CVE-2023-31484 affecting package perl for versions less than 5.34.1-489

CVE-2023-31484 affecting package perl for versions less than 5.34.1-489. A patched version of the package is available...

CVE-2022-41717 affecting package gh for versions less than 2.13.0-2

CVE-2022-41717 affecting package gh for versions less than 2.13.0-2. A patched version of the package is available...

CVE-2022-39301 sra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload

sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting XSS vulnerability. After logging into the sra-admin background, an attacker can upload an html page containing xss attack code in "Personal Center" ...

CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

CVE-2022-40307 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-40307 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

CVE-2022-2905 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-2905 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

CVE-2022-1016 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-1016 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

CVE-2022-1882 affecting package kernel for versions less than 5.15.70.1-1

CVE-2022-1882 affecting package kernel for versions less than 5.15.70.1-1. A patched version of the package is available...

CVE-2022-39227 affecting package python-jwt for versions less than 2.4.0-2

CVE-2022-39227 affecting package python-jwt for versions less than 2.4.0-2. A patched version of the package is available...

CVE-2022-2873 affecting package kernel 5.10.144.1-1

CVE-2022-2873 affecting package kernel 5.10.144.1-1. A patched version of the package is available...

CVE-2022-33743 affecting package kernel 5.10.144.1-1

CVE-2022-33743 affecting package kernel 5.10.144.1-1. A patched version of the package is available...

CVE-2022-2991 affecting package kernel 5.10.144.1-1

CVE-2022-2991 affecting package kernel 5.10.144.1-1. A patched version of the package is available...

CVE-2022-39842 affecting package kernel 5.10.144.1-1

CVE-2022-39842 affecting package kernel 5.10.144.1-1. A patched version of the package is available...

CVE-2022-2785 affecting package kernel 5.10.144.1-1

CVE-2022-2785 affecting package kernel 5.10.144.1-1. A patched version of the package is available...

CVE-2022-2953 affecting package libtiff 4.4.0-2

CVE-2022-2953 affecting package libtiff 4.4.0-2. A patched version of the package is available...

CVE-2021-3975 affecting package libvirt 6.1.0-5

CVE-2021-3975 affecting package libvirt 6.1.0-5. A patched version of the package is available...

WordPress JReviews premium plugin <= 4.1.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by CraCkEr in WordPress JReviews premium plugin versions = 4.1.5. Solution No patched version is available...

CVE-2022-35944 October CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution)

October is a self-hosted Content Management System CMS platform based on the Laravel PHP Framework. This vulnerability only affects installations that rely on the safe mode restriction, commonly used when providing public access to the admin panel. Assuming an attacker has access to the admin pan...

CVE-2022-39302 Ree6 may bypass webhook protection

Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Audit-Logging" which contain a channel from another server as a target. This would mean you could send log messages to another Guild channel and bypass raid and webhook protection...

RUSTSEC-2022-0087 Slack Webhooks secrets leak in debug logs

Debug log formatting made it possible to leak Webhooks secrets into debug logs. The patched version has introduced more strict checks to avoid this...