PUB-A-223230190

Bulletin has no description...

ASB-A-238227328

Summary:...

ASB-A-228101796

Bulletin has no description...

ASB-A-238227323

Summary:...

CVE-2022-1405

CVE-2022-1405 affects Delta Electronics CNCSoft: all versions prior to 1.01.32 are vulnerable to a stack-based buffer overflow caused by improper input sanitization when processing a specific project file. Impact is described as high for confidentiality, integrity, and availability (CVSS v3.1 bas...

GHSA-325V-G5VX-WHXC LibreNMS vulnerable to Cross-Site Scripting (XSS)

LibreNMS version 22.6.0 was discovered to contain a cross-site scripting XSS vulnerability via the component oxidized-cfg-check.inc.php...

DLA-3089-1 php-horde-mime-viewer - security update

Bulletin has no description...

DLA-3088-1 net-snmp - security update

Bulletin has no description...

PYSEC-2022-43134

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

CVE-2022-2787

Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session...

DSA-5219-1 webkit2gtk - security update

Bulletin has no description...

CVE-2020-27799

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

Keycloak vulnerable to Improper Certificate Validation

keycloak accepts an expired certificate by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity. This issue was partially fixed in version 13.0.1 and more completely fixed in version 14.0.0...

CVE-2022-2965 Improper Restriction of Rendered UI Layers or Frames in notrinos/notrinoserp

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7...

CVE-2022-37223

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...

Path Traversal

gravitee-gateway-core is vulnerable to path traversal. The vulnerability exists due to the lack of dynamic routing checks in the selectUserDefinedEndpoint function of TargetEndpointResolver.java, allowing an attacker to read arbitrary files outside the expected directory via a...

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

MAL-2022-6744 Malicious code in uglpti9f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5708a7125d246cbcfa82d8f0b5ce76a91aab70187c166c079cc4a0560ec7e07d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6219 Malicious code in source-ap-loadper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c64fb7bcacaa0461053677e4841fec7a6863289b2d9b0e98e106d8acfab883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4359 Malicious code in lodash.isstgrng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f50f2c79db7fe5aea1e947df08491dd654c6d5c32ab035ca9f2a270839b024bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...