new packages: google-droid-fonts

An update is available for google-droid-fonts. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: qt5-qtdeclarative

An update is available for qt5-qtdeclarative. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: python-psutil

An update is available for python-psutil. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

GHSA-PW5C-XQF2-6XC2 Doctrine Security Misconfiguration Vulnerability

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local...

Malicious code in assets-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05a4834f0fdf1d1525506291927bb9813a912ee5ac8f61ddacbb11e4b2932b23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1142 Malicious code in assets-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05a4834f0fdf1d1525506291927bb9813a912ee5ac8f61ddacbb11e4b2932b23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1823 Malicious code in cap-common-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 954caac36d992b5cdce1a85a0430ce34d611445215299bec5e095248a1797338 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cap-common-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 954caac36d992b5cdce1a85a0430ce34d611445215299bec5e095248a1797338 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29622

An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are...

GHSA-2JVJ-MHF2-G99W SilverStripe CSV Excel Macro Injection

In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software including Microsoft Excel. For example, the CSV data may contai...

PHPOffice Common Improper Restriction of XML External Entity Reference

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...

GHSA-2853-HF2G-9843 PHPOffice Common Improper Restriction of XML External Entity Reference

XMLReader.php in PHPOffice Common before 0.2.9 allows XXE...

CVE-2022-29383

creationtimestamp| type| source ---|---|--- 2022-05-13 16:27:50+00:00| seen| https://t.me/cibsecurity/42637 2022-05-15 19:21:39+00:00| published-proof-of-concept| https://t.me/cKure/9528 2022-07-04 20:35:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6007 2025-01-26...

CVE-2017-1000170

creationtimestamp| type| source ---|---|--- 2022-05-13 01:11:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-p739-9479-5wr2 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-11-14 00:00:00+00:00| seen| The Shadowserver...

CVE-2022-30000

creationtimestamp| type| source ---|---|--- 2022-05-12 20:42:13+00:00| seen| https://t.me/cibsecurity/42526...

CVE-2021-0126

creationtimestamp| type| source ---|---|--- 2022-05-12 20:36:17+00:00| seen| https://t.me/cibsecurity/42512...

CVE-2021-36613

creationtimestamp| type| source ---|---|--- 2022-05-11 22:34:39+00:00| seen| https://t.me/cibsecurity/42417...

CVE-2021-28290

creationtimestamp| type| source ---|---|--- 2022-05-11 22:34:37+00:00| seen| https://t.me/cibsecurity/42415...

CVE-2022-28234

creationtimestamp| type| source ---|---|--- 2022-05-11 22:34:23+00:00| seen| https://t.me/cibsecurity/42404...

CVE-2022-22975

An issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider resources. An attack would involve the malicious user changing the common name CN of their user entry on the LDAP or AD server to include special characters, which could be used ...