Open Source Vulnerabilities

tinyxml, tinyxml, tinyxml

tinyxml, tinyxml, tinyxml, tinyxml

linux-oracle

linux-oracle vulnerabilities

linux-lowlatency-hwe-5.15, linux-lowlatency

linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities

xwayland, xwayland

Security update for xwayland

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

xwayland, xwayland

Security update for xwayland

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

linux-hwe-6.2, linux-lowlatency-hwe-6.2, linux-nvidia-6.2

linux-hwe-6.2, linux-lowlatency-hwe-6.2, linux-nvidia-6.2 vulnerabilities

nautobot, nautobot

Unauthenticated db-file-storage views

meraki

Improper validation in meraki

quiche

Unbounded queuing of path validation messages in cloudflare-quiche

sap-xssec

Improper Privilege Management in sap-xssec

github.com/sap/cloud-security-client-go

Improper Privilege Management in github.com/sap/cloud-security-client-go

com.sap.cloud.security:java-security, com.sap.cloud.security:java-security, com.sap.cloud.security:spring-security, com.sap.cloud.security:spring-security, com.sap.cloud.security.xsuaa:spring-xsuaa, com.sap.cloud.security.xsuaa:spring-xsuaa

Improper JWT Signature Validation in SAP Security Services Library

wasmer-cli

Wasmer filesystem sandbox not enforced

phenx/php-svg-lib

Denial of service caused by infinite recursion when parsing SVG document

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Stored XSS via SVG File Upload

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Brute force exploit can be used to collect valid usernames

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Privilege Escalation using Spoofing

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Using the directory back payload (“/../”) in a package name allows placement of package in other folders.

Umbraco.CMS, Umbraco.CMS

DOM-XSS on Backoffice login screen.

xorg-server, xorg-server, xwayland

xorg-server, xwayland vulnerabilities

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Backoffice User can bypass "Publish" restriction

vyper

incorrect storage layout for contracts containing large arrays

Umbraco.CMS, Umbraco.CMS, Umbraco.CMS

Possible injection of HTML into user invite mails

kernel-default, kernel-default, kgraft-patch-SLE12-SP5_Update_51, kernel-docs, kernel-obs-build, kernel-default, kernel-source, kernel-syms, kernel-default, kernel-source, kernel-syms, kernel-default

Security update for the Linux Kernel