[SECURITY] Fedora 34 Update: gnote-40~rc-1.fc34

Gnote is a desktop note-taking application which is simple and easy to use. It lets you organize your notes intelligently by allowing you to easily link ideas together with Wiki style interconnects. It is a port of Tomboy to C++ and consumes fewer resources...

[SECURITY] Fedora 34 Update: plasma-oxygen-5.21.3-1.fc34

Plasma and Qt widget style and window decorations for Plasma 5 and KDE 4...

[SECURITY] Fedora 34 Update: plasma-breeze-5.21.3-1.fc34

Artwork, styles and assets for the Breeze visual style for the Plasma Deskt op...

Fedora: Security Advisory for qqc2-breeze-style (FEDORA-2021-85c9774673)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Prototype Pollution

style-dictionary is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

Prototype Pollution

Overview style-dictionary is a Style once, use everywhere. A build system for creating cross-platform styles. Affected versions of this package are vulnerable to Prototype Pollution. PoC const StyleDictionary = require'style-dictionary'; const obj = ; let opts =...

@fluentui/token-pipeline (>=0.3.3, <=0.22.0), @inmotionnow/momentum-components (>=8.2.2-next.2, <=102.37.5) +7 more potentially affected by unknown CVE via style-dictionary (>=2.5.0, <=2.10.2)

style-dictionary NPM version =2.5.0, =0.3.3, =8.2.2-next.2, =1.0.2, =0.1.0, =0.0.2, =1.0.0, =8.1.3, =6.0.0, =8.2.2-next.2 Source cves: unknown CVE Source advisory: SNYK:JS-STYLEDICTIONARY-1080632...

WordPress Style Kits plugin <= 1.8.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by NintechNet in WordPress Style Kits plugin versions = 1.8.0. Solution Update the WordPress Style Kits plugin to the latest available version at least 1.8.1...

Virginia Data Privacy Law

Virginia is about to get a data privacy law, modeled on Californias law...

Fedora 32 : roundcubemail (2021-aef54ec149)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-aef54ec149 advisory. - Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets CSS token sequences during HTML email rendering. CVE-2021-26925 Note that...

CVE-2021-26925

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets CSS token sequences during HTML email rendering...

CVE-2021-26925

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets CSS token sequences during HTML email rendering...

Design/Logic Flaw

Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets CSS token sequences during HTML email rendering...

PT-2021-17180 · Roundcube +1 · Roundcube +1

Name of the Vulnerable Software and Affected Versions: Roundcube versions prior to 1.4.11 Description: The issue allows for an XSS attack through crafted Cascading Style Sheets CSS token sequences during the rendering of HTML email. This can occur when an attacker sends a specially designed email...

Contact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Due to the lack of sanitization and lack of nonce protection on the custom CSS feature, an attacker could craft a request to inject malicious JavaScript on a site using the plugin. If an attacker successfully tricked a site’s administrator into clicking a link or attachment, then the request coul...

PYSEC-2021-865

In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with stripcomments=False...

The vulnerability of the Mozilla Firefox browser, related to the use of memory after its release, allows a hacker to trigger a service failure.

The vulnerability of the Mozilla Firefox browser is related to the use of a memory area after it is freed during the manipulation of CSS floating elements. Exploiting this vulnerability can allow an attacker who operates remotely to cause a service failure...

CVE-2021-26267

cPanel before 92.0.9 allows a MySQL user who has an old-style password hash to bypass suspension SEC-579...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0153-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

SUSE SLED15 / SLES15 Security Update : wavpack (SUSE-SU-2021:0186-1)

This update for wavpack fixes the following issues : Update to version 5.4.0 - CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 - fixed: disable A32 asm code when building for Apple silicon - fixed: issues with Adobe-style floating-point WAV files - added:...