Open Source Vulnerabilities

postgresql, postgresql15, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql, postgresql, postgresql15, postgresql16, postgresql, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql15, postgresql16, postgresql, postgresql15, postgresql16, postgresql16-mini, postgresql, postgresql15, postgresql16, postgresql16-mini

Security update for postgresql, postgresql15, postgresql16

dotnet-sdk

dotnet

bt: hci: DoS and possible RCE

tiff, tiff, tiff, tiff

torchserve

TorchServe ZipSlip

upydev

upydev has weak encryption padding

gimp

gimp - security update

next-auth

Possible user mocking that bypasses basic authentication

upydev

Ability to DoS the testing infrastructure by overwriting files

Book Stack v23.10.2 - LFR via Blind SSRF

strapi-plugin-protected-populate

Bypass of field access control in strapi-plugin-protected-populate

org.xwiki.contrib:xwiki-application-admintools

Cross-Site Request Forgery with QueryOnXWiki allows arbitrary database queries

org.xwiki.contrib:xwiki-application-admintools

Run Shell Command allows Cross-Site Request Forgery

org.xwiki.platform:xwiki-platform-search-solr-query, org.xwiki.platform:xwiki-platform-search-solr-query

Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service

org.xwiki.platform:xwiki-platform-diff-xml, org.xwiki.platform:xwiki-platform-diff-xml, org.xwiki.platform:xwiki-platform-diff-xml

Cookies are sent to external images in rendered diff (and server side request forgery)

fast-jwt

JWT Algorithm Confusion

ucode-intel, ucode-intel

Security update for ucode-intel