Important: Red Hat Security Advisory: libreoffice security update

An update for libreoffice is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

BIT-PARSE-2025-30168 Parse Server has an OAuth login vulnerability

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

[SECURITY] Fedora 41 Update: chromium-134.0.6998.117-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 42 Update: chromium-134.0.6998.117-1.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

OpenEMR security vulnerabilities

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.3.0, which stems...

AquilaCMS Resource Management Vulnerability

AquilaCMS is a complete multipurpose open source CMS from the AquilaCMS team. A security vulnerability exists in AquilaCMS that stems from the possibility of causing a denial of service on the platform...

fprime security vulnerability

fprime is a NASA open source framework for flight software and embedded systems. A security vulnerability exists in fprime v3.4.3, which stems from multiple cross-site scripting vulnerabilities...

ruoyi-vue-pro path traversal vulnerability

ruoyi-vue-pro is the Taro Road source code zhijiantianya open source an optimized refactored efficient backend management system framework for the development of enterprise backend , SaaS platform , WeChat small program backend and so on. ruoyi-vue-pro 2.4.1 version of a security vulnerability ,...

[SECURITY] Fedora 40 Update: chromium-134.0.6998.117-1.fc40

Chromium is an open-source web browser, powered by WebKit Blink...

Number withdrawal

GNOME is the GNOME open source suite of purely free computer software. It is used to provide a graphical desktop environment. This CVE number has been withdrawn...

ruoyi-vue-pro path traversal vulnerability

ruoyi-vue-pro is the Taro Road source code zhijiantianya open source an optimized and refactored efficient back-end management system framework for the development of enterprise back-end , SaaS platforms , WeChat applets back-end and so on. ruoyi-vue-pro 2.4.1 version of a path traversal...

WordPress plugin OSS Upload has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

webERP code injection vulnerability

webERP is an open source inventory and financial management system ERP system by Tim Schofield, an individual developer. The system supports inventory management, rights role management, order management and financial management. A code injection vulnerability exists in webERP 5.0.0.rc+13 and pri...

SourceCodester Employee and Visitor Gate Pass Logging System Security Vulnerabilities

SourceCodester Employee and Visitor Gate Pass Logging System is a simple web-based employee and visitor pass logging system from SourceCodester open source. A security vulnerability exists in version 1.0 of the SourceCodester Employee and Visitor Gate Pass Logging System, which stems from the...

SourceCodester Online Eyewear Shop has a security vulnerability

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL that provides an online shopping and ordering platform for the eyewear business and its potential customers. A security vulnerability exists in SourceCodester Onli...

Number withdrawal

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: oauth2-proxy, distribution, opentelemetry-collector-contrib-fips, azcopy, promxy-fips, flux-notification-controller-fips, azuredisk-csi-fips, kyverno-policy-reporter-ui-fips, cluster-autoscaler, minio-operator, crossplane-provider-azure-sql, tekton-chains,...

RHEL 8 : firefox update (Important) (RHSA-2024:6839)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6839 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. For more details about the...

RHEL 9 : firefox update (Important) (RHSA-2024:6782)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6782 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. For more details about the...

xmedcon: Numerical error vulnerability

xmedcon is an open source toolkit for medical image conversion from xmedcon open source. A numeric error vulnerability exists in xmedcon version 0.25.0, which stems from an integer underflow in the malloc function of the DICOM File Handler component...