Open Source Vulnerabilities

:unknown:

:unknown:

:unknown:

:unknown:

:unknown:

:unknown:

:unknown:

:unknown:

:unknown:

:unknown:

:linux_kernel:Qualcomm

:unknown:

:unknown:

platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base

:unknown:

:unknown:

:unknown:

:unknown:

:unknown:

libvirt

libvirt - security update

ruby, ruby-bundled-gems, ruby-default-gems, ruby-devel, ruby-doc, ruby-libs, rubygem-bigdecimal, rubygem-bundler, rubygem-io-console, rubygem-irb, rubygem-json, rubygem-minitest, rubygem-mysql2, rubygem-mysql2-doc, rubygem-pg, rubygem-pg-doc, rubygem-power_assert, rubygem-psych, rubygem-rake, rubygem-rbs, rubygem-rdoc, rubygem-rexml, rubygem-rss, rubygem-test-unit, rubygem-typeprof, rubygems, rubygems-devel

Moderate: ruby:3.1 security, bug fix, and enhancement update

platform/frameworks/base, platform/frameworks/base, platform/frameworks/base

platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base

platform/packages/apps/Settings, platform/packages/apps/Settings, platform/packages/apps/Settings

platform/frameworks/base, platform/frameworks/base, platform/frameworks/base

:unknown:

platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base

:linux_kernel:Qualcomm

platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base

zookeeper

Apache ZooKeeper: Information disclosure in persistent watcher handling

prestashop

Prestashop vulnerable to path disclosure in JavaScript variable

parse

Parse Server literalizeRegexPart SQL Injection

moodle

Msa-24-0001: denial of service risk in file picker unzip functionality

moodle

Msa-24-0002: forum search accepted random parameters in its url

moodle

Msa-24-0003: h5p attempts report did not respect activity group settings

moodle

Msa-24-0004: forum export did not respect activity group settings

moodle

Msa-24-0005: csrf risk in language import utility

moodle

Msa-24-0006: idor on dashboard comments block

mlflow

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.

mlflow

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.

mastodon

External OpenID Connect Account Takeover by E-Mail Change in mastodon