red Hat:openshift:4.12::el8 NetworkManager-wifi —
NetworkManager-wifi-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-wifi-debuginfo —
NetworkManager-wwan affected Red Hat:openshift:4.12::el8 NetworkManager-wwan —
NetworkManager-wwan-debuginfo affected Red Hat:openshift:4.12::el8 NetworkManager-wwan-debuginfo —
network-scripts-openvswitch2.17 affected Red Hat:openshift:4.12::el8 network-scripts-openvswitch2.17 —
nmstate affected Red Hat:openshift:4.12::el8 nmstate —
nmstate-debuginfo affected Red Hat:openshift:4.12::el8 nmstate-debuginfo —
nmstate-debugsource affected Red Hat:openshift:4.12::el8 nmstate-debugsource —
nmstate-devel affected Red Hat:openshift:4.12::el8 nmstate-devel —
nmstate-libs affected Red Hat:openshift:4.12::el8 nmstate-libs —
nmstate-libs-debuginfo affected Red Hat:openshift:4.12::el8 nmstate-libs-debuginfo —
nmstate-plugin-ovsdb affected Red Hat:openshift:4.12::el8 nmstate-plugin-ovsdb —
openshift affected Red Hat:openshift:4.12::el9 openshift —
openshift affected Red Hat:openshift:4.12::el8 openshift —
openshift-ansible affected Red Hat:openshift:4.12::el8 openshift-ansible —
openshift-ansible-test affected Red Hat:openshift:4.12::el8 openshift-ansible-test —
openshift-clients affected Red Hat:openshift:4.12::el8 openshift-clients —
openshift-clients affected Red Hat:openshift:4.12::el9 openshift-clients —
openshift-clients-redistributable affected Red Hat:openshift:4.12::el8 openshift-clients-redistributable —
openshift-clients-redistributable affected Red Hat:openshift:4.12::el9 openshift-clients-redistributable —
openshift-hyperkube affected Red Hat:openshift:4.12::el9 openshift-hyperkube —
openshift-hyperkube affected Red Hat:openshift:4.12::el8 openshift-hyperkube —
openshift-kuryr affected Red Hat:openshift:4.12::el8 openshift-kuryr —
openshift-kuryr-cni affected Red Hat:openshift:4.12::el8 openshift-kuryr-cni —
openshift-kuryr-common affected Red Hat:openshift:4.12::el8 openshift-kuryr-common —
openshift-kuryr-controller affected Red Hat:openshift:4.12::el8 openshift-kuryr-controller —
openstack-ironic affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic —
openstack-ironic-api affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-api —
openstack-ironic-common affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-common —
openstack-ironic-conductor affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-conductor —
openstack-ironic-dnsmasq-tftp-server affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-dnsmasq-tftp-server —
openstack-ironic-inspector affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-inspector —
openstack-ironic-inspector-api affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-inspector-api —
openstack-ironic-inspector-conductor affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-inspector-conductor —
openstack-ironic-inspector-dnsmasq affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-inspector-dnsmasq —
openstack-ironic-python-agent affected Red Hat:openshift_ironic:4.12::el9 openstack-ironic-python-agent —
openstack-macros affected Red Hat:openshift_ironic:4.12::el9 openstack-macros —
openvswitch2.17 affected Red Hat:openshift:4.12::el8 openvswitch2.17 —
openvswitch2.17-debuginfo affected Red Hat:openshift:4.12::el8 openvswitch2.17-debuginfo —
openvswitch2.17-debugsource affected Red Hat:openshift:4.12::el8 openvswitch2.17-debugsource —
openvswitch2.17-devel affected Red Hat:openshift:4.12::el8 openvswitch2.17-devel —
openvswitch2.17-ipsec affected Red Hat:openshift:4.12::el8 openvswitch2.17-ipsec —
openvswitch2.17-test affected Red Hat:openshift:4.12::el8 openvswitch2.17-test —
ostree affected Red Hat:openshift:4.12::el8 ostree —
ostree-debuginfo affected Red Hat:openshift:4.12::el8 ostree-debuginfo —
ostree-debugsource affected Red Hat:openshift:4.12::el8 ostree-debugsource —
ostree-devel affected Red Hat:openshift:4.12::el8 ostree-devel —
ostree-grub2 affected Red Hat:openshift:4.12::el8 ostree-grub2 —
ostree-libs affected Red Hat:openshift:4.12::el8 ostree-libs —
ostree-libs-debuginfo affected Red Hat:openshift:4.12::el8 ostree-libs-debuginfo —
ovn22.06 affected Red Hat:openshift:4.12::el8 ovn22.06 —
ovn22.06-central affected Red Hat:openshift:4.12::el8 ovn22.06-central —
ovn22.06-central-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.06-central-debuginfo —
ovn22.06-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.06-debuginfo —
ovn22.06-debugsource affected Red Hat:openshift:4.12::el8 ovn22.06-debugsource —
ovn22.06-host affected Red Hat:openshift:4.12::el8 ovn22.06-host —
ovn22.06-host-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.06-host-debuginfo —
ovn22.06-vtep affected Red Hat:openshift:4.12::el8 ovn22.06-vtep —
ovn22.06-vtep-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.06-vtep-debuginfo —
ovn22.09 affected Red Hat:openshift:4.12::el8 ovn22.09 —
ovn22.09-central affected Red Hat:openshift:4.12::el8 ovn22.09-central —
ovn22.09-central-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.09-central-debuginfo —
ovn22.09-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.09-debuginfo —
ovn22.09-debugsource affected Red Hat:openshift:4.12::el8 ovn22.09-debugsource —
ovn22.09-host affected Red Hat:openshift:4.12::el8 ovn22.09-host —
ovn22.09-host-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.09-host-debuginfo —
ovn22.09-vtep affected Red Hat:openshift:4.12::el8 ovn22.09-vtep —
ovn22.09-vtep-debuginfo affected Red Hat:openshift:4.12::el8 ovn22.09-vtep-debuginfo —
podman affected Red Hat:openshift:4.12::el8 podman —
podman affected Red Hat:openshift:4.12::el9 podman —
podman-catatonit affected Red Hat:openshift:4.12::el9 podman-catatonit —
podman-catatonit affected Red Hat:openshift:4.12::el8 podman-catatonit —
podman-catatonit-debuginfo affected Red Hat:openshift:4.12::el8 podman-catatonit-debuginfo —
podman-catatonit-debuginfo affected Red Hat:openshift:4.12::el9 podman-catatonit-debuginfo —
podman-debuginfo affected Red Hat:openshift:4.12::el8 podman-debuginfo —
podman-debuginfo affected Red Hat:openshift:4.12::el9 podman-debuginfo —
podman-debugsource affected Red Hat:openshift:4.12::el8 podman-debugsource —
podman-debugsource affected Red Hat:openshift:4.12::el9 podman-debugsource —
podman-docker affected Red Hat:openshift:4.12::el8 podman-docker —
podman-docker affected Red Hat:openshift:4.12::el9 podman-docker —
podman-gvproxy affected Red Hat:openshift:4.12::el9 podman-gvproxy —
podman-gvproxy-debuginfo affected Red Hat:openshift:4.12::el9 podman-gvproxy-debuginfo —
podman-gvproxy-debuginfo affected Red Hat:openshift:4.12::el8 podman-gvproxy-debuginfo —
podman-plugins affected Red Hat:openshift:4.12::el8 podman-plugins —
podman-plugins affected Red Hat:openshift:4.12::el9 podman-plugins —
podman-plugins-debuginfo affected Red Hat:openshift:4.12::el8 podman-plugins-debuginfo —
podman-plugins-debuginfo affected Red Hat:openshift:4.12::el9 podman-plugins-debuginfo —
podman-remote affected Red Hat:openshift:4.12::el8 podman-remote —
podman-remote affected Red Hat:openshift:4.12::el9 podman-remote —
podman-remote-debuginfo affected Red Hat:openshift:4.12::el9 podman-remote-debuginfo —
podman-remote-debuginfo affected Red Hat:openshift:4.12::el8 podman-remote-debuginfo —
podman-tests affected Red Hat:openshift:4.12::el9 podman-tests —
podman-tests affected Red Hat:openshift:4.12::el8 podman-tests —
pycdlib-tools affected Red Hat:openshift:4.12::el8 pycdlib-tools —
pyflakes affected Red Hat:openshift_ironic:4.12::el9 pyflakes —
pyOpenSSL affected Red Hat:openshift_ironic:4.12::el9 pyOpenSSL —
pyOpenSSL-doc affected Red Hat:openshift_ironic:4.12::el9 pyOpenSSL-doc —
pysnmp affected Red Hat:openshift_ironic:4.12::el9 pysnmp —
python2-funcsigs affected Red Hat:openshift:4.12::el8 python2-funcsigs —
python3-alembic affected Red Hat:openshift_ironic:4.12::el9 python3-alembic —
python3-alembic affected Red Hat:openshift:4.12::el8 python3-alembic —
python3-amqp affected Red Hat:openshift:4.12::el8 python3-amqp —
python3-amqp affected Red Hat:openshift_ironic:4.12::el9 python3-amqp —
python3-ansible-runner affected Red Hat:openshift:4.12::el8 python3-ansible-runner —
python3-apipkg affected Red Hat:openshift_ironic:4.12::el9 python3-apipkg —
python3-atomicwrites affected Red Hat:openshift_ironic:4.12::el9 python3-atomicwrites —
python3-automaton affected Red Hat:openshift_ironic:4.12::el9 python3-automaton —
python3-autopage affected Red Hat:openshift_ironic:4.12::el9 python3-autopage —
python3-bcrypt affected Red Hat:openshift_ironic:4.12::el9 python3-bcrypt —
python3-bcrypt-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-bcrypt-debuginfo —
python3-beautifulsoup4 affected Red Hat:openshift_ironic:4.12::el9 python3-beautifulsoup4 —
python3-betamax affected Red Hat:openshift_ironic:4.12::el9 python3-betamax —
python3-cachetools affected Red Hat:openshift_ironic:4.12::el9 python3-cachetools —
python3-case affected Red Hat:openshift_ironic:4.12::el9 python3-case —
python3-cinderclient affected Red Hat:openshift_ironic:4.12::el9 python3-cinderclient —
python3-click affected Red Hat:openshift_ironic:4.12::el9 python3-click —
python3-cliff affected Red Hat:openshift_ironic:4.12::el9 python3-cliff —
python3-cliff-tests affected Red Hat:openshift_ironic:4.12::el9 python3-cliff-tests —
python3-cmd2 affected Red Hat:openshift:4.12::el8 python3-cmd2 —
python3-cmd2 affected Red Hat:openshift_ironic:4.12::el9 python3-cmd2 —
python3-colorama affected Red Hat:openshift_ironic:4.12::el9 python3-colorama —
python3-construct affected Red Hat:openshift_ironic:4.12::el9 python3-construct —
python3-construct affected Red Hat:openshift:4.12::el8 python3-construct —
python3-contextlib2 affected Red Hat:openshift_ironic:4.12::el9 python3-contextlib2 —
python3-coverage affected Red Hat:openshift_ironic:4.12::el9 python3-coverage —
python3-coverage-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-coverage-debuginfo —
python3-criu affected Red Hat:openshift:4.12::el8 python3-criu —
python3-dataclasses affected Red Hat:openshift_ironic:4.12::el9 python3-dataclasses —
python3-ddt affected Red Hat:openshift_ironic:4.12::el9 python3-ddt —
python3-debtcollector affected Red Hat:openshift_ironic:4.12::el9 python3-debtcollector —
python3-decorator affected Red Hat:openshift_ironic:4.12::el9 python3-decorator —
python3-defusedxml affected Red Hat:openshift_ironic:4.12::el9 python3-defusedxml —
python3-distlib affected Red Hat:openshift_ironic:4.12::el9 python3-distlib —
python3-dogpile-cache affected Red Hat:openshift:4.12::el8 python3-dogpile-cache —
python3-dogpile-cache affected Red Hat:openshift_ironic:4.12::el9 python3-dogpile-cache —
python3-dracclient affected Red Hat:openshift_ironic:4.12::el9 python3-dracclient —
python3-editor affected Red Hat:openshift_ironic:4.12::el9 python3-editor —
python3-entrypoints affected Red Hat:openshift_ironic:4.12::el9 python3-entrypoints —
python3-eventlet affected Red Hat:openshift:4.12::el8 python3-eventlet —
python3-eventlet affected Red Hat:openshift_ironic:4.12::el9 python3-eventlet —
python3-execnet affected Red Hat:openshift_ironic:4.12::el9 python3-execnet —
python3-extras affected Red Hat:openshift_ironic:4.12::el9 python3-extras —
python3-fasteners affected Red Hat:openshift_ironic:4.12::el9 python3-fasteners —
python3-filelock affected Red Hat:openshift_ironic:4.12::el9 python3-filelock —
python3-fixtures affected Red Hat:openshift_ironic:4.12::el9 python3-fixtures —
python3-flake8 affected Red Hat:openshift_ironic:4.12::el9 python3-flake8 —
python3-flask affected Red Hat:openshift_ironic:4.12::el9 python3-flask —
python3-flask affected Red Hat:openshift:4.12::el8 python3-flask —
python3-flit affected Red Hat:openshift_ironic:4.12::el9 python3-flit —
python3-flit-core affected Red Hat:openshift_ironic:4.12::el9 python3-flit-core —
python3-freezegun affected Red Hat:openshift_ironic:4.12::el9 python3-freezegun —
python3-funcsigs affected Red Hat:openshift_ironic:4.12::el9 python3-funcsigs —
python3-funcsigs affected Red Hat:openshift:4.12::el8 python3-funcsigs —
python3-future affected Red Hat:openshift_ironic:4.12::el9 python3-future —
python3-futurist affected Red Hat:openshift_ironic:4.12::el9 python3-futurist —
python3-gevent affected Red Hat:openshift_ironic:4.12::el9 python3-gevent —
python3-gevent-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-gevent-debuginfo —
python3-glanceclient affected Red Hat:openshift_ironic:4.12::el9 python3-glanceclient —
python3-greenlet affected Red Hat:openshift_ironic:4.12::el9 python3-greenlet —
python3-greenlet-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-greenlet-debuginfo —
python3-greenlet-devel affected Red Hat:openshift_ironic:4.12::el9 python3-greenlet-devel —
python3-grpcio affected Red Hat:openshift:4.12::el8 python3-grpcio —
python3-grpcio-debuginfo affected Red Hat:openshift:4.12::el8 python3-grpcio-debuginfo —
python3-gunicorn affected Red Hat:openshift:4.12::el8 python3-gunicorn —
python3-gunicorn affected Red Hat:openshift_ironic:4.12::el9 python3-gunicorn —
python3-hacking affected Red Hat:openshift_ironic:4.12::el9 python3-hacking —
python3-hardware affected Red Hat:openshift_ironic:4.12::el9 python3-hardware —
python3-hardware-detect affected Red Hat:openshift_ironic:4.12::el9 python3-hardware-detect —
python3-html5lib affected Red Hat:openshift_ironic:4.12::el9 python3-html5lib —
python3-hypothesis affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis —
python3-hypothesis+cli affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+cli —
python3-hypothesis+dateutil affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+dateutil —
python3-hypothesis+django affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+django —
python3-hypothesis+ghostwriter affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+ghostwriter —
python3-hypothesis+lark affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+lark —
python3-hypothesis+numpy affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+numpy —
python3-hypothesis+pandas affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+pandas —
python3-hypothesis+pytest affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+pytest —
python3-hypothesis+pytz affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+pytz —
python3-hypothesis+redis affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+redis —
python3-hypothesis+zoneinfo affected Red Hat:openshift_ironic:4.12::el9 python3-hypothesis+zoneinfo —
python3-ifaddr affected Red Hat:openshift:4.12::el8 python3-ifaddr —
python3-ifaddr affected Red Hat:openshift_ironic:4.12::el9 python3-ifaddr —
python3-importlib-metadata affected Red Hat:openshift_ironic:4.12::el9 python3-importlib-metadata —
python3-importlib-metadata affected Red Hat:openshift:4.12::el8 python3-importlib-metadata —
python3-ironicclient affected Red Hat:openshift_ironic:4.12::el9 python3-ironicclient —
python3-ironic-inspector-tests affected Red Hat:openshift_ironic:4.12::el9 python3-ironic-inspector-tests —
python3-ironic-lib affected Red Hat:openshift_ironic:4.12::el9 python3-ironic-lib —
python3-ironic-prometheus-exporter affected Red Hat:openshift_ironic:4.12::el9 python3-ironic-prometheus-exporter —
python3-ironic-python-agent affected Red Hat:openshift_ironic:4.12::el9 python3-ironic-python-agent —
python3-ironic-python-agent-tests affected Red Hat:openshift_ironic:4.12::el9 python3-ironic-python-agent-tests —
python3-ironic-tests affected Red Hat:openshift_ironic:4.12::el9 python3-ironic-tests —
python3-iso8601 affected Red Hat:openshift:4.12::el8 python3-iso8601 —
python3-iso8601 affected Red Hat:openshift_ironic:4.12::el9 python3-iso8601 —
python3-itsdangerous affected Red Hat:openshift_ironic:4.12::el9 python3-itsdangerous —
python3-jinja2 affected Red Hat:openshift_ironic:4.12::el9 python3-jinja2 —
python3-jsonpath-rw affected Red Hat:openshift_ironic:4.12::el9 python3-jsonpath-rw —
python3-jsonschema affected Red Hat:openshift:4.12::el8 python3-jsonschema —
python3-kafka affected Red Hat:openshift_ironic:4.12::el9 python3-kafka —
python3-kazoo affected Red Hat:openshift_ironic:4.12::el9 python3-kazoo —
python3-kerberos affected Red Hat:openshift_ironic:4.12::el9 python3-kerberos —
python3-kerberos-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-kerberos-debuginfo —
python3-keyring affected Red Hat:openshift_ironic:4.12::el9 python3-keyring —
python3-keystoneauth1 affected Red Hat:openshift_ironic:4.12::el9 python3-keystoneauth1 —
python3-keystoneclient affected Red Hat:openshift_ironic:4.12::el9 python3-keystoneclient —
python3-keystoneclient-tests affected Red Hat:openshift_ironic:4.12::el9 python3-keystoneclient-tests —
python3-keystonemiddleware affected Red Hat:openshift_ironic:4.12::el9 python3-keystonemiddleware —
python3-kiwisolver affected Red Hat:openshift_ironic:4.12::el9 python3-kiwisolver —
python3-kiwisolver-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-kiwisolver-debuginfo —
python3-kombu affected Red Hat:openshift_ironic:4.12::el9 python3-kombu —
python3-kombu affected Red Hat:openshift:4.12::el8 python3-kombu —
python3-kubernetes affected Red Hat:openshift:4.12::el8 python3-kubernetes —
python3-kubernetes-tests affected Red Hat:openshift:4.12::el8 python3-kubernetes-tests —
python3-kuryr-kubernetes affected Red Hat:openshift:4.12::el8 python3-kuryr-kubernetes —
python3-libnmstate affected Red Hat:openshift:4.12::el8 python3-libnmstate —
python3-linecache2 affected Red Hat:openshift_ironic:4.12::el9 python3-linecache2 —
python3-lockfile affected Red Hat:openshift:4.12::el8 python3-lockfile —
python3-logutils affected Red Hat:openshift_ironic:4.12::el9 python3-logutils —
python3-markupsafe affected Red Hat:openshift_ironic:4.12::el9 python3-markupsafe —
python3-markupsafe-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-markupsafe-debuginfo —
python3-mccabe affected Red Hat:openshift_ironic:4.12::el9 python3-mccabe —
python3-memcached affected Red Hat:openshift_ironic:4.12::el9 python3-memcached —
python3-migrate affected Red Hat:openshift_ironic:4.12::el9 python3-migrate —
python3-mimeparse affected Red Hat:openshift_ironic:4.12::el9 python3-mimeparse —
python3-mock affected Red Hat:openshift_ironic:4.12::el9 python3-mock —
python3-monotonic affected Red Hat:openshift_ironic:4.12::el9 python3-monotonic —
python3-more-itertools affected Red Hat:openshift_ironic:4.12::el9 python3-more-itertools —
python3-mox3 affected Red Hat:openshift_ironic:4.12::el9 python3-mox3 —
python3-msgpack affected Red Hat:openshift_ironic:4.12::el9 python3-msgpack —
python3-msgpack affected Red Hat:openshift:4.12::el8 python3-msgpack —
python3-msgpack-debuginfo affected Red Hat:openshift:4.12::el8 python3-msgpack-debuginfo —
python3-msgpack-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-msgpack-debuginfo —
python3-munch affected Red Hat:openshift_ironic:4.12::el9 python3-munch —
python3-neutronclient affected Red Hat:openshift_ironic:4.12::el9 python3-neutronclient —
python3-neutronclient-tests affected Red Hat:openshift_ironic:4.12::el9 python3-neutronclient-tests —
python3-nose affected Red Hat:openshift_ironic:4.12::el9 python3-nose —
python3-nose-cover3 affected Red Hat:openshift_ironic:4.12::el9 python3-nose-cover3 —
python3-openstacksdk affected Red Hat:openshift_ironic:4.12::el9 python3-openstacksdk —
python3-openstacksdk-tests affected Red Hat:openshift_ironic:4.12::el9 python3-openstacksdk-tests —
python3-openvswitch2.17 affected Red Hat:openshift:4.12::el8 python3-openvswitch2.17 —
python3-openvswitch2.17-debuginfo affected Red Hat:openshift:4.12::el8 python3-openvswitch2.17-debuginfo —
python3-osc-lib affected Red Hat:openshift_ironic:4.12::el9 python3-osc-lib —
python3-osc-lib-tests affected Red Hat:openshift_ironic:4.12::el9 python3-osc-lib-tests —
python3-os-client-config affected Red Hat:openshift_ironic:4.12::el9 python3-os-client-config —
python3-oslo-cache affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-cache —
python3-oslo-cache-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-cache-tests —
python3-oslo-concurrency affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-concurrency —
python3-oslo-concurrency-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-concurrency-tests —
python3-oslo-config affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-config —
python3-oslo-config affected Red Hat:openshift:4.12::el8 python3-oslo-config —
python3-oslo-context affected Red Hat:openshift:4.12::el8 python3-oslo-context —
python3-oslo-context affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-context —
python3-oslo-context-tests affected Red Hat:openshift:4.12::el8 python3-oslo-context-tests —
python3-oslo-context-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-context-tests —
python3-oslo-db affected Red Hat:openshift:4.12::el8 python3-oslo-db —
python3-oslo-db affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-db —
python3-oslo-db-tests affected Red Hat:openshift:4.12::el8 python3-oslo-db-tests —
python3-oslo-db-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-db-tests —
python3-oslo-i18n affected Red Hat:openshift:4.12::el8 python3-oslo-i18n —
python3-oslo-i18n affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-i18n —
python3-oslo-log affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-log —
python3-oslo-log affected Red Hat:openshift:4.12::el8 python3-oslo-log —
python3-oslo-log-tests affected Red Hat:openshift:4.12::el8 python3-oslo-log-tests —
python3-oslo-log-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-log-tests —
python3-oslo-messaging affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-messaging —
python3-oslo-messaging affected Red Hat:openshift:4.12::el8 python3-oslo-messaging —
python3-oslo-messaging-tests affected Red Hat:openshift:4.12::el8 python3-oslo-messaging-tests —
python3-oslo-messaging-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-messaging-tests —
python3-oslo-metrics affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-metrics —
python3-oslo-metrics affected Red Hat:openshift:4.12::el8 python3-oslo-metrics —
python3-oslo-metrics-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-metrics-tests —
python3-oslo-metrics-tests affected Red Hat:openshift:4.12::el8 python3-oslo-metrics-tests —
python3-oslo-middleware affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-middleware —
python3-oslo-middleware-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-middleware-tests —
python3-oslo-policy affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-policy —
python3-oslo-policy affected Red Hat:openshift:4.12::el8 python3-oslo-policy —
python3-oslo-policy-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-policy-tests —
python3-oslo-policy-tests affected Red Hat:openshift:4.12::el8 python3-oslo-policy-tests —
python3-oslo-reports affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-reports —
python3-oslo-reports-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-reports-tests —
python3-oslo-rootwrap affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-rootwrap —
python3-oslo-rootwrap-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-rootwrap-tests —
python3-oslo-serialization affected Red Hat:openshift:4.12::el8 python3-oslo-serialization —
python3-oslo-serialization affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-serialization —
python3-oslo-serialization-tests affected Red Hat:openshift:4.12::el8 python3-oslo-serialization-tests —
python3-oslo-serialization-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-serialization-tests —
python3-oslo-service affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-service —
python3-oslo-service-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-service-tests —
python3-oslotest affected Red Hat:openshift_ironic:4.12::el9 python3-oslotest —
python3-oslo-upgradecheck affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-upgradecheck —
python3-oslo-utils affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-utils —
python3-oslo-utils-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-utils-tests —
python3-oslo-versionedobjects affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-versionedobjects —
python3-oslo-versionedobjects-tests affected Red Hat:openshift_ironic:4.12::el9 python3-oslo-versionedobjects-tests —
python3-osprofiler affected Red Hat:openshift_ironic:4.12::el9 python3-osprofiler —
python3-os-service-types affected Red Hat:openshift_ironic:4.12::el9 python3-os-service-types —
python3-os-traits affected Red Hat:openshift_ironic:4.12::el9 python3-os-traits —
python3-os-traits-tests affected Red Hat:openshift_ironic:4.12::el9 python3-os-traits-tests —
python3-packaging affected Red Hat:openshift:4.12::el8 python3-packaging —
python3-paste affected Red Hat:openshift_ironic:4.12::el9 python3-paste —
python3-paste affected Red Hat:openshift:4.12::el8 python3-paste —
python3-paste-deploy affected Red Hat:openshift_ironic:4.12::el9 python3-paste-deploy —
python3-paste-deploy affected Red Hat:openshift:4.12::el8 python3-paste-deploy —
python3-pbr affected Red Hat:openshift_ironic:4.12::el9 python3-pbr —
python3-pecan affected Red Hat:openshift_ironic:4.12::el9 python3-pecan —
python3-pexpect affected Red Hat:openshift_ironic:4.12::el9 python3-pexpect —
python3-pexpect affected Red Hat:openshift:4.12::el8 python3-pexpect —
python3-pint affected Red Hat:openshift:4.12::el8 python3-pint —
python3-pint affected Red Hat:openshift_ironic:4.12::el9 python3-pint —
python3-pretend affected Red Hat:openshift_ironic:4.12::el9 python3-pretend —
python3-proliantutils affected Red Hat:openshift_ironic:4.12::el9 python3-proliantutils —
python3-prometheus_client affected Red Hat:openshift_ironic:4.12::el9 python3-prometheus_client —
python3-pycadf affected Red Hat:openshift_ironic:4.12::el9 python3-pycadf —
python3-pycdlib affected Red Hat:openshift:4.12::el8 python3-pycdlib —
python3-pycodestyle affected Red Hat:openshift_ironic:4.12::el9 python3-pycodestyle —
python3-pyflakes affected Red Hat:openshift_ironic:4.12::el9 python3-pyflakes —
python3-pyghmi affected Red Hat:openshift:4.12::el8 python3-pyghmi —
python3-pymemcache affected Red Hat:openshift_ironic:4.12::el9 python3-pymemcache —
python3-pyOpenSSL affected Red Hat:openshift_ironic:4.12::el9 python3-pyOpenSSL —
python3-pyperclip affected Red Hat:openshift:4.12::el8 python3-pyperclip —
python3-pyperclip affected Red Hat:openshift_ironic:4.12::el9 python3-pyperclip —
python3-pyroute2 affected Red Hat:openshift:4.12::el8 python3-pyroute2 —
python3-pyrsistent affected Red Hat:openshift:4.12::el8 python3-pyrsistent —
python3-pyrsistent-debuginfo affected Red Hat:openshift:4.12::el8 python3-pyrsistent-debuginfo —
python3-pysnmp affected Red Hat:openshift_ironic:4.12::el9 python3-pysnmp —
python3-pytest-cov affected Red Hat:openshift_ironic:4.12::el9 python3-pytest-cov —
python3-pytest-forked affected Red Hat:openshift_ironic:4.12::el9 python3-pytest-forked —
python3-pytest-runner affected Red Hat:openshift_ironic:4.12::el9 python3-pytest-runner —
python3-pytest-xdist affected Red Hat:openshift_ironic:4.12::el9 python3-pytest-xdist —
python3-pytest-xprocess affected Red Hat:openshift_ironic:4.12::el9 python3-pytest-xprocess —
python3-redis affected Red Hat:openshift_ironic:4.12::el9 python3-redis —
python3-repoze-lru affected Red Hat:openshift_ironic:4.12::el9 python3-repoze-lru —
python3-requestsexceptions affected Red Hat:openshift_ironic:4.12::el9 python3-requestsexceptions —
python3-requests-kerberos affected Red Hat:openshift_ironic:4.12::el9 python3-requests-kerberos —
python3-requests-mock affected Red Hat:openshift_ironic:4.12::el9 python3-requests-mock —
python3-requests-unixsocket affected Red Hat:openshift:4.12::el8 python3-requests-unixsocket —
python3-requests-unixsocket affected Red Hat:openshift_ironic:4.12::el9 python3-requests-unixsocket —
python3-retrying affected Red Hat:openshift_ironic:4.12::el9 python3-retrying —
python3-rfc3986 affected Red Hat:openshift_ironic:4.12::el9 python3-rfc3986 —
python3-routes affected Red Hat:openshift_ironic:4.12::el9 python3-routes —
python3-rsa affected Red Hat:openshift:4.12::el8 python3-rsa —
python3-scciclient affected Red Hat:openshift_ironic:4.12::el9 python3-scciclient —
python3-SecretStorage affected Red Hat:openshift_ironic:4.12::el9 python3-SecretStorage —
python3-simplegeneric affected Red Hat:openshift_ironic:4.12::el9 python3-simplegeneric —
python3-simplejson affected Red Hat:openshift_ironic:4.12::el9 python3-simplejson —
python3-simplejson-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-simplejson-debuginfo —
python3-singledispatch affected Red Hat:openshift_ironic:4.12::el9 python3-singledispatch —
python3-smi affected Red Hat:openshift_ironic:4.12::el9 python3-smi —
python3-sortedcontainers affected Red Hat:openshift_ironic:4.12::el9 python3-sortedcontainers —
python3-soupsieve affected Red Hat:openshift_ironic:4.12::el9 python3-soupsieve —
python3-sqlalchemy affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy —
python3-sqlalchemy+aiomysql affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+aiomysql —
python3-sqlalchemy+aiosqlite affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+aiosqlite —
python3-sqlalchemy+asyncio affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+asyncio —
python3-sqlalchemy-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy-debuginfo —
python3-sqlalchemy+mssql_pymssql affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+mssql_pymssql —
python3-sqlalchemy+mssql_pyodbc affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+mssql_pyodbc —
python3-sqlalchemy+mysql affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+mysql —
python3-sqlalchemy+postgresql affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+postgresql —
python3-sqlalchemy+postgresql_asyncpg affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+postgresql_asyncpg —
python3-sqlalchemy+postgresql_pg8000 affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+postgresql_pg8000 —
python3-sqlalchemy+pymysql affected Red Hat:openshift_ironic:4.12::el9 python3-sqlalchemy+pymysql —
python3-sqlparse affected Red Hat:openshift_ironic:4.12::el9 python3-sqlparse —
python3-statsd affected Red Hat:openshift_ironic:4.12::el9 python3-statsd —
python3-stestr affected Red Hat:openshift_ironic:4.12::el9 python3-stestr —
python3-stevedore affected Red Hat:openshift_ironic:4.12::el9 python3-stevedore —
python3-subunit affected Red Hat:openshift_ironic:4.12::el9 python3-subunit —
python3-subunit-test affected Red Hat:openshift_ironic:4.12::el9 python3-subunit-test —
python3-sure affected Red Hat:openshift_ironic:4.12::el9 python3-sure —
python3-sushy affected Red Hat:openshift_ironic:4.12::el9 python3-sushy —
python3-sushy-oem-idrac affected Red Hat:openshift_ironic:4.12::el9 python3-sushy-oem-idrac —
python3-sushy-oem-idrac-tests affected Red Hat:openshift_ironic:4.12::el9 python3-sushy-oem-idrac-tests —
python3-sushy-tests affected Red Hat:openshift_ironic:4.12::el9 python3-sushy-tests —
python3-swiftclient affected Red Hat:openshift_ironic:4.12::el9 python3-swiftclient —
python3-tempita affected Red Hat:openshift_ironic:4.12::el9 python3-tempita —
python3-tenacity affected Red Hat:openshift:4.12::el8 python3-tenacity —
python3-tenacity affected Red Hat:openshift_ironic:4.12::el9 python3-tenacity —
python3-testrepository affected Red Hat:openshift_ironic:4.12::el9 python3-testrepository —
python3-testresources affected Red Hat:openshift_ironic:4.12::el9 python3-testresources —
python3-testscenarios affected Red Hat:openshift_ironic:4.12::el9 python3-testscenarios —
python3-testtools affected Red Hat:openshift_ironic:4.12::el9 python3-testtools —
python3-tooz affected Red Hat:openshift_ironic:4.12::el9 python3-tooz —
python3-tornado affected Red Hat:openshift_ironic:4.12::el9 python3-tornado —
python3-tornado-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-tornado-debuginfo —
python3-tox-current-env affected Red Hat:openshift_ironic:4.12::el9 python3-tox-current-env —
python3-traceback2 affected Red Hat:openshift_ironic:4.12::el9 python3-traceback2 —
python3-typeguard affected Red Hat:openshift_ironic:4.12::el9 python3-typeguard —
python3-typing-extensions affected Red Hat:openshift_ironic:4.12::el9 python3-typing-extensions —
python3-unittest2 affected Red Hat:openshift_ironic:4.12::el9 python3-unittest2 —
python3-vine affected Red Hat:openshift_ironic:4.12::el9 python3-vine —
python3-virtualenv affected Red Hat:openshift_ironic:4.12::el9 python3-virtualenv —
python3-voluptuous affected Red Hat:openshift_ironic:4.12::el9 python3-voluptuous —
python3-waitress affected Red Hat:openshift_ironic:4.12::el9 python3-waitress —
python3-warlock affected Red Hat:openshift_ironic:4.12::el9 python3-warlock —
python3-wcwidth affected Red Hat:openshift_ironic:4.12::el9 python3-wcwidth —
python3-wcwidth affected Red Hat:openshift:4.12::el8 python3-wcwidth —
python3-webencodings affected Red Hat:openshift_ironic:4.12::el9 python3-webencodings —
python3-webob affected Red Hat:openshift_ironic:4.12::el9 python3-webob —
python3-webtest affected Red Hat:openshift_ironic:4.12::el9 python3-webtest —
python3-werkzeug affected Red Hat:openshift:4.12::el8 python3-werkzeug —
python3-werkzeug affected Red Hat:openshift_ironic:4.12::el9 python3-werkzeug —
python3-wrapt affected Red Hat:openshift_ironic:4.12::el9 python3-wrapt —
python3-wrapt-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-wrapt-debuginfo —
python3-wsme affected Red Hat:openshift_ironic:4.12::el9 python3-wsme —
python3-yappi affected Red Hat:openshift_ironic:4.12::el9 python3-yappi —
python3-yappi-debuginfo affected Red Hat:openshift_ironic:4.12::el9 python3-yappi-debuginfo —
python3-zake affected Red Hat:openshift_ironic:4.12::el9 python3-zake —
python3-zeroconf affected Red Hat:openshift:4.12::el8 python3-zeroconf —
python3-zeroconf affected Red Hat:openshift_ironic:4.12::el9 python3-zeroconf —
python3-zipp affected Red Hat:openshift:4.12::el8 python3-zipp —
python3-zipp affected Red Hat:openshift_ironic:4.12::el9 python3-zipp —
python3-zope-event affected Red Hat:openshift_ironic:4.12::el9 python3-zope-event —
python3-zope-interface affected Red Hat:openshift_ironic:4.12::el9 python3-zope-interface —
python3-zope-testing affected Red Hat:openshift_ironic:4.12::el9 python3-zope-testing —
python-alembic affected Red Hat:openshift_ironic:4.12::el9 python-alembic —
python-alembic affected Red Hat:openshift:4.12::el8 python-alembic —
python-amqp affected Red Hat:openshift:4.12::el8 python-amqp —
python-amqp affected Red Hat:openshift_ironic:4.12::el9 python-amqp —
python-amqp-doc affected Red Hat:openshift:4.12::el8 python-amqp-doc —
python-amqp-doc affected Red Hat:openshift_ironic:4.12::el9 python-amqp-doc —
python-apipkg affected Red Hat:openshift_ironic:4.12::el9 python-apipkg —
python-atomicwrites affected Red Hat:openshift_ironic:4.12::el9 python-atomicwrites —
python-automaton affected Red Hat:openshift_ironic:4.12::el9 python-automaton —
python-autopage affected Red Hat:openshift_ironic:4.12::el9 python-autopage —
python-bcrypt affected Red Hat:openshift_ironic:4.12::el9 python-bcrypt —
python-bcrypt-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-bcrypt-debugsource —
python-beautifulsoup4 affected Red Hat:openshift_ironic:4.12::el9 python-beautifulsoup4 —
python-betamax affected Red Hat:openshift_ironic:4.12::el9 python-betamax —
python-cachetools affected Red Hat:openshift_ironic:4.12::el9 python-cachetools —
python-case affected Red Hat:openshift_ironic:4.12::el9 python-case —
python-cinderclient affected Red Hat:openshift_ironic:4.12::el9 python-cinderclient —
python-click affected Red Hat:openshift_ironic:4.12::el9 python-click —
python-cliff affected Red Hat:openshift_ironic:4.12::el9 python-cliff —
python-cmd2 affected Red Hat:openshift:4.12::el8 python-cmd2 —
python-cmd2 affected Red Hat:openshift_ironic:4.12::el9 python-cmd2 —
python-colorama affected Red Hat:openshift_ironic:4.12::el9 python-colorama —
python-construct affected Red Hat:openshift:4.12::el8 python-construct —
python-construct affected Red Hat:openshift_ironic:4.12::el9 python-construct —
python-contextlib2 affected Red Hat:openshift_ironic:4.12::el9 python-contextlib2 —
python-coverage affected Red Hat:openshift_ironic:4.12::el9 python-coverage —
python-coverage-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-coverage-debugsource —
python-dataclasses affected Red Hat:openshift_ironic:4.12::el9 python-dataclasses —
python-ddt affected Red Hat:openshift_ironic:4.12::el9 python-ddt —
python-debtcollector affected Red Hat:openshift_ironic:4.12::el9 python-debtcollector —
python-decorator affected Red Hat:openshift_ironic:4.12::el9 python-decorator —
python-defusedxml affected Red Hat:openshift_ironic:4.12::el9 python-defusedxml —
python-distlib affected Red Hat:openshift_ironic:4.12::el9 python-distlib —
python-dogpile-cache affected Red Hat:openshift:4.12::el8 python-dogpile-cache —
python-dogpile-cache affected Red Hat:openshift_ironic:4.12::el9 python-dogpile-cache —
python-dracclient affected Red Hat:openshift_ironic:4.12::el9 python-dracclient —
python-editor affected Red Hat:openshift_ironic:4.12::el9 python-editor —
python-entrypoints affected Red Hat:openshift_ironic:4.12::el9 python-entrypoints —
python-entrypoints-doc affected Red Hat:openshift_ironic:4.12::el9 python-entrypoints-doc —
python-eventlet affected Red Hat:openshift:4.12::el8 python-eventlet —
python-eventlet affected Red Hat:openshift_ironic:4.12::el9 python-eventlet —
python-execnet affected Red Hat:openshift_ironic:4.12::el9 python-execnet —
python-extras affected Red Hat:openshift_ironic:4.12::el9 python-extras —
python-fasteners affected Red Hat:openshift_ironic:4.12::el9 python-fasteners —
python-filelock affected Red Hat:openshift_ironic:4.12::el9 python-filelock —
python-filelock-doc affected Red Hat:openshift_ironic:4.12::el9 python-filelock-doc —
python-fixtures affected Red Hat:openshift_ironic:4.12::el9 python-fixtures —
python-flake8 affected Red Hat:openshift_ironic:4.12::el9 python-flake8 —
python-flask affected Red Hat:openshift_ironic:4.12::el9 python-flask —
python-flask affected Red Hat:openshift:4.12::el8 python-flask —
python-flask-doc affected Red Hat:openshift:4.12::el8 python-flask-doc —
python-flask-doc affected Red Hat:openshift_ironic:4.12::el9 python-flask-doc —
python-flit affected Red Hat:openshift_ironic:4.12::el9 python-flit —
python-freezegun affected Red Hat:openshift_ironic:4.12::el9 python-freezegun —
python-funcsigs affected Red Hat:openshift_ironic:4.12::el9 python-funcsigs —
python-funcsigs affected Red Hat:openshift:4.12::el8 python-funcsigs —
python-funcsigs-doc affected Red Hat:openshift_ironic:4.12::el9 python-funcsigs-doc —
python-futurist affected Red Hat:openshift_ironic:4.12::el9 python-futurist —
python-gevent affected Red Hat:openshift_ironic:4.12::el9 python-gevent —
python-gevent-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-gevent-debugsource —
python-glanceclient affected Red Hat:openshift_ironic:4.12::el9 python-glanceclient —
python-greenlet affected Red Hat:openshift_ironic:4.12::el9 python-greenlet —
python-greenlet-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-greenlet-debugsource —
python-gunicorn affected Red Hat:openshift_ironic:4.12::el9 python-gunicorn —
python-gunicorn affected Red Hat:openshift:4.12::el8 python-gunicorn —
python-gunicorn-doc affected Red Hat:openshift_ironic:4.12::el9 python-gunicorn-doc —
python-hacking affected Red Hat:openshift_ironic:4.12::el9 python-hacking —
python-hardware affected Red Hat:openshift_ironic:4.12::el9 python-hardware —
python-html5lib affected Red Hat:openshift_ironic:4.12::el9 python-html5lib —
python-hypothesis affected Red Hat:openshift_ironic:4.12::el9 python-hypothesis —
python-ifaddr affected Red Hat:openshift_ironic:4.12::el9 python-ifaddr —
python-ifaddr affected Red Hat:openshift:4.12::el8 python-ifaddr —
python-importlib-metadata affected Red Hat:openshift:4.12::el8 python-importlib-metadata —
python-importlib-metadata affected Red Hat:openshift_ironic:4.12::el9 python-importlib-metadata —
python-ironicclient affected Red Hat:openshift_ironic:4.12::el9 python-ironicclient —
python-ironic-lib affected Red Hat:openshift_ironic:4.12::el9 python-ironic-lib —
python-ironic-prometheus-exporter affected Red Hat:openshift_ironic:4.12::el9 python-ironic-prometheus-exporter —
python-iso8601 affected Red Hat:openshift_ironic:4.12::el9 python-iso8601 —
python-iso8601 affected Red Hat:openshift:4.12::el8 python-iso8601 —
python-itsdangerous affected Red Hat:openshift_ironic:4.12::el9 python-itsdangerous —
python-jinja2 affected Red Hat:openshift_ironic:4.12::el9 python-jinja2 —
python-jsonpath-rw affected Red Hat:openshift_ironic:4.12::el9 python-jsonpath-rw —
python-jsonschema affected Red Hat:openshift:4.12::el8 python-jsonschema —
python-kafka affected Red Hat:openshift_ironic:4.12::el9 python-kafka —
python-kazoo affected Red Hat:openshift_ironic:4.12::el9 python-kazoo —
python-kazoo-doc affected Red Hat:openshift_ironic:4.12::el9 python-kazoo-doc —
python-kerberos affected Red Hat:openshift_ironic:4.12::el9 python-kerberos —
python-kerberos-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-kerberos-debugsource —
python-keyring affected Red Hat:openshift_ironic:4.12::el9 python-keyring —
python-keystoneauth1 affected Red Hat:openshift_ironic:4.12::el9 python-keystoneauth1 —
python-keystoneclient affected Red Hat:openshift_ironic:4.12::el9 python-keystoneclient —
python-keystonemiddleware affected Red Hat:openshift_ironic:4.12::el9 python-keystonemiddleware —
python-kiwisolver affected Red Hat:openshift_ironic:4.12::el9 python-kiwisolver —
python-kiwisolver-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-kiwisolver-debugsource —
python-kombu affected Red Hat:openshift_ironic:4.12::el9 python-kombu —
python-kombu affected Red Hat:openshift:4.12::el8 python-kombu —
python-kubernetes affected Red Hat:openshift:4.12::el8 python-kubernetes —
python-linecache2 affected Red Hat:openshift_ironic:4.12::el9 python-linecache2 —
python-lockfile affected Red Hat:openshift:4.12::el8 python-lockfile —
python-logutils affected Red Hat:openshift_ironic:4.12::el9 python-logutils —
python-markupsafe affected Red Hat:openshift_ironic:4.12::el9 python-markupsafe —
python-markupsafe-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-markupsafe-debugsource —
python-mccabe affected Red Hat:openshift_ironic:4.12::el9 python-mccabe —
python-memcached affected Red Hat:openshift_ironic:4.12::el9 python-memcached —
python-migrate affected Red Hat:openshift_ironic:4.12::el9 python-migrate —
python-mimeparse affected Red Hat:openshift_ironic:4.12::el9 python-mimeparse —
python-mock affected Red Hat:openshift_ironic:4.12::el9 python-mock —
python-monotonic affected Red Hat:openshift_ironic:4.12::el9 python-monotonic —
python-more-itertools affected Red Hat:openshift_ironic:4.12::el9 python-more-itertools —
python-mox3 affected Red Hat:openshift_ironic:4.12::el9 python-mox3 —
python-msgpack affected Red Hat:openshift:4.12::el8 python-msgpack —
python-msgpack affected Red Hat:openshift_ironic:4.12::el9 python-msgpack —
python-msgpack-debugsource affected Red Hat:openshift:4.12::el8 python-msgpack-debugsource —
python-msgpack-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-msgpack-debugsource —
python-munch affected Red Hat:openshift_ironic:4.12::el9 python-munch —
python-neutronclient affected Red Hat:openshift_ironic:4.12::el9 python-neutronclient —
python-nose affected Red Hat:openshift_ironic:4.12::el9 python-nose —
python-nose-cover3 affected Red Hat:openshift_ironic:4.12::el9 python-nose-cover3 —
python-openstacksdk affected Red Hat:openshift_ironic:4.12::el9 python-openstacksdk —
python-osc-lib affected Red Hat:openshift_ironic:4.12::el9 python-osc-lib —
python-os-client-config affected Red Hat:openshift_ironic:4.12::el9 python-os-client-config —
python-oslo-cache affected Red Hat:openshift_ironic:4.12::el9 python-oslo-cache —
python-oslo-cache-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-cache-lang —
python-oslo-concurrency affected Red Hat:openshift_ironic:4.12::el9 python-oslo-concurrency —
python-oslo-concurrency-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-concurrency-lang —
python-oslo-config affected Red Hat:openshift_ironic:4.12::el9 python-oslo-config —
python-oslo-config affected Red Hat:openshift:4.12::el8 python-oslo-config —
python-oslo-context affected Red Hat:openshift:4.12::el8 python-oslo-context —
python-oslo-context affected Red Hat:openshift_ironic:4.12::el9 python-oslo-context —
python-oslo-db affected Red Hat:openshift_ironic:4.12::el9 python-oslo-db —
python-oslo-db affected Red Hat:openshift:4.12::el8 python-oslo-db —
python-oslo-db-lang affected Red Hat:openshift:4.12::el8 python-oslo-db-lang —
python-oslo-db-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-db-lang —
python-oslo-i18n affected Red Hat:openshift:4.12::el8 python-oslo-i18n —
python-oslo-i18n affected Red Hat:openshift_ironic:4.12::el9 python-oslo-i18n —
python-oslo-i18n-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-i18n-lang —
python-oslo-i18n-lang affected Red Hat:openshift:4.12::el8 python-oslo-i18n-lang —
python-oslo-log affected Red Hat:openshift_ironic:4.12::el9 python-oslo-log —
python-oslo-log affected Red Hat:openshift:4.12::el8 python-oslo-log —
python-oslo-log-lang affected Red Hat:openshift:4.12::el8 python-oslo-log-lang —
python-oslo-log-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-log-lang —
python-oslo-messaging affected Red Hat:openshift:4.12::el8 python-oslo-messaging —
python-oslo-messaging affected Red Hat:openshift_ironic:4.12::el9 python-oslo-messaging —
python-oslo-metrics affected Red Hat:openshift_ironic:4.12::el9 python-oslo-metrics —
python-oslo-metrics affected Red Hat:openshift:4.12::el8 python-oslo-metrics —
python-oslo-middleware affected Red Hat:openshift_ironic:4.12::el9 python-oslo-middleware —
python-oslo-middleware-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-middleware-lang —
python-oslo-policy affected Red Hat:openshift_ironic:4.12::el9 python-oslo-policy —
python-oslo-policy affected Red Hat:openshift:4.12::el8 python-oslo-policy —
python-oslo-policy-lang affected Red Hat:openshift:4.12::el8 python-oslo-policy-lang —
python-oslo-policy-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-policy-lang —
python-oslo-reports affected Red Hat:openshift_ironic:4.12::el9 python-oslo-reports —
python-oslo-rootwrap affected Red Hat:openshift_ironic:4.12::el9 python-oslo-rootwrap —
python-oslo-serialization affected Red Hat:openshift_ironic:4.12::el9 python-oslo-serialization —
python-oslo-serialization affected Red Hat:openshift:4.12::el8 python-oslo-serialization —
python-oslo-service affected Red Hat:openshift_ironic:4.12::el9 python-oslo-service —
python-oslotest affected Red Hat:openshift_ironic:4.12::el9 python-oslotest —
python-oslo-upgradecheck affected Red Hat:openshift_ironic:4.12::el9 python-oslo-upgradecheck —
python-oslo-utils affected Red Hat:openshift_ironic:4.12::el9 python-oslo-utils —
python-oslo-utils-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-utils-lang —
python-oslo-versionedobjects affected Red Hat:openshift_ironic:4.12::el9 python-oslo-versionedobjects —
python-oslo-versionedobjects-lang affected Red Hat:openshift_ironic:4.12::el9 python-oslo-versionedobjects-lang —
python-osprofiler affected Red Hat:openshift_ironic:4.12::el9 python-osprofiler —
python-os-service-types affected Red Hat:openshift_ironic:4.12::el9 python-os-service-types —
python-os-traits affected Red Hat:openshift_ironic:4.12::el9 python-os-traits —
python-packaging affected Red Hat:openshift:4.12::el8 python-packaging —
python-packaging-doc affected Red Hat:openshift:4.12::el8 python-packaging-doc —
python-paste affected Red Hat:openshift_ironic:4.12::el9 python-paste —
python-paste affected Red Hat:openshift:4.12::el8 python-paste —
python-paste-deploy affected Red Hat:openshift_ironic:4.12::el9 python-paste-deploy —
python-paste-deploy affected Red Hat:openshift:4.12::el8 python-paste-deploy —
python-pbr affected Red Hat:openshift_ironic:4.12::el9 python-pbr —
python-pecan affected Red Hat:openshift_ironic:4.12::el9 python-pecan —
python-pexpect affected Red Hat:openshift:4.12::el8 python-pexpect —
python-pexpect affected Red Hat:openshift_ironic:4.12::el9 python-pexpect —
python-pint affected Red Hat:openshift_ironic:4.12::el9 python-pint —
python-pint affected Red Hat:openshift:4.12::el8 python-pint —
python-pretend affected Red Hat:openshift_ironic:4.12::el9 python-pretend —
python-proliantutils affected Red Hat:openshift_ironic:4.12::el9 python-proliantutils —
python-prometheus_client affected Red Hat:openshift_ironic:4.12::el9 python-prometheus_client —
python-pycadf affected Red Hat:openshift_ironic:4.12::el9 python-pycadf —
python-pycadf-common affected Red Hat:openshift_ironic:4.12::el9 python-pycadf-common —
python-pycdlib affected Red Hat:openshift:4.12::el8 python-pycdlib —
python-pycodestyle affected Red Hat:openshift_ironic:4.12::el9 python-pycodestyle —
python-pyghmi affected Red Hat:openshift:4.12::el8 python-pyghmi —
python-pymemcache affected Red Hat:openshift_ironic:4.12::el9 python-pymemcache —
python-pyperclip affected Red Hat:openshift:4.12::el8 python-pyperclip —
python-pyperclip affected Red Hat:openshift_ironic:4.12::el9 python-pyperclip —
python-pyperclip-doc affected Red Hat:openshift_ironic:4.12::el9 python-pyperclip-doc —
python-pyperclip-doc affected Red Hat:openshift:4.12::el8 python-pyperclip-doc —
python-pyroute2 affected Red Hat:openshift:4.12::el8 python-pyroute2 —
python-pyrsistent affected Red Hat:openshift:4.12::el8 python-pyrsistent —
python-pyrsistent-debugsource affected Red Hat:openshift:4.12::el8 python-pyrsistent-debugsource —
python-pytest-cov affected Red Hat:openshift_ironic:4.12::el9 python-pytest-cov —
python-pytest-forked affected Red Hat:openshift_ironic:4.12::el9 python-pytest-forked —
python-pytest-runner affected Red Hat:openshift_ironic:4.12::el9 python-pytest-runner —
python-pytest-xdist affected Red Hat:openshift_ironic:4.12::el9 python-pytest-xdist —
python-pytest-xprocess affected Red Hat:openshift_ironic:4.12::el9 python-pytest-xprocess —
python-redis affected Red Hat:openshift_ironic:4.12::el9 python-redis —
python-repoze-lru affected Red Hat:openshift_ironic:4.12::el9 python-repoze-lru —
python-requestsexceptions affected Red Hat:openshift_ironic:4.12::el9 python-requestsexceptions —
python-requests-kerberos affected Red Hat:openshift_ironic:4.12::el9 python-requests-kerberos —
python-requests-mock affected Red Hat:openshift_ironic:4.12::el9 python-requests-mock —
python-requests-unixsocket affected Red Hat:openshift_ironic:4.12::el9 python-requests-unixsocket —
python-requests-unixsocket affected Red Hat:openshift:4.12::el8 python-requests-unixsocket —
python-retrying affected Red Hat:openshift_ironic:4.12::el9 python-retrying —
python-rfc3986 affected Red Hat:openshift_ironic:4.12::el9 python-rfc3986 —
python-routes affected Red Hat:openshift_ironic:4.12::el9 python-routes —
python-rsa affected Red Hat:openshift:4.12::el8 python-rsa —
python-scciclient affected Red Hat:openshift_ironic:4.12::el9 python-scciclient —
python-SecretStorage affected Red Hat:openshift_ironic:4.12::el9 python-SecretStorage —
python-simplegeneric affected Red Hat:openshift_ironic:4.12::el9 python-simplegeneric —
python-simplejson affected Red Hat:openshift_ironic:4.12::el9 python-simplejson —
python-simplejson-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-simplejson-debugsource —
python-singledispatch affected Red Hat:openshift_ironic:4.12::el9 python-singledispatch —
python-smi affected Red Hat:openshift_ironic:4.12::el9 python-smi —
python-sortedcontainers affected Red Hat:openshift_ironic:4.12::el9 python-sortedcontainers —
python-soupsieve affected Red Hat:openshift_ironic:4.12::el9 python-soupsieve —
python-sqlalchemy affected Red Hat:openshift_ironic:4.12::el9 python-sqlalchemy —
python-sqlalchemy-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-sqlalchemy-debugsource —
python-sqlalchemy-doc affected Red Hat:openshift_ironic:4.12::el9 python-sqlalchemy-doc —
python-sqlparse affected Red Hat:openshift_ironic:4.12::el9 python-sqlparse —
python-statsd affected Red Hat:openshift_ironic:4.12::el9 python-statsd —
python-statsd-doc affected Red Hat:openshift_ironic:4.12::el9 python-statsd-doc —
python-stestr affected Red Hat:openshift_ironic:4.12::el9 python-stestr —
python-stevedore affected Red Hat:openshift_ironic:4.12::el9 python-stevedore —
python-sure affected Red Hat:openshift_ironic:4.12::el9 python-sure —
python-sushy affected Red Hat:openshift_ironic:4.12::el9 python-sushy —
python-sushy-oem-idrac affected Red Hat:openshift_ironic:4.12::el9 python-sushy-oem-idrac —
python-swiftclient affected Red Hat:openshift_ironic:4.12::el9 python-swiftclient —
python-tempita affected Red Hat:openshift_ironic:4.12::el9 python-tempita —
python-tenacity affected Red Hat:openshift:4.12::el8 python-tenacity —
python-tenacity affected Red Hat:openshift_ironic:4.12::el9 python-tenacity —
python-testrepository affected Red Hat:openshift_ironic:4.12::el9 python-testrepository —
python-testresources affected Red Hat:openshift_ironic:4.12::el9 python-testresources —
python-testscenarios affected Red Hat:openshift_ironic:4.12::el9 python-testscenarios —
python-testtools affected Red Hat:openshift_ironic:4.12::el9 python-testtools —
python-testtools-doc affected Red Hat:openshift_ironic:4.12::el9 python-testtools-doc —
python-tooz affected Red Hat:openshift_ironic:4.12::el9 python-tooz —
python-tornado affected Red Hat:openshift_ironic:4.12::el9 python-tornado —
python-tornado-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-tornado-debugsource —
python-tornado-doc affected Red Hat:openshift_ironic:4.12::el9 python-tornado-doc —
python-tox affected Red Hat:openshift_ironic:4.12::el9 python-tox —
python-tox-current-env affected Red Hat:openshift_ironic:4.12::el9 python-tox-current-env —
python-traceback2 affected Red Hat:openshift_ironic:4.12::el9 python-traceback2 —
python-typeguard affected Red Hat:openshift_ironic:4.12::el9 python-typeguard —
python-typing-extensions affected Red Hat:openshift_ironic:4.12::el9 python-typing-extensions —
python-unittest2 affected Red Hat:openshift_ironic:4.12::el9 python-unittest2 —
python-vine affected Red Hat:openshift_ironic:4.12::el9 python-vine —
python-virtualenv affected Red Hat:openshift_ironic:4.12::el9 python-virtualenv —
python-voluptuous affected Red Hat:openshift_ironic:4.12::el9 python-voluptuous —
python-waitress affected Red Hat:openshift_ironic:4.12::el9 python-waitress —
python-warlock affected Red Hat:openshift_ironic:4.12::el9 python-warlock —
python-wcwidth affected Red Hat:openshift:4.12::el8 python-wcwidth —
python-wcwidth affected Red Hat:openshift_ironic:4.12::el9 python-wcwidth —
python-webencodings affected Red Hat:openshift_ironic:4.12::el9 python-webencodings —
python-webencodings-doc affected Red Hat:openshift_ironic:4.12::el9 python-webencodings-doc —
python-webob affected Red Hat:openshift_ironic:4.12::el9 python-webob —
python-webtest affected Red Hat:openshift_ironic:4.12::el9 python-webtest —
python-werkzeug affected Red Hat:openshift:4.12::el8 python-werkzeug —
python-werkzeug affected Red Hat:openshift_ironic:4.12::el9 python-werkzeug —
python-wrapt affected Red Hat:openshift_ironic:4.12::el9 python-wrapt —
python-wrapt-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-wrapt-debugsource —
python-wrapt-doc affected Red Hat:openshift_ironic:4.12::el9 python-wrapt-doc —
python-wsme affected Red Hat:openshift_ironic:4.12::el9 python-wsme —
python-yappi affected Red Hat:openshift_ironic:4.12::el9 python-yappi —
python-yappi-debugsource affected Red Hat:openshift_ironic:4.12::el9 python-yappi-debugsource —
python-zake affected Red Hat:openshift_ironic:4.12::el9 python-zake —
python-zeroconf affected Red Hat:openshift:4.12::el8 python-zeroconf —
python-zeroconf affected Red Hat:openshift_ironic:4.12::el9 python-zeroconf —
python-zipp affected Red Hat:openshift_ironic:4.12::el9 python-zipp —
python-zipp affected Red Hat:openshift:4.12::el8 python-zipp —
python-zope-event affected Red Hat:openshift_ironic:4.12::el9 python-zope-event —
python-zope-interface affected Red Hat:openshift_ironic:4.12::el9 python-zope-interface —
python-zope-testing affected Red Hat:openshift_ironic:4.12::el9 python-zope-testing —
rpm-ostree affected Red Hat:openshift:4.12::el8 rpm-ostree —
rpm-ostree affected Red Hat:openshift:4.12::el9 rpm-ostree —
rpm-ostree-debuginfo affected Red Hat:openshift:4.12::el9 rpm-ostree-debuginfo —
rpm-ostree-debuginfo affected Red Hat:openshift:4.12::el8 rpm-ostree-debuginfo —
rpm-ostree-debugsource affected Red Hat:openshift:4.12::el9 rpm-ostree-debugsource —
rpm-ostree-debugsource affected Red Hat:openshift:4.12::el8 rpm-ostree-debugsource —
rpm-ostree-devel affected Red Hat:openshift:4.12::el8 rpm-ostree-devel —
rpm-ostree-devel affected Red Hat:openshift:4.12::el9 rpm-ostree-devel —
rpm-ostree-libs affected Red Hat:openshift:4.12::el9 rpm-ostree-libs —
rpm-ostree-libs affected Red Hat:openshift:4.12::el8 rpm-ostree-libs —
rpm-ostree-libs-debuginfo affected Red Hat:openshift:4.12::el9 rpm-ostree-libs-debuginfo —
rpm-ostree-libs-debuginfo affected Red Hat:openshift:4.12::el8 rpm-ostree-libs-debuginfo —
runc affected Red Hat:openshift:4.12::el8 runc —
runc-debuginfo affected Red Hat:openshift:4.12::el8 runc-debuginfo —
runc-debugsource affected Red Hat:openshift:4.12::el8 runc-debugsource —
rust-afterburn affected Red Hat:openshift:4.12::el8 rust-afterburn —
rust-afterburn affected Red Hat:openshift:4.12::el9 rust-afterburn —
rust-afterburn-debugsource affected Red Hat:openshift:4.12::el9 rust-afterburn-debugsource —
rust-afterburn-debugsource affected Red Hat:openshift:4.12::el8 rust-afterburn-debugsource —
rust-bootupd affected Red Hat:openshift:4.12::el8 rust-bootupd —
rust-bootupd-debugsource affected Red Hat:openshift:4.12::el8 rust-bootupd-debugsource —
skopeo affected Red Hat:openshift:4.12::el9 skopeo —
skopeo affected Red Hat:openshift:4.12::el8 skopeo —
skopeo-debuginfo affected Red Hat:openshift:4.12::el9 skopeo-debuginfo —
skopeo-debugsource affected Red Hat:openshift:4.12::el9 skopeo-debugsource —
skopeo-tests affected Red Hat:openshift:4.12::el9 skopeo-tests —
skopeo-tests affected Red Hat:openshift:4.12::el8 skopeo-tests —
slirp4netns affected Red Hat:openshift:4.12::el8 slirp4netns —
slirp4netns-debuginfo affected Red Hat:openshift:4.12::el8 slirp4netns-debuginfo —
slirp4netns-debugsource affected Red Hat:openshift:4.12::el8 slirp4netns-debugsource —
subunit affected Red Hat:openshift_ironic:4.12::el9 subunit —
subunit-cppunit affected Red Hat:openshift_ironic:4.12::el9 subunit-cppunit —
subunit-cppunit-debuginfo affected Red Hat:openshift_ironic:4.12::el9 subunit-cppunit-debuginfo —
subunit-cppunit-devel affected Red Hat:openshift_ironic:4.12::el9 subunit-cppunit-devel —
subunit-debuginfo affected Red Hat:openshift_ironic:4.12::el9 subunit-debuginfo —
subunit-debugsource affected Red Hat:openshift_ironic:4.12::el9 subunit-debugsource —
subunit-devel affected Red Hat:openshift_ironic:4.12::el9 subunit-devel —
subunit-filters affected Red Hat:openshift_ironic:4.12::el9 subunit-filters —
subunit-perl affected Red Hat:openshift_ironic:4.12::el9 subunit-perl —
subunit-shell affected Red Hat:openshift_ironic:4.12::el9 subunit-shell —
subunit-static affected Red Hat:openshift_ironic:4.12::el9 subunit-static —
tini affected Red Hat:openshift:4.12::el8 tini —
toolbox affected Red Hat:openshift:4.12::el8 toolbox —
tox affected Red Hat:openshift_ironic:4.12::el9 tox —
Upstream advisory

RLSA-2023:0446

Open SourcePoC exploitHIGH2023-01-25

Moderate: go-toolset:rhel8 security and bug fix update

Affected products

ProductStatusVendorPackageEcosystem
delve affected Rocky Linux:8 delve —
golang affected Rocky Linux:8 golang —
go-toolset affected Rocky Linux:8 go-toolset —
Upstream advisory

RHSA-2023:0445

Open SourcePoC exploitHIGH2023-01-25

Red Hat Security Advisory: go-toolset-1.18 security update

Affected products

ProductStatusVendorPackageEcosystem
go-toolset-1.18 affected Red Hat:devtools:2022 go-toolset-1.18 —
go-toolset-1.18-build affected Red Hat:devtools:2022 go-toolset-1.18-build —
go-toolset-1.18-golang affected Red Hat:devtools:2022 go-toolset-1.18-golang —
go-toolset-1.18-golang-bin affected Red Hat:devtools:2022 go-toolset-1.18-golang-bin —
go-toolset-1.18-golang-docs affected Red Hat:devtools:2022 go-toolset-1.18-golang-docs —
go-toolset-1.18-golang-misc affected Red Hat:devtools:2022 go-toolset-1.18-golang-misc —
go-toolset-1.18-golang-race affected Red Hat:devtools:2022 go-toolset-1.18-golang-race —
go-toolset-1.18-golang-src affected Red Hat:devtools:2022 go-toolset-1.18-golang-src —
go-toolset-1.18-golang-tests affected Red Hat:devtools:2022 go-toolset-1.18-golang-tests —
go-toolset-1.18-runtime affected Red Hat:devtools:2022 go-toolset-1.18-runtime —
go-toolset-1.18-scldevel affected Red Hat:devtools:2022 go-toolset-1.18-scldevel —
Upstream advisory

ALSA-2023:0446

Open SourcePoC exploit2023-01-25

Moderate: go-toolset:rhel8 security and bug fix update

Affected products

ProductStatusVendorPackageEcosystem
delve affected AlmaLinux:8 delve —
golang affected AlmaLinux:8 golang —
golang-bin affected AlmaLinux:8 golang-bin —
golang-docs affected AlmaLinux:8 golang-docs —
golang-misc affected AlmaLinux:8 golang-misc —
golang-race affected AlmaLinux:8 golang-race —
golang-src affected AlmaLinux:8 golang-src —
golang-tests affected AlmaLinux:8 golang-tests —
go-toolset affected AlmaLinux:8 go-toolset —
Upstream advisory

RLSA-2023:0328

Open SourcePoC exploitHIGH2023-01-23

Moderate: go-toolset and golang security and bug fix update

Affected products

ProductStatusVendorPackageEcosystem
golang affected Rocky Linux:9 golang —
golang affected Rocky Linux — —
go-toolset affected Rocky Linux:9 go-toolset —
Upstream advisory

ALSA-2023:0328

Open SourcePoC exploit2023-01-23

Moderate: go-toolset and golang security and bug fix update

Affected products

ProductStatusVendorPackageEcosystem
golang affected AlmaLinux:9 golang —
golang-bin affected AlmaLinux:9 golang-bin —
golang-docs affected AlmaLinux:9 golang-docs —
golang-misc affected AlmaLinux:9 golang-misc —
golang-race affected AlmaLinux:9 golang-race —
golang-src affected AlmaLinux:9 golang-src —
golang-tests affected AlmaLinux:9 golang-tests —
go-toolset affected AlmaLinux:9 go-toolset —
Upstream advisory

CVE-2022-0337

GooglePoC exploitHIGH2023-01-02

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)

CVEs:CVE-2022-0337

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2022-4323

GooglePoC exploitHIGH2023-01-23

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

CVEs:CVE-2022-4323

Affected products

ProductStatusVendorPackageEcosystem
google_analyticator affected sumo — —
Upstream advisory

CVE-2023-21796

Open SourcePoC exploitCRITICAL2023-01-10

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVEs:CVE-2023-21796

Affected products

ProductStatusVendorPackageEcosystem
edge_chromium affected microsoft — —
Upstream advisory

OESA-2023-1020

Open SourcePoC exploit2023-01-06

kubernetes security update

Affected products

ProductStatusVendorPackageEcosystem
kubernetes affected openEuler:22.03-LTS-SP1 kubernetes —
Upstream advisory

CVE-2023-20918

Open SourcePoC exploitCRITICAL2023-01-03

In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2023-20918

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-253642088

GooglePoC exploitHIGH2023-01-01

ASB-A-253642088

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel: affected Android :linux_kernel: —
Upstream advisory

CVE-2022-20494

Open SourcePoC exploitHIGH2023-01-03

In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Prod...

CVEs:CVE-2022-20494

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-244395411

GooglePoC exploitMEDIUM2023-01-01

ASB-A-244395411

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel: affected Android :linux_kernel: —
Upstream advisory

CVE-2023-20921

Open SourcePoC exploitHIGH2023-01-03

In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges nee...

CVEs:CVE-2023-20921

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-20493

Open SourcePoC exploitHIGH2023-01-03

In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for explo...

CVEs:CVE-2022-20493

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20904

Open SourcePoC exploitHIGH2023-01-03

In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i...

CVEs:CVE-2023-20904

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

DEBIAN-CVE-2019-13768

Open SourceCoalition ESS 30-63%CRITICAL2023-01-02

DEBIAN-CVE-2019-13768

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2019-13768

GoogleCoalition ESS 30-63%CRITICAL2023-01-02

Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chrome security severity: High)

CVEs:CVE-2019-13768

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2022-3842

Open SourceCoalition ESS < 30%CRITICAL2023-01-02

DEBIAN-CVE-2022-3842

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:14 chromium —
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
Upstream advisory

CVE-2021-30558

GoogleCoalition ESS < 30%CRITICAL2023-01-02

Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chrome security severity: Medium)

CVEs:CVE-2021-30558

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2021-30558

Open SourceCoalition ESS < 30%CRITICAL2023-01-02

DEBIAN-CVE-2021-30558

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

GHSA-fxg5-wq6x-vr4w

Open SourceCoalition ESS < 30%HIGH2023-01-14

golang.org/x/net/http2/h2c vulnerable to request smuggling attack

Affected products

ProductStatusVendorPackageEcosystem
x/net affected golang.org golang.org/x/net —
Upstream advisory

GHSA-fxg5-wq6x-vr4w

Open SourceCoalition ESS < 30%HIGH2023-01-14

golang.org/x/net/http2/h2c vulnerable to request smuggling attack

Affected products

ProductStatusVendorPackageEcosystem
kyverno-1.8 affected chainguard kyverno-1.8 —
x/net affected golang.org golang.org/x/net —
Upstream advisory

DEBIAN-CVE-2022-41721

Open SourceCoalition ESS < 30%HIGH2023-01-13

DEBIAN-CVE-2022-41721

Affected products

ProductStatusVendorPackageEcosystem
golang-golang-x-net affected Debian:12 golang-golang-x-net —
golang-golang-x-net affected Debian:13 golang-golang-x-net —
golang-golang-x-net affected Debian:14 golang-golang-x-net —
Upstream advisory

CVE-2022-41721

Open SourceCoalition ESS < 30%HIGH2023-01-13

golang.org/x/net/http2/h2c vulnerable to request smuggling attack

CVEs:CVE-2022-41721

Affected products

ProductStatusVendorPackageEcosystem
x/net affected golang.org golang.org/x/net —
Upstream advisory

CVE-2022-41721

GoogleCoalition ESS < 30%HIGH2023-01-13

A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of ...

CVEs:CVE-2022-41721

Affected products

ProductStatusVendorPackageEcosystem
h2c affected golang — —
Upstream advisory

GO-2023-1495

Open SourceCoalition ESS < 30%2023-01-13

Request smuggling due to improper request handling in golang.org/x/net/http2/h2c

Affected products

ProductStatusVendorPackageEcosystem
x/net affected golang.org golang.org/x/net —
Upstream advisory

CVE-2023-21719

Open SourceCoalition ESS < 30%MEDIUM2023-01-10

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

CVEs:CVE-2023-21719

Affected products

ProductStatusVendorPackageEcosystem
edge_chromium affected microsoft — —
Upstream advisory

CVE-2022-3425

GoogleCoalition ESS < 30%HIGH2023-01-23

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

CVEs:CVE-2022-3425

Affected products

ProductStatusVendorPackageEcosystem
google_analyticator affected sumo — —
Upstream advisory

CVE-2023-21775

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVEs:CVE-2023-21775

Affected products

ProductStatusVendorPackageEcosystem
edge_chromium affected microsoft — —
Upstream advisory

CVE-2023-21795

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVEs:CVE-2023-21795

Affected products

ProductStatusVendorPackageEcosystem
edge_chromium affected microsoft — —
Upstream advisory

GHSA-7jf5-fvgf-48c6

Open SourceCoalition ESS < 30%MEDIUM2023-01-19

Velociraptor subject to Path Traversal

Affected products

ProductStatusVendorPackageEcosystem
golang/velociraptor affected www.velocidex.com www.velocidex.com/golang/velociraptor —
Upstream advisory

GHSA-7jf5-fvgf-48c6

Open SourceCoalition ESS < 30%MEDIUM2023-01-19

Velociraptor subject to Path Traversal

Affected products

ProductStatusVendorPackageEcosystem
golang/velociraptor affected www.velocidex.com www.velocidex.com/golang/velociraptor —
Upstream advisory

CVE-2023-0290

Open SourceCoalition ESS < 30%MEDIUM2023-01-18

Velociraptor subject to Path Traversal

CVEs:CVE-2023-0290

Affected products

ProductStatusVendorPackageEcosystem
golang/velociraptor affected www.velocidex.com www.velocidex.com/golang/velociraptor —
Upstream advisory

CVE-2023-0290

GoogleCoalition ESS < 30%MEDIUM2023-01-18

Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API, allowing a directory traversal in where the collection task could be written. It was possible to provide a client id of "../clients/server" to schedule t...

CVEs:CVE-2023-0290

Affected products

ProductStatusVendorPackageEcosystem
velociraptor affected rapid7 — —
Upstream advisory

DEBIAN-CVE-2023-0471

Open SourceCoalition ESS < 30%CRITICAL2023-01-30

DEBIAN-CVE-2023-0471

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

openSUSE-SU-2023:0032-1

Open SourceCoalition ESS < 30%CRITICAL2023-01-27

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected SUSE:Package Hub 15 SP4 chromium —
chromium affected openSUSE:Leap 15.4 chromium —
Upstream advisory

DSA-5328-1

Open SourceCoalition ESS < 30%2023-01-26

chromium - security update

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
Upstream advisory

CVE-2023-0471

GoogleCoalition ESS < 30%CRITICAL2023-01-24

Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2023-0471

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

MGASA-2023-0016

Open SourceCoalition ESS < 30%CRITICAL2023-01-24

Updated chromium-browser-stable packages fix security vulnerability

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser-stable affected Mageia:8 chromium-browser-stable —
Upstream advisory

openSUSE-SU-2023:0016-1

Open SourceCoalition ESS < 30%CRITICAL2023-01-13

Security update for chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected SUSE:Package Hub 15 SP4 chromium —
chromium affected openSUSE:Leap 15.4 chromium —
Upstream advisory

DSA-5317-1

Open SourceCoalition ESS < 30%2023-01-13

chromium - security update

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
Upstream advisory

CVE-2023-0138

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

CVEs:CVE-2023-0138

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0138

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0138

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

DEBIAN-CVE-2023-0472

Open SourceCoalition ESS < 30%CRITICAL2023-01-30

DEBIAN-CVE-2023-0472

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0472

GoogleCoalition ESS < 30%CRITICAL2023-01-24

Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2023-0472

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0473

Open SourceCoalition ESS < 30%HIGH2023-01-30

DEBIAN-CVE-2023-0473

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0473

GoogleCoalition ESS < 30%HIGH2023-01-24

Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2023-0473

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2015-10035

Open SourceCoalition ESS < 30%CRITICAL2023-01-09

A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file rest-server/data-server.js. The manipulation leads to sql injection. The patch is named a29d8ae1...

CVEs:CVE-2015-10035

Affected products

ProductStatusVendorPackageEcosystem
angular-test-reporter affected angular-test-reporter_project — —
Upstream advisory

CVE-2023-0136

GoogleCoalition ESS < 30%HIGH2023-01-10

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2023-0136

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0136

Open SourceCoalition ESS < 30%HIGH2023-01-10

DEBIAN-CVE-2023-0136

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0128

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security...

CVEs:CVE-2023-0128

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0128

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0128

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0141

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVEs:CVE-2023-0141

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0141

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0141

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0131

GoogleCoalition ESS < 30%MEDIUM2023-01-10

Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2023-0131

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0131

Open SourceCoalition ESS < 30%MEDIUM2023-01-10

DEBIAN-CVE-2023-0131

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0139

GoogleCoalition ESS < 30%MEDIUM2023-01-10

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low)

CVEs:CVE-2023-0139

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2023-0140

GoogleCoalition ESS < 30%MEDIUM2023-01-10

Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low)

CVEs:CVE-2023-0140

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0139

Open SourceCoalition ESS < 30%MEDIUM2023-01-10

DEBIAN-CVE-2023-0139

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

DEBIAN-CVE-2023-0140

Open SourceCoalition ESS < 30%MEDIUM2023-01-10

DEBIAN-CVE-2023-0140

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0130

GoogleCoalition ESS < 30%MEDIUM2023-01-10

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2023-0130

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2023-0133

GoogleCoalition ESS < 30%MEDIUM2023-01-10

Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2023-0133

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0130

Open SourceCoalition ESS < 30%MEDIUM2023-01-10

DEBIAN-CVE-2023-0130

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

DEBIAN-CVE-2023-0133

Open SourceCoalition ESS < 30%MEDIUM2023-01-10

DEBIAN-CVE-2023-0133

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2022-2743

GoogleCoalition ESS < 30%CRITICAL2023-01-02

Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions...

CVEs:CVE-2022-2743

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
chrome_os affected google — —
linux_and_chrome_os affected google — —
Upstream advisory

DEBIAN-CVE-2022-2743

Open SourceCoalition ESS < 30%CRITICAL2023-01-02

DEBIAN-CVE-2022-2743

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

DEBIAN-CVE-2022-0801

Open SourceCoalition ESS < 30%CRITICAL2023-01-02

DEBIAN-CVE-2022-0801

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:14 chromium —
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
Upstream advisory

GHSA-g5vm-525q-r66c

Open SourceCoalition ESS < 30%HIGH2023-01-18

Velociraptor vulnerable to Missing Authorization

Affected products

ProductStatusVendorPackageEcosystem
golang/velociraptor affected www.velocidex.com www.velocidex.com/golang/velociraptor —
Upstream advisory

GHSA-g5vm-525q-r66c

Open SourceCoalition ESS < 30%HIGH2023-01-18

Velociraptor vulnerable to Missing Authorization

Affected products

ProductStatusVendorPackageEcosystem
golang/velociraptor affected www.velocidex.com www.velocidex.com/golang/velociraptor —
Upstream advisory

CVE-2023-0242

GoogleCoalition ESS < 30%HIGH2023-01-18

Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed to run any command on the server including writing arbitrary files. However, lower privilege users are generally forbidden from...

CVEs:CVE-2023-0242

Affected products

ProductStatusVendorPackageEcosystem
velociraptor affected rapid7 — —
Upstream advisory

CVE-2023-0242

Open SourceCoalition ESS < 30%HIGH2023-01-18

Velociraptor vulnerable to Missing Authorization

CVEs:CVE-2023-0242

Affected products

ProductStatusVendorPackageEcosystem
golang/velociraptor affected www.velocidex.com www.velocidex.com/golang/velociraptor —
Upstream advisory

CVE-2022-3863

GoogleCoalition ESS < 30%CRITICAL2023-01-02

Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrome security severity: High)

CVEs:CVE-2022-3863

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2022-3863

Open SourceCoalition ESS < 30%CRITICAL2023-01-02

DEBIAN-CVE-2022-3863

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2022-4470

GoogleCoalition ESS < 30%CRITICAL2023-01-30

The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scr...

CVEs:CVE-2022-4470

Affected products

ProductStatusVendorPackageEcosystem
widgets_for_google_reviews affected trustindex — —
Upstream advisory

CVE-2023-0137

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security seve...

CVEs:CVE-2023-0137

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0137

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0137

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0129

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromiu...

CVEs:CVE-2023-0129

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0129

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0129

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0132

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2023-0132

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0132

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0132

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

DEBIAN-CVE-2023-0474

Open SourceCoalition ESS < 30%CRITICAL2023-01-30

DEBIAN-CVE-2023-0474

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0474

GoogleCoalition ESS < 30%CRITICAL2023-01-24

Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. (Chromium security severity: Medium)

CVEs:CVE-2023-0474

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2022-4790

GoogleCoalition ESS < 30%CRITICAL2023-01-23

The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

CVEs:CVE-2022-4790

Affected products

ProductStatusVendorPackageEcosystem
auto_publish_for_google_my_business affected auto_publish_for_google_my_business_project — —
Upstream advisory

CVE-2022-4758

GoogleCoalition ESS < 30%CRITICAL2023-01-23

The 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting a...

CVEs:CVE-2022-4758

Affected products

ProductStatusVendorPackageEcosystem
map_builder_for_google_maps affected 10web — —
Upstream advisory

CVE-2022-4025

GoogleCoalition ESS < 30%MEDIUM2023-01-02

Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. (Chrome security severity: Low)

CVEs:CVE-2022-4025

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2022-4025

Open SourceCoalition ESS < 30%MEDIUM2023-01-02

DEBIAN-CVE-2022-4025

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2023-0134

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity...

CVEs:CVE-2023-0134

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2023-0135

GoogleCoalition ESS < 30%CRITICAL2023-01-10

Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity...

CVEs:CVE-2023-0135

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2023-0134

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0134

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

DEBIAN-CVE-2023-0135

Open SourceCoalition ESS < 30%CRITICAL2023-01-10

DEBIAN-CVE-2023-0135

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2021-21200

GoogleCoalition ESS < 30%MEDIUM2023-01-02

Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chrome security severity: Low)

CVEs:CVE-2021-21200

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2021-21200

Open SourceCoalition ESS < 30%MEDIUM2023-01-02

DEBIAN-CVE-2021-21200

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2022-2742

GoogleCoalition ESS < 30%CRITICAL2023-01-02

Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. (Chrome...

CVEs:CVE-2022-2742

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

DEBIAN-CVE-2022-2742

Open SourceCoalition ESS < 30%CRITICAL2023-01-02

DEBIAN-CVE-2022-2742

Affected products

ProductStatusVendorPackageEcosystem
chromium affected Debian:11 chromium —
chromium affected Debian:12 chromium —
chromium affected Debian:13 chromium —
chromium affected Debian:14 chromium —
Upstream advisory

CVE-2022-20489

Open SourceCoalition ESS < 30%HIGH2023-01-03

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVEs:CVE-2022-20489

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-20490

Open SourceCoalition ESS < 30%HIGH2023-01-03

In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

CVEs:CVE-2022-20490

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-20492

Open SourceCoalition ESS < 30%HIGH2023-01-03

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVEs:CVE-2022-20492

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-20456

Open SourceCoalition ESS < 30%HIGH2023-01-03

In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...

CVEs:CVE-2022-20456

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-3841

Open SourceCoalition ESS < 30%HIGH2023-01-13

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as t...

CVEs:CVE-2022-3841

Affected products

ProductStatusVendorPackageEcosystem
advanced_cluster_management_for_kubernetes affected redhat — —
Upstream advisory

CVE-2022-20214

Open SourceCoalition ESS < 30%MEDIUM2023-01-26

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 A...

CVEs:CVE-2022-20214

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-3466

GoogleCoalition ESS < 30%MEDIUM2023-01-17

The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which...

CVEs:CVE-2022-3466

Affected products

ProductStatusVendorPackageEcosystem
cri-o affected kubernetes — —
openshift_container_platform affected redhat — —
Upstream advisory

CVE-2022-39086

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39086

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39087

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39087

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39088

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39088

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39081

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39081

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39082

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39082

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39083

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39083

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39084

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39084

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39085

Open SourceCoalition ESS < 30%MEDIUM2023-01-04

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

CVEs:CVE-2022-39085

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20924

Open SourceCoalition ESS < 30%MEDIUM2023-01-03

In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physical access to the device with no additional execution privileges needed. User interaction is n...

CVEs:CVE-2023-20924

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

PUB-A-240428519

GoogleCoalition ESS < 30%NONE2023-01-01

PUB-A-240428519

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2022-39116

Open SourceCoalition ESS < 30%CRITICAL2023-01-04

In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

CVEs:CVE-2022-39116

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39104

Open SourceCoalition ESS < 30%HIGH2023-01-04

In contacts service, there is a missing permission check. This could lead to local denial of service in Contacts service with no additional execution privileges needed.

CVEs:CVE-2022-39104

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-38678

Open SourceCoalition ESS < 30%HIGH2023-01-04

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-38678

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-38682

Open SourceCoalition ESS < 30%HIGH2023-01-04

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-38682

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-38683

Open SourceCoalition ESS < 30%HIGH2023-01-04

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-38683

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-38684

Open SourceCoalition ESS < 30%HIGH2023-01-04

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-38684

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32646

Open SourceCoalition ESS < 30%HIGH2023-01-03

In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363501; Issue ID: A...

CVEs:CVE-2022-32646

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20915

Open SourceCoalition ESS < 30%HIGH2023-01-03

In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without user interaction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privil...

CVEs:CVE-2023-20915

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20919

Open SourceCoalition ESS < 30%HIGH2023-01-03

In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

CVEs:CVE-2023-20919

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20905

Open SourceCoalition ESS < 30%HIGH2023-01-03

In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex...

CVEs:CVE-2023-20905

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20920

Open SourceCoalition ESS < 30%HIGH2023-01-03

In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: An...

CVEs:CVE-2023-20920

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32640

Open SourceCoalition ESS < 30%HIGH2023-01-03

In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441652; Issu...

CVEs:CVE-2022-32640

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32641

Open SourceCoalition ESS < 30%MEDIUM2023-01-03

In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453594; Issue...

CVEs:CVE-2022-32641

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32637

Open SourceCoalition ESS < 30%HIGH2023-01-03

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; I...

CVEs:CVE-2022-32637

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-257860658

GoogleCoalition ESS < 30%HIGH2023-01-01

ASB-A-257860658

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2022-32639

Open SourceCoalition ESS < 30%MEDIUM2023-01-03

In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494487; Issue ...

CVEs:CVE-2022-32639

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20925

Open SourceCoalition ESS < 30%HIGH2023-01-03

In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp...

CVEs:CVE-2023-20925

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

PUB-A-236674672

GoogleCoalition ESS < 30%HIGH2023-01-01

PUB-A-236674672

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2022-20215

Open SourceCoalition ESS < 30%MEDIUM2023-01-26

In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

CVEs:CVE-2022-20215

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-20213

Open SourceCoalition ESS < 30%MEDIUM2023-01-26

In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Pr...

CVEs:CVE-2022-20213

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20916

Open SourceCoalition ESS < 30%HIGH2023-01-03

In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a missing permission check. This could lead to local escalation of privilege with no additi...

CVEs:CVE-2023-20916

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32648

Open SourceCoalition ESS < 30%HIGH2023-01-03

In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535964; Issue ID: ALPS06535964.

CVEs:CVE-2022-32648

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32644

Open SourceCoalition ESS < 30%HIGH2023-01-03

In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494473; Issue ID: ALPS07494473.

CVEs:CVE-2022-32644

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20912

Open SourceCoalition ESS < 30%HIGH2023-01-03

In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVEs:CVE-2023-20912

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20913

Open SourceCoalition ESS < 30%HIGH2023-01-03

In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execu...

CVEs:CVE-2023-20913

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-20458

Open SourceCoalition ESS < 30%HIGH2023-01-26

The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotification.getKey() could contain sensitive information. However, CarNotificationListener.java, it prints out the St...

CVEs:CVE-2022-20458

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20908

Open SourceCoalition ESS < 30%HIGH2023-01-03

In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Pro...

CVEs:CVE-2023-20908

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2023-20922

Open SourceCoalition ESS < 30%HIGH2023-01-03

In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

CVEs:CVE-2023-20922

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44439

Open SourceCoalition ESS < 30%HIGH2023-01-04

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44439

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44440

Open SourceCoalition ESS < 30%HIGH2023-01-04

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44440

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44441

Open SourceCoalition ESS < 30%HIGH2023-01-04

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44441

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44442

Open SourceCoalition ESS < 30%HIGH2023-01-04

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44442

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44443

Open SourceCoalition ESS < 30%HIGH2023-01-04

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44443

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44444

Open SourceCoalition ESS < 30%HIGH2023-01-04

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44444

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44445

Open SourceCoalition ESS < 30%HIGH2023-01-04

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44445

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44446

Open SourceCoalition ESS < 30%HIGH2023-01-04

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44446

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-39118

Open SourceCoalition ESS < 30%CRITICAL2023-01-04

In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

CVEs:CVE-2022-39118

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44422

Open SourceCoalition ESS < 30%HIGH2023-01-04

In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44422

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44423

Open SourceCoalition ESS < 30%HIGH2023-01-04

In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44423

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44424

Open SourceCoalition ESS < 30%HIGH2023-01-04

In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44424

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44425

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44425

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44426

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44426

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44427

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44427

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44431

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44431

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44432

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44432

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44434

Open SourceCoalition ESS < 30%HIGH2023-01-03

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44434

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44435

Open SourceCoalition ESS < 30%HIGH2023-01-03

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44435

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44436

Open SourceCoalition ESS < 30%HIGH2023-01-03

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44436

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44437

Open SourceCoalition ESS < 30%HIGH2023-01-03

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44437

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44438

Open SourceCoalition ESS < 30%HIGH2023-01-03

In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed.

CVEs:CVE-2022-44438

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-258728978

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258728978

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258731891

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258731891

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258736883

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258736883

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258741356

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258741356

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258741360

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258741360

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258743555

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258743555

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258743558

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258743558

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258749708

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258749708

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258759189

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258759189

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258759192

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258759192

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258760518

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258760518

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258760519

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258760519

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

ASB-A-258760781

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-258760781

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2022-20461

Open SourceCoalition ESS < 30%HIGH2023-01-03

In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interact...

CVEs:CVE-2022-20461

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-20235

Open SourceCoalition ESS < 30%CRITICAL2023-01-03

The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to me...

CVEs:CVE-2022-20235

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-259967780

GoogleCoalition ESS < 30%CRITICAL2023-01-01

ASB-A-259967780

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

PUB-A-238117846

GoogleCoalition ESS < 30%2023-01-01

PUB-A-238117846

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel:Qualcomm affected Android :linux_kernel:Qualcomm —
Upstream advisory

PUB-A-238118608

GoogleCoalition ESS < 30%2023-01-01

PUB-A-238118608

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel:Qualcomm affected Android :linux_kernel:Qualcomm —
Upstream advisory

PUB-A-238118629

GoogleCoalition ESS < 30%2023-01-01

PUB-A-238118629

Affected products

ProductStatusVendorPackageEcosystem
:linux_kernel:Qualcomm affected Android :linux_kernel:Qualcomm —
Upstream advisory

PUB-A-238118178

GoogleCoalition ESS < 30%2023-01-01

PUB-A-238118178

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2023-20923

Open SourceCoalition ESS < 30%MEDIUM2023-01-03

In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interact...

CVEs:CVE-2023-20923

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

PUB-A-246933910

GoogleCoalition ESS < 30%MEDIUM2023-01-01

PUB-A-246933910

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2022-32649

Open SourceCoalition ESS < 30%HIGH2023-01-03

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840.

CVEs:CVE-2022-32649

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32650

Open SourceCoalition ESS < 30%HIGH2023-01-03

In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225853; Issue ID: ALPS07225853.

CVEs:CVE-2022-32650

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32651

Open SourceCoalition ESS < 30%HIGH2023-01-03

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857.

CVEs:CVE-2022-32651

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32652

Open SourceCoalition ESS < 30%HIGH2023-01-03

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262617; Issue ID: ALPS07262617.

CVEs:CVE-2022-32652

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32653

Open SourceCoalition ESS < 30%HIGH2023-01-03

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262518; Issue ID: ALPS07262518.

CVEs:CVE-2022-32653

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32638

Open SourceCoalition ESS < 30%HIGH2023-01-03

In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494449; Issue ID: ALPS07...

CVEs:CVE-2022-32638

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32623

Open SourceCoalition ESS < 30%HIGH2023-01-03

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID...

CVEs:CVE-2022-32623

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32635

Open SourceCoalition ESS < 30%HIGH2023-01-03

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Iss...

CVEs:CVE-2022-32635

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32645

Open SourceCoalition ESS < 30%MEDIUM2023-01-03

In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494477; Issue ID: ALPS...

CVEs:CVE-2022-32645

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

ASB-A-257714327

GoogleCoalition ESS < 30%HIGH2023-01-01

ASB-A-257714327

Affected products

ProductStatusVendorPackageEcosystem
:unknown: affected Android :unknown: —
Upstream advisory

CVE-2022-32647

Open SourceCoalition ESS < 30%HIGH2023-01-03

In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554646; Issue I...

CVEs:CVE-2022-32647

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-32636

Open SourceCoalition ESS < 30%HIGH2023-01-03

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ...

CVEs:CVE-2022-32636

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44428

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44428

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44429

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44429

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2022-44430

Open SourceCoalition ESS < 30%HIGH2023-01-03

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.

CVEs:CVE-2022-44430

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

GHSA-2jpx-h8j2-g8m4

Open SourceEPSS <= 49%MEDIUM2023-01-26

Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin

Affected products

ProductStatusVendorPackageEcosystem
com.cloudbees.jenkins.plugins:kubernetes-credentials-provider affected Maven com.cloudbees.jenkins.plugins:kubernetes-credentials-provider —
Upstream advisory

GHSA-2jpx-h8j2-g8m4

Open SourceEPSS <= 49%MEDIUM2023-01-26

Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin

Affected products

ProductStatusVendorPackageEcosystem
com.cloudbees.jenkins.plugins:kubernetes-credentials-provider affected Maven com.cloudbees.jenkins.plugins:kubernetes-credentials-provider —
Upstream advisory

CVE-2023-24425

Open SourceEPSS <= 49%MEDIUM2023-01-24

Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes creden...

CVEs:CVE-2023-24425

Affected products

ProductStatusVendorPackageEcosystem
kubernetes_credentials_provider affected jenkins — —
Upstream advisory

CVE-2023-24425

GoogleEPSS <= 49%2023-01-24

Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.

CVEs:CVE-2023-24425

Upstream advisory

CVE-2023-24425

Open SourceEPSS <= 49%MEDIUM2023-01-24

Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin

CVEs:CVE-2023-24425

Affected products

ProductStatusVendorPackageEcosystem
com.cloudbees.jenkins.plugins:kubernetes-credentials-provider affected Maven com.cloudbees.jenkins.plugins:kubernetes-credentials-provider —
Upstream advisory

CVE-2014-125083

GoogleEPSS <= 49%CRITICAL2023-01-19

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. T...

CVEs:CVE-2014-125083

Affected products

ProductStatusVendorPackageEcosystem
google-enterprise-connector-dctm affected anant — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.