Open Source Vulnerabilities

,

lldpd, lldpd, lldpd, lldpd, lldpd, lldpd, lldpd

lilypond, lilypond, lilypond

mailman

Mailman Core vulnerable to timing attacks

mailman3, mailman3, mailman3

mediawiki, mediawiki, mediawiki

mailman3, mailman3

mailman

thunderbird, thunderbird-l10n

Updated thunderbird packages fix security vulnerability

libheif, libheif

Updated libheif packages fix security vulnerability

jpegoptim

Updated jpegoptim packages fix security vulnerability

python-flask-restx

Updated python-flask-restx packages fix security vulnerability

python-certifi

Updated python-certifi packages fix security vulnerability

firefox, firefox-l10n, libwebp

Updated firefox packages fix security vulnerability

ceph

Updated ceph packages fix security vulnerability

tomcat

Updated tomcat packages fix security vulnerability

golang

Updated golang packages fix security vulnerability

davmail

Updated davmail packages fix security vulnerability

org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability

org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro Eval Injection vulnerability

Data leak through deleted documents

Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro

org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins

calibreweb

Improper Restriction of Excessive Authentication Attempts in calibreweb

alextselegidis/easyappointments

alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting

calibreweb

Weak Password Requirements in calibreweb

alextselegidis/easyappointments

alextselegidis/easyappointments Session Fixation vulnerability

alextselegidis/easyappointments

alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting

alextselegidis/easyappointments

alextselegidis/easyappointments Improper Access Control vulnerability

org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro

URL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore

Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm

org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability

org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability

libredwg

Segv on unknown address in dwg_ref_get_object

moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal