java-11-openjdk security update

An update is available for java-11-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-11-openjdk packages provide the OpenJDK 11 Java Runtime...

java-17-openjdk security and bug fix update

An update is available for java-17-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...

.NET 6.0 bug fix update

An update is available for dotnet6.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

.NET 6.0 bug fix update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

CVE-2023-30265

CLTPHP =6.0 is vulnerable to Directory Traversal...

CVE-2023-2269

creationtimestamp| type| source ---|---|--- 2023-04-26 00:25:24+00:00| seen| https://t.me/cibsecurity/62863...

Cross-site Scripting (XSS)

Overview Jellyfin.Common is an a Free Software Media System that puts you in control of managing and streaming your media. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper escape of device id in raw HTML, which can be used to make arbitrary calls to the...

CVE-2023-26099

creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:42+00:00| seen| https://t.me/cibsecurity/62749...

CVE-2023-31059

creationtimestamp| type| source ---|---|--- 2023-04-24 07:14:02+00:00| seen| https://t.me/cibsecurity/62676 2023-04-24 07:14:03+00:00| seen| https://t.me/cibsecurity/62677 2025-04-20 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-04-20 2026-04-10 00:00:00+00:00| see...

CVE-2022-45080

creationtimestamp| type| source ---|---|--- 2023-04-23 16:33:28+00:00| seen| https://t.me/cibsecurity/62670...

CVE-2023-30621

creationtimestamp| type| source ---|---|--- 2023-04-22 00:32:06+00:00| seen| https://t.me/cibsecurity/62638...

CVE-2023-2141

creationtimestamp| type| source ---|---|--- 2023-04-21 20:31:46+00:00| seen| https://t.me/cibsecurity/62625 2023-06-07 14:02:04+00:00| seen| https://t.me/truesecator/4473...

CVE-2023-28328

creationtimestamp| type| source ---|---|--- 2023-04-20 02:30:22+00:00| seen| https://t.me/cibsecurity/62490 2023-11-15 16:53:03+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5977...

OpenJDK: certificate validation issue in TLS session negotiation (8298310)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

CVE-2023-29413

creationtimestamp| type| source ---|---|--- 2023-04-19 00:29:43+00:00| seen| https://t.me/cibsecurity/62399 2023-04-25 17:40:06+00:00| seen| https://t.me/truesecator/4321...

CVE-2023-2160

creationtimestamp| type| source ---|---|--- 2023-04-18 20:29:12+00:00| seen| https://t.me/cibsecurity/62362 2024-01-26 15:59:54+00:00| seen| https://t.me/arpsyndicate/2996...

CVE-2023-21931

...

Remote Code Execution (RCE)

org.apache.linkis:linkis-common is vulnerable to Remote Code Execution RCE. Lack of proper checking of supplied zip paths in ZipUtils.scala allows an attacker to upload and execute malicious code on the system...

Important: kernel-livepatch-5.10.162-141.675

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

CVE-2023-29201 org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability

XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1, only escaped and -tags but neither attributes that can be used to inject scripts nor other dangerous HTML tags like . ...