Open Source Vulnerabilities

WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)

WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability

opera

Security update for opera

opera

Security update for opera

python-django-grappelli, python-django-grappelli

Security update for python-django-grappelli

org.apache.cocoon:cocoon

Apache Cocoon SQL Injection vulnerability

org.apache.dolphinscheduler:dolphinscheduler-api, org.apache.dolphinscheduler:dolphinscheduler-common, org.apache.dolphinscheduler:dolphinscheduler-dao, org.apache.dolphinscheduler:dolphinscheduler-service

Apache DolphinScheduler Missing Authorization vulnerability

microweber/microweber

Microweber file upload vulnerability

sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3, sqlite3

Security update for sqlite3

Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for

python-aiohttp, python-aiohttp, python-aiohttp

aiohttp

python-aiohttp, python-aiohttp

mailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulation

nexkey allows arbitrary users to impersonate any remote user due to missing signature validation

aiohttp's ClientSession is vulnerable to CRLF injection via version

Pimcore missing token/header to prevent CSRF

Validation of SignedInfo

Symbolicator Server Side Request Forgery vulnerability

ZITADEL vulnerable account takeover via malicious host header injection

vlc

vlc - security update

gimp-dds

gimp-dds - security update

libde265

libde265 - security update

zbar

zbar - security update

tar, tar, tar, tar, tar

thunderbird

thunderbird - security update

chromium, chromium

chromium - security update