[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-115.16.1-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For more informatio...

Important: Red Hat Bug Fix Advisory: Updated rhel9/firefox-flatpak container image

An updated rhel9/firefox-flatpak container image is now available in the Red Hat container registry. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Flatpak is a system for running graphical applications as containers. Installing an...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Admidio code issue vulnerabilities

Admidio is an open source member management system from the Admidio team. The system supports features such as member lists, event management, guestbooks, photo albums and downloads. A code issue vulnerability exists in versions prior to Admidio 4.3.12 that stems from the presence of an insecure...

Rancher security vulnerabilities

Rancher is an open source container management platform from Rancher Open Source in the United States, built for organizations that deploy containers in production environments. A security vulnerability exists in Rancher that stems from an incorrect elevation of privilege check that could lead to...

RDS Light security vulnerability

RDS Light is an artificial intelligence framework open-sourced by RDS ai. A security vulnerability exists in RDS Light versions prior to 1.1.0 that stems from a lack of input validation. An attacker exploiting this vulnerability could inject malicious commands, corrupt stored data, or affect API...

CVE-2024-48782

A file upload vulnerability exists in DYCMS Open-Source Version v2.0.9.41 , where the application only validates image file extensions on the front-end. This allows a remote attacker to upload files and achieve arbitrary code execution . To mitigate this risk, it is recommended to disable the fil...

CVE-2024-48782

File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end...

CVE-2024-48782: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end...

Element security vulnerabilities

Element is a Matrix web collaboration client from Element Open Source. A security vulnerability exists in Element that stems from a vulnerability that could lead to an access token disclosure under certain circumstances...

Itsourcecode Online Tours and Travels Management System security vulnerabilities

itsourcecode Online Tours and Travels Management System is itsourcecode open source an online travel management system . A security vulnerability exists in itsourcecode Online Tours and Travels Management System v1.0, which originates from a SQL injection vulnerability in the val-email parameter ...

PT-2024-33217 · Dycms · Dycms

Name of the Vulnerable Software and Affected Versions: DYCMS Open-Source Version v2.0.9.41 Description: The issue allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end. This weakness lets a remote attacker run any code...

CVE-2024-48782

File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end...

Supply Chain Attacks Can Exploit Entry Points in Python, npm, and Open-Source Ecosystems

Cybersecurity researchers have found that entry points could be abused across multiple programming ecosystems like PyPI, npm, Ruby Gems, NuGet, Dart Pub, and Rust Crates to stage software supply chain attacks. "Attackers can leverage these entry points to execute malicious code when specific...

Enalean Tuleap security vulnerabilities

Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. A security vulnerability exists in Enalean Tuleap. An attacker exploiting the vulnerability could view tracker names that they should not ha...

Enalean Tuleap security vulnerabilities

Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. A security vulnerability exists in Enalean Tuleap. An attacker exploiting the vulnerability could access sensitive information...

RHEL 8 : grafana (RHSA-2024:8083)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:8083 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: uplot: Prototype...

QileCMS authorization issue vulnerability

QileCMS is an open source community e-commerce system from QileCMS Open Source. An authorization issue vulnerability exists in QileCMS 1.1.3 and earlier versions, which stems from the sendEmail function in file /qilecms/user/controller/Forget.php can lead to weak password recovery...

October CMS Cross-Site Scripting Vulnerability

October CMS is a set of October CMS company based on PHP and Laravel Web application framework for open source content management system CMS. A cross-site scripting vulnerability exists in October CMS version 3.6.30. The vulnerability stems from the application's lack of effective filtering and...