Open Source Vulnerabilities

fish, fish

Security update for fish

kalcaddle KodExplorer app.php index server-side request forgery

kalcaddle KodExplorer app.php server-side request forgery

kalcaddle KodExplorer ZIP Archive app.php unzipList code injection

thorsten/phpmyfaq

phpMyFAQ Cross-site Scripting vulnerability

thorsten/phpmyfaq

phpMyFAQ Cross-site Scripting vulnerability

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

kalcaddle KodExplorer API Endpoint unrestricted upload

kalcaddle kodbox app.php cover server-side request forgery

kalcaddle kodbox index.class.php check command injection

github.com/sap/cloud-security-client-go

Escalation of privileges in github.com/sap/cloud-security-client-go

@octokit/webhooks, @octokit/webhooks, @octokit/webhooks, @octokit/webhooks, @octokit/app, octokit, probot

Unauthenticated Denial of Service in the octokit/webhooks library

org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration-ui

Remote code execution/programming rights with configuration section from any user account

org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration-ui, org.xwiki.platform:xwiki-platform-administration-ui

XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass

org.xwiki.platform:xwiki-platform-search-ui, org.xwiki.platform:xwiki-platform-search-ui, org.xwiki.platform:xwiki-platform-search-ui

Remote code execution from account through SearchAdmin

org.xwiki.platform:xwiki-platform-search-solr-api, org.xwiki.platform:xwiki-platform-search-solr-api, org.xwiki.platform:xwiki-platform-search-solr-api

Solr search discloses email addresses of users

libavc

Heap-buffer-overflow in isvcd_start_of_pic

libavc

Heap-buffer-overflow in ih264d_format_convert

libavc

Heap-buffer-overflow in ih264d_format_convert

org.xwiki.platform:xwiki-platform-search-solr-api, org.xwiki.platform:xwiki-platform-search-solr-api, org.xwiki.platform:xwiki-platform-search-solr-api

Solr search discloses password hashes of all users

intel-microcode

intel-microcode - security update

activeadmin

Potential CSV export data leak

org.owasp:dependency-check-ant, org.owasp:dependency-check-cli, org.owasp:dependency-check-maven

nvdApiKey is logged in debug mode

homeassistant

User accounts disclosed to unauthenticated actors on the LAN

Unauthenticated Denial of Service in the octokit/webhooks library

Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/<protocol>/ endpoint

Bazarr Arbitrary file read in /api/swaggerui/static endpoint

Bazarr Arbitrary file read in /system/backup/download/ endpoint

Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory

XWiki Platform remote code execution/programming rights with configuration section from any user account

XWiki Platform XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass

XWiki Platform RCE from account through SearchAdmin

XWiki Platform Solr search discloses password hashes of all users

XWiki Platform Solr search discloses email addresses of users

audiofile

Updated audiofile packages fix a security vulnerability

gimp, gegl, gimp

Updated gimp packages fix security vulnerabilities