Open Source Vulnerabilities

moq

Moq v4.20.0-rc to 4.20.1 share hashed user data

php-dompdf

php-dompdf vulnerabilities

1Panel arbitrary file write vulnerability exists in the background

1Panel Unauthorized access in Backend

1Panel O&M management panel has a background arbitrary file reading vulnerability

Missing password confirmation when creating app passwords

Users can delete external storage mount points

Text does not respect "Allow download" permissions

CVE-2023-4128 does not affect BellSoft software

linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-fde-5.19, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia, linux-nvidia-6.2, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-riscv, linux-riscv-5.19, linux-starfive-5.19

Existence of calendars and address books can be checked by unauthenticated users

Missing brute force protection on password reset token OAuth2 API controller

velocity-tools, velocity-tools, velocity-tools

velocity-tools vulnerability

cacti, cacti, cacti

cacti, cacti, cacti, cacti, cacti, cacti, cacti, cacti

Path traversal allows tricking the Talk Android app into writing files into it's root directory

Notes attachment render HTML in preview mode

user_oidc app stores client secret unencrypted in database

util-linux, python-libmount, util-linux, util-linux-systemd, python-libmount, util-linux, util-linux-systemd, util-linux

Security update for util-linux

gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad

Security update for gstreamer-plugins-bad