Open Source Vulnerabilities

org.silverpeas.core:silverpeas-core

Cross Site Request Forgery in Silverpeas

org.silverpeas.core:silverpeas-core-web, org.silverpeas.core:silverpeas-core-api, org.silverpeas.core:silverpeas-core-war, org.silverpeas.core:silverpeas-core-configuration

Cross-site Scripting in silverpeas

org.silverpeas.core:silverpeas-core-web

Broken access control in Silverpeas

org.silverpeas.core:silverpeas-core-war, org.silverpeas.core:silverpeas-core-web

Broken access control in Silverpeas

kernel-livepatch-SLE15-SP2_Update_36

Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2)

tinyxml, tinyxml, tinyxml

tinyxml, tinyxml, tinyxml, tinyxml

linux-oracle

linux-oracle vulnerabilities

linux-lowlatency-hwe-5.15, linux-lowlatency

linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities

xwayland, xwayland

Security update for xwayland

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xwayland, xwayland

Security update for xwayland

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

linux-hwe-6.2, linux-lowlatency-hwe-6.2, linux-nvidia-6.2

linux-hwe-6.2, linux-lowlatency-hwe-6.2, linux-nvidia-6.2 vulnerabilities

nautobot, nautobot

Unauthenticated db-file-storage views

meraki

Improper validation in meraki

quiche

Unbounded queuing of path validation messages in cloudflare-quiche

sap-xssec

Improper Privilege Management in sap-xssec

github.com/sap/cloud-security-client-go

Improper Privilege Management in github.com/sap/cloud-security-client-go

com.sap.cloud.security:java-security, com.sap.cloud.security:java-security, com.sap.cloud.security:spring-security, com.sap.cloud.security:spring-security, com.sap.cloud.security.xsuaa:spring-xsuaa, com.sap.cloud.security.xsuaa:spring-xsuaa

Improper JWT Signature Validation in SAP Security Services Library

wasmer-cli

Wasmer filesystem sandbox not enforced

phenx/php-svg-lib

Denial of service caused by infinite recursion when parsing SVG document

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Stored XSS via SVG File Upload

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Brute force exploit can be used to collect valid usernames

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Privilege Escalation using Spoofing

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Using the directory back payload (“/../”) in a package name allows placement of package in other folders.