PT-2022-23859 · 72Crm · 72Crm

Name of the Vulnerable Software and Affected Versions: 72crm version 9.0 Description: The issue is related to an Arbitrary file upload vulnerability. Recommendations: For 72crm version 9.0, update to a version that contains a fix for this issue...

DLA-3071-1 libtirpc - security update

Bulletin has no description...

DSA-5205-1 samba - security update

Bulletin has no description...

DSA-5201-1 chromium - security update

Bulletin has no description...

DLA-3068-1 xorg-server - security update

Bulletin has no description...

Multiple vulnerabilities in untangle

Overview untangle provided by Christian Stefanescu is a Python library for processing XML documents. untangle contains multiple vulnerabilities listed below. Improper Restriction of Recursive Entity References in DTDs CWE-776 - CVE-2022-33977 Improper Restriction of XML External Entity Reference...

DSA-5189-1 gsasl - security update

Bulletin has no description...

SUSE-SU-2022:2430-1 Security update for nodejs12

This update for nodejs12 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses bsc1201328. - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding bsc1201325. - CVE-2022-32214: Fixed HTTP request smuggling due to...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-2909 Operation restriction bypass in multiple applications CWE-285 - CVE-2022-30602 CyVDB-3042 Information disclosure in multiple applications CWE-200 - CVE-2022-29512 CyVDB-3111 Improper input...

JVN#14077132: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-2909 Operation restriction bypass in multiple applications CWE-285 - CVE-2022-30602 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L| Base Score: 5.4 CVSS v2|...

DLA-3063-1 systemd - security update

Bulletin has no description...

DLA-3059-1 maven-shared-utils - security update

Bulletin has no description...

DLA-3041-1 thunderbird - security update

Bulletin has no description...

DSA-5155-1 wpewebkit - security update

Bulletin has no description...

DLA-3032-1 pngcheck - security update

Bulletin has no description...

DLA-3026-1 filezilla - security update

Bulletin has no description...

DSA-5146-1 puma - security update

Bulletin has no description...

DLA-3016-1 rsyslog - security update

Bulletin has no description...

DLA-3015-1 ark - security update

Bulletin has no description...

Strapi vulnerable to cross-site scripting

Overview Strapi contains a stored cross-site scripting vulnerability CWE-79 in the file upload function. Yuta Morioka of Information Science College reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitra...