OPENSUSE-SU-2024:11169-1 php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12384-1 php8-8.1.11-1.1 on GA media

These are all security issues fixed in the php8-8.1.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12711-1 php8-8.1.16-1.1 on GA media

These are all security issues fixed in the php8-8.1.16-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13153-1 php8-8.2.9-1.1 on GA media

These are all security issues fixed in the php8-8.2.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12601-1 php8-8.1.14-1.1 on GA media

These are all security issues fixed in the php8-8.1.14-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11170-1 php8-pear-1.10.21-1.2 on GA media

These are all security issues fixed in the php8-pear-1.10.21-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE SLES12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2024:2027-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2027-1 advisory. - CVE-2024-5458: Fixed an issue that allows to bypass filters in filtervar FILTERVALIDATEURL. bsc1226073 Tenable has extracted the preceding...

SUSE-SU-2024:2027-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2024-5458: Fixed an issue that allows to bypass filters in filtervar FILTERVALIDATEURL. bsc1226073...

Fedora 39 : roundcubemail (2024-a591b4dc74)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a591b4dc74 advisory. Release 1.6.7 - Makefile: Use phpDocumentor v3.4 for the Framework docs 9313 - Fix bug where HTML entities in URLs were not decoded on HTML to plain text...

Fedora 40 : roundcubemail (2024-680b8ba54e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-680b8ba54e advisory. Release 1.6.7 - Makefile: Use phpDocumentor v3.4 for the Framework docs 9313 - Fix bug where HTML entities in URLs were not decoded on HTML to plain text...

openSUSE Security Advisory (SUSE-SU-2024:1446-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1446-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure bsc1222857 - CVE-2024-3096: Fixed bypass on null byte leading passwords checked via passwordverify bsc1222858...

openSUSE: Security Advisory for php8 (SUSE-SU-2023:0074-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for php8 (SUSE-SU-2022:3198-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2023:0345-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0332 Updated roundcubemail packages fix XSS security vulnerabilities

Updated roundcubemail package fixes security vulnerabilities: Fix cross-site scripting XSS vulnerability in setting Content-Type/ Content-Disposition for attachment preview/download CVE-2023-47272 Fix cross-site scripting XSS vulnerability in handling of SVG in HTML messages. CVE-2023-5631 Some...

CVE-2023-29009

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

Design/Logic Flaw

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

CVE-2023-29009 basercms XSS Vulnerability via Favorites Feature

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...

CVE-2023-29009 basercms XSS Vulnerability via Favorites Feature

baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This issue has been patched in version 4.8.0...