Open Source Vulnerabilities

Rhdh: catalog-import function leaks credentials to frontend

spip, spip

spip, spip, spip, spip

qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine

chromium, chromium, chromium

qt5-qtwebengine, qt5-qtwebengine, qt5-qtwebengine, qt5-qtwebengine, qt5-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine

chromium, chromium, chromium

qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine

chromium, chromium, chromium

qt5-qtwebengine, qt5-qtwebengine, qt5-qtwebengine, qt5-qtwebengine, qt5-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine, qt6-qtwebengine

chromium, chromium, chromium

checkstyle

Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

icu

Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

exim4, exim4

exim4 - security update

asterisk

asterisk - security update

netatalk

netatalk - security update

chromium, chromium

chromium - security update

gratient

gratient 0.5 contains credential harvesting code

github.com/hashicorp/vault

Denial of service via memory exhaustion in github.com/hashicorp/vault

Ion Java StackOverflow vulnerability

Froxlor username/surname AND company field Bypass

Glitch detection not active by default in Silicon Labs Secure Vault High devices

com.amazon.ion:ion-java, software.amazon.ion:ion-java

Ion Java StackOverflow vulnerability

craftcms/cms, craftcms/cms

Craft CMS Privilege Escalation

prestashop/prestashop

PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)

evm

Rust EVM erroneousle handles `record_external_operation` error return

omniauth-microsoft_graph

Omniauth::MicrosoftGraph Account takeover (nOAuth)

github.com/vapor/vapor

Vapor contains an integer overflow in URI leading to potential host spoofing