DLA-2902-1 graphicsmagick - security update

Bulletin has no description...

CVE-2021-41166

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. An issue in versions prior to 3.17.1 may lead to sensitive information disclosure. An unauthorized app that does not have the otherwise required MANAGEDOCUMENTS permission may view image thumbnails...

CVE-2022-0362 SQL Injection in star7th/showdoc

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2021-45343

In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document...

CVE-2021-44988

Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecmafindnamedproperty in ecma-helpers.c...

DLA-2898-1 nss - security update

Bulletin has no description...

Prototype Pollution

cached-path-relative is vulnerable to prototype pollution. The vulnerability exists due to a lack of sanitization for the key types, allowing an attacker to exploit the vulnerability by injecting arbitrary properties into existing construct prototypes and modify attributes such as proto,...

GHSA-J545-FRH3-R9GQ SQL Injection in dolibarr

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

SQL Injection in dolibarr

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

pimcore is vulnerable to SQL Injection

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

CVE-2021-46311

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgdestroyroutes at scenegraph/vrmlroute.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46237

An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46240

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfdumpvrmlsffield at scenemanager/scenedump.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46242

HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5ACunpinentry...

HTML Injection

microweber/microweber is vulnerable to HTML injection. An attacker can inject and execute malicious html content in the webpage as the library does not properly clean the html tags before being rendered on the webpage...

Access Control Bypass

microweber/microweber is vulnerable to access control bypass. The vulnerability that exists in user permissions in apiuser.php file does not perform sufficient user permissions, allowing unauthorized users to access sensitive information...

CVE-2022-0319 Out-of-bounds Read in vim/vim

Out-of-bounds Read in vim/vim prior to 8.2...

CVE-2022-22891

Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...

SUSE-SU-2022:0091-2 Security update for apache2

This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 jscSLE-22733 jscSLE-22849 It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES2.4 for a complete chang...

Remote Code Execution (RCE)

libspf2 is vulnerable to remote code execution. The vulnerability exists in SPFrecordexpanddata in spfexpand.c, allowing an attacker to send a malicious SPF DNS record to cause overflow data...