Open Source Vulnerabilities
upydev
upydev has weak encryption padding
next-auth
Possible user mocking that bypasses basic authentication
next-auth
Possible user mocking that bypasses basic authentication
Ability to DoS the testing infrastructure by overwriting files
Ability to DoS the testing infrastructure by overwriting files
Book Stack v23.10.2 - LFR via Blind SSRF
strapi-plugin-protected-populate
Bypass of field access control in strapi-plugin-protected-populate
strapi-plugin-protected-populate
Bypass of field access control in strapi-plugin-protected-populate
org.xwiki.contrib:xwiki-application-admintools
Cross-Site Request Forgery with QueryOnXWiki allows arbitrary database queries
org.xwiki.contrib:xwiki-application-admintools
Cross-Site Request Forgery with QueryOnXWiki allows arbitrary database queries
org.xwiki.contrib:xwiki-application-admintools
Run Shell Command allows Cross-Site Request Forgery
org.xwiki.contrib:xwiki-application-admintools
Run Shell Command allows Cross-Site Request Forgery
org.xwiki.platform:xwiki-platform-search-solr-query, org.xwiki.platform:xwiki-platform-search-solr-query
Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service
org.xwiki.platform:xwiki-platform-search-solr-query/ org.xwiki.platform:xwiki-platform-search-solr-query
Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service
org.xwiki.platform:xwiki-platform-diff-xml, org.xwiki.platform:xwiki-platform-diff-xml, org.xwiki.platform:xwiki-platform-diff-xml
Cookies are sent to external images in rendered diff (and server side request forgery)
org.xwiki.platform:xwiki-platform-diff-xml/ org.xwiki.platform:xwiki-platform-diff-xml/ org.xwiki.platform:xwiki-platform-diff-xml
Cookies are sent to external images in rendered diff (and server side request forgery)
ucode-intel, ucode-intel
Security update for ucode-intel
