Open Source Vulnerabilities

Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

Database Credential Exposure in the Logs

github.com/go-skynet/LocalAI

LocalAI cross-site request forgery vulnerability

@kindspells/astro-shield

In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists

unixODBC

Updated unixODBC packages fix security vulnerability

w3m

Updated w3m packages fix security vulnerabilities

Cross-Site Request Forgery (CSRF) Vulnerability in mudler/localai

Username Enumeration in CasaOS via bypass of CVE-2024-24766

piccolo-admin

Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page

github.com/IceWhaleTech/CasaOS-UserService

CasaOS Username Enumeration - Bypass of CVE-2024-24766

linux, linux

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-hwe-5.19, linux-hwe-6.2, linux-intel-iot-realtime, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oem-6.8, linux-oracle, linux-raspi, linux-riscv, linux-raspi-realtime, linux-realtime

, Kernel

Fix memory leak in posix_clock_open()

discourse

Disclosure of the existence of secret subcategories in Discourse

discourse

No rate limits on POST /uploads endpoint in Discourse

discourse

Denial of service through invites in Discourse