Open Source Vulnerabilities

Concrete CMS version 9 before 9.2.5 vulnerable to stored XSS via the Role Name field

org.apache.solr:solr-solrj-streaming, org.apache.solr:solr-solrj-streaming, org.apache.solr:solr-solrj, org.apache.solr:solr-solrj

Apache Solr's Streaming Expressions allow users to extract data from other Solr Clouds

org.apache.solr:solr-core, org.apache.solr:solr-core

Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8

Mattermost vulnerable to denial of service via large number of emoji reactions

org.apache.solr:solr-core, org.apache.solr:solr-core

Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies

org.apache.solr:solr-core, org.apache.solr:solr-core

Apache Solr Schema Designer blindly "trusts" all configsets

lucene-solr, lucene-solr, lucene-solr

lucene-solr, lucene-solr, lucene-solr

lucene-solr, lucene-solr, lucene-solr

lucene-solr, lucene-solr, lucene-solr

lucene-solr, lucene-solr, lucene-solr, lucene-solr, lucene-solr, lucene-solr, lucene-solr, lucene-solr, lucene-solr

lucene-solr

lucene-solr

lucene-solr

,

Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords

,

Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users

,

Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions

,

Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

commonground-api-common, vng-api-common, vng-api-common-utrecht

commonground-api-common unexploitable privilege escalation in JWT authentication middleware

pqc_kyber

pqc_kyber KyberSlash: division timings depending on secrets

serde-json-wasm, serde-json-wasm

serde-json-wasm stack overflow during recursive JSON parsing

suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key, suse-build-key

Security update for suse-build-key

containerized-data-importer, containerized-data-importer, containerized-data-importer

Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

kubevirt, kubevirt, kubevirt

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8

Mattermost fails to check the required permissions

github.com/mattermost/mattermost-plugin-jira

Mattermost Jira Plugin does not properly check security levels

github.com/mattermost/mattermost-plugin-jira

Mattermost Jira Plugin vulnerable to Cross-Site Request Forgery

pkg

Pkg Local Privilege Escalation

io.micronaut:micronaut-http-server, io.micronaut:micronaut-http-server-netty, io.micronaut:micronaut-http-server-tck

Micronaut management endpoints vulnerable to drive-by localhost attack

imlib2, imlib2, imlib2

imlib2, imlib2, imlib2

imlib2, imlib2, imlib2

hugin, hugin, hugin

hugin, hugin, hugin

hugin, hugin, hugin

hugin, hugin, hugin

imlib2, imlib2, imlib2, imlib2, imlib2, imlib2, imlib2, imlib2, imlib2

imlib2, imlib2, imlib2, imlib2, imlib2, imlib2, imlib2, imlib2, imlib2

hugin, hugin, hugin, hugin, hugin, hugin, hugin

hugin, hugin, hugin, hugin, hugin, hugin, hugin

hugin, hugin, hugin, hugin, hugin, hugin, hugin

hugin, hugin, hugin, hugin, hugin, hugin, hugin

imlib2, imlib2, imlib2, imlib2, imlib2