Open Source Vulnerabilities

baserCMS CSRF vulnerability in Content preview Feature

libgudev1, libgudev1-devel, systemd, systemd-devel, systemd-journal-gateway, systemd-libs, systemd-networkd, systemd-python, systemd-resolved, systemd-sysv

systemd: Fix of CVE-2023-26604

baserCMS Directory Traversal vulnerability in Form submission data management Feature

nginx, nginx-all-modules, nginx-filesystem, nginx-mod-http-image-filter, nginx-mod-http-perl, nginx-mod-http-xslt-filter, nginx-mod-mail, nginx-mod-stream

nginx: Fix of CVE-2023-44487

nginx, nginx-all-modules, nginx-filesystem, nginx-mod-http-image-filter, nginx-mod-http-perl, nginx-mod-http-xslt-filter, nginx-mod-mail, nginx-mod-stream

nginx: Fix of CVE-2023-44487

baserCMS Cross-site Scripting vulnerability in File upload Feature

libtomcat9-embed-java, libtomcat9-java, tomcat9, tomcat9-admin, tomcat9-common, tomcat9-docs, tomcat9-examples, tomcat9-user

Fix CVE(s): CVE-2023-44487

libtomcat8-embed-java, libtomcat8-java, tomcat8, tomcat8-admin, tomcat8-common, tomcat8-docs, tomcat8-examples, tomcat8-user

Fix CVE(s): CVE-2023-44487

BigBlueButton Path Traversal – Reading Certain File Extensions

haproxy, haproxy-doc, vim-haproxy

Fix CVE(s): CVE-2023-44487

BigBlueButton Unrestricted File Upload vulnerability

FlyteAdmin SQL Injection in List Filters

kgraft-patch-SLE12-SP5_Update_48

Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

nats-server, nats-server, nats-server

telegraf

CVE-2023-47090 affecting package telegraf for versions less than 1.29.4-1