Open Source Vulnerabilities

XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form

XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list

XWiki Cross-Site Request Forgery (CSRF) for actions on tags

XWiki Platform Web Parent POM vulnerable to XSS in the attachment history

rdiffweb

linux-raspi-5.4

linux-raspi-5.4 vulnerabilities

linux-raspi

linux-raspi vulnerabilities

Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb

rsync

Fixed CVE-2022-29154 in rsync

rsync

Fixed CVE-2022-29154 in rsync

rsync

Fix CVE(s): CVE-2022-29154

rsync, rsync-daemon

Fixed CVE-2022-29154 in rsync

XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard

rsync, rsync-daemon

Fixed CVE-2022-29154 in rsync

XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action

rsync, rsync-daemon

Fixed CVE-2022-29154 in rsync

XWiki Platform Web Templates vulnerable to Missing Authorization and Exposure of Private Personal Information to an Unauthorized Actor

vim, vim, vim

vim

CVE-2022-3153 affecting package vim for versions less than 9.0.0490-1

vim

org.xwiki.platform:xwiki-platform-oldcore Improper Authorization check for inactive users

rubygem-rake

Security update for rubygem-rake

OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions

linux-sgx, linux-sgx, linux-sgx

linux-sgx security update

intel-sgx-ssl, intel-sgx-ssl, intel-sgx-ssl

intel-sgx-ssl security update

rpm, rpm, rpm

rpm security update

libnl3, libnl3, libnl3

Security update for libnl3

libnl-1_1, libnl-1_1, libnl-1_1

Security update for libnl-1_1

Cross-site Scripting (XSS) - Generic in jgraph/drawio

Cross-site Scripting (XSS) - Generic in jgraph/drawio

yast2-samba-provision, yast2-samba-provision

Security update for yast2-samba-provision

php8-pear

Security update for php8-pear

nodejs16

Security update for nodejs16