Open Source Vulnerabilities

Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload

httpcomponents-client, httpcomponents-client, httpcomponents-client, httpcomponents-client

httpcomponents-client vulnerability

libjpeg-turbo, libjpeg-turbo

libjpeg-turbo vulnerabilities

gdk-pixbuf

gdk-pixbuf vulnerability

phpliteadmin, phpliteadmin

phpliteadmin vulnerability

roundcube, roundcube, roundcube, roundcube

roundcube vulnerabilities

ghostscript

Heap-use-after-free in FT_Stream_ReadULong

ghostscript

Heap-buffer-overflow in pdfi_load_font

xstream

Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-oem-5.17

unzip

unzip - security update

gnutls28

gnutls28 - security update

exim4, exim4, exim4

exim4, exim4, exim4, exim4

crash, crash

Security update for crash

tauri

`tauri`'s `readDir` endpoint allows possible enumeration outside of filesystem scope

open62541

Heap-use-after-free in UA_Server_networkCallback

mruby

Heap-buffer-overflow in udiv

jackson-databind

Security exception in com.fasterxml.jackson.databind.node.ArrayNode.serialize

libarchive

Heap-use-after-free in archive_read_data

chromium

chromium - security update

libtirpc

libtirpc - security update

exim4, exim4, exim4

exim4

trivy, trivy

Security update for trivy

kernel-linus

Updated kernel-linus packages fix security vulnerabilities

kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

caddy, caddy

Security update for caddy

@ckeditor/ckeditor5-markdown-gfm, @ckeditor/ckeditor5-html-support, @ckeditor/ckeditor5-html-embed

CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process

drupal/core, drupal/core

Drupal core arbitrary PHP code execution

streamlit

Streamlit directory traversal vulnerability

org.postgresql:postgresql, org.postgresql:postgresql, org.postgresql:postgresql

PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names

org.dspace:dspace-api, org.dspace:dspace-api

DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import