Moderate Photon OS Security Update - PHSA-2024-5.0-0193

Updates of 'Linux-PAM' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-0190

Updates of 'nss' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-5.0-0187

Updates of 'linux', 'linux-rt', 'linux-esx', 'python3-cryptography', 'libssh', 'linux-secure', 'python3-paramiko' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-5.0-0182

Updates of 'gnutls', 'shadow' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0181

Updates of 'openssh' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0180

Updates of 'powershell' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0178

Updates of 'tar' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0177

Updates of 'rust' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0176

Updates of 'go', 'vim' packages of Photon OS have been released...

CVE-2023-51052

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Aformauth parameter at /admin/ajax.php...

Low Photon OS Security Update - PHSA-2023-5.0-0175

Updates of 'redis' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0167

Updates of 'haproxy', 'gstreamer' packages of Photon OS have been released...

QNAP QTS XSS Vulnerability (QSA-23-40)

QNAP QTS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

Important Photon OS Security Update - PHSA-2023-5.0-0165

Updates of 'e2fsprogs' packages of Photon OS have been released...

CVE-2023-48208

A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, pluginsmsapikey, pluginsmscountrycode, uuid, title, or country name parameter to index.php...

Design/Logic Flaw

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

CVE-2023-48207

Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component...

CVE-2023-48831

A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion...

CVE-2023-48208

CVE-2023-48208 concerns PHPJabbers Availability Booking Calendar v5.0. A stored Cross Site Scripting vulnerability exists in index.php that allows injecting JavaScript via the following parameters: name, plugin_sms_api_key, plugin_sms_country_code, uuid, title, or country name. This is the concre...

CVE-2023-48825

CVE-2023-48825 affects PHPJabbers Availability Booking Calendar 5.0. The issue is multiple HTML (XSS) injections via the SMS API Key and Default Country Code fields in the SMS Settings panel, caused by insufficient input validation. Exploitation in the wild would allow an attacker to inject HTML/...