CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2

CVE-2022-40320 affecting package libconfuse for versions less than 3.3-2. A patched version of the package is available...

CVE-2015-2987 affecting package ed for versions less than 1.20-1

CVE-2015-2987 affecting package ed for versions less than 1.20-1. A patched version of the package is available...

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2. A patched version of the package is available...

CVE-2023-44487 affecting package opa for versions less than 0.50.2-6

CVE-2023-44487 affecting package opa for versions less than 0.50.2-6. A patched version of the package is available...

CVE-2023-39325 affecting package golang for versions less than 1.20.7-2

CVE-2023-39325 affecting package golang for versions less than 1.20.7-2. A patched version of the package is available...

CVE-2023-29409 affecting package golang for versions less than 1.20.7-1

CVE-2023-29409 affecting package golang for versions less than 1.20.7-1. A patched version of the package is available...

CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24332 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2022-4515 affecting package ctags for versions less than 6.1.0-1

CVE-2022-4515 affecting package ctags for versions less than 6.1.0-1. A patched version of the package is available...

CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2

CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2. A patched version of the package is available...

CVE-2022-48285 affecting package mozjs for versions less than 102.15.1-1

CVE-2022-48285 affecting package mozjs for versions less than 102.15.1-1. A patched version of the package is available...

CVE-2021-4158 affecting package qemu for versions less than 6.2.0-18

CVE-2021-4158 affecting package qemu for versions less than 6.2.0-18. A patched version of the package is available...

CVE-2013-4342 affecting package xinetd for versions less than 2.3.15-14

CVE-2013-4342 affecting package xinetd for versions less than 2.3.15-14. A patched version of the package is available...

CVE-2017-17969 affecting package p7zip for versions less than 16.02-23

CVE-2017-17969 affecting package p7zip for versions less than 16.02-23. A patched version of the package is available...

Cross-Site Request Forgery in Apache Wicket

An error in the evaluation of the fetch metadata headers could allow a bypass of the CSRF protection in Apache Wicket. This issue affects Apache Wicket: from 9.1.0 through 9.16.0, and the milestone releases for the 10.0 series. Apache Wicket 8.x does not support CSRF protection via the fetch...

PYSEC-2024-179

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

PYSEC-2024-179

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

CVE-2024-28855 ZITADEL vulnerable to improper HTML sanitization

ZITADEL, open source authentication management software, uses Go templates to render the login UI. Due to a improper use of the text/template instead of the html/template package, the Login UI did not sanitize input parameters prior to versions 2.47.3, 2.46.1, 2.45.1, 2.44.3, 2.43.9, 2.42.15, and...

CVE-2024-28248

CVE-2024-28248 affects Cilium before patches: HTTP policies in versions prior to 1.13.13, 1.14.8, and 1.15.2 were not consistently applied, causing HTTP traffic to be incorrectly forwarded instead of being dropped. The issue is mitigated by upgrading to 1.13.13, 1.14.8, or 1.15.2. No exploitation...

CVE-2024-23333 LAM vulnerable to Authenticated Remote Code Execution

LDAP Account Manager LAM is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log files. Prior to version 8.7, an attacker could exploit this by creating a PHP file and cause LAM to log some PHP code to this file. When th...