Open Source Vulnerabilities

tomcat9, tomcat9, tomcat9

tomcat9, tomcat9

vim, vim, vim

vim security update

XSS in examples web application

apache2

apache2 regression

php74, php74

Security update for php74

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

Security update for mariadb

salt, salt, salt, salt, salt, salt

Security update for salt

xen, xen, xen, xen, xen, xen

Security update for xen

rsshub

Denial of Service (DoS) vulnerability in RSSHub

DoS vulnerability: Invalid Accent Colors

xstream

Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

ghostscript

Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

microweber/microweber

Cross-site Scripting in Microweber

org.apache.sling:org.apache.sling.commons.log, org.apache.sling:org.apache.sling.api

Log Injection in Apache Sling Commons Log and Apache Sling API

directus

Server-Side Request Forgery in Directus

request-tracker4

request-tracker4 - security update

Out-of-bounds Read in vim/vim

Buffer Over-read in vim/vim

Heap-based Buffer Overflow in vim/vim

nvflare

Unsafe yaml deserialization in NVFlare

nvflare

Unsafe deserialisation in the PKI implementation scheme of NVFlare

tor, tor, tor, tor

Security update for tor

pimcore/pimcore

Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore

Openlibrary - Stored XSS

shopware/shopware

Authenticated Stored Cross-site Scripting in Shopware

rulex

Uncontrolled Recursion in rulex

Openlibrary - Reflected XSS

directus - SSRF which leads to internal port scan

Newtonsoft.Json

Improper Handling of Exceptional Conditions in Newtonsoft.Json

,

log injection in Sling logging

squid3, squid, squid

squid, squid3 vulnerability