Category Archives: Advisories

DSA-5303 thunderbird – security update

December 16, 2022

Read Time:6 Second

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code or information disclosure.

Advisories

DSA-5302 chromium – security update

December 16, 2022

Read Time:7 Second

Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.

Advisories

CVE-2020-20588

December 15, 2022

Read Time:9 Second

File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.

Advisories

CVE-2020-20589

December 15, 2022

Read Time:8 Second

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

Advisories

CVE-2020-21219

December 15, 2022

Read Time:13 Second

Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acme_certificate_edit.php page of the ACME package.

Advisories

CVE-2020-24855

December 15, 2022

Read Time:6 Second

Directory Traversal vulnerability in easywebpack-cli before 4.5.2 allows attackers to obtain sensitive information via crafted GET request.

Advisories

CVE-2020-36607

December 15, 2022

Read Time:8 Second

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

Advisories

CVE-2021-33420

December 15, 2022

Read Time:8 Second

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object.

Advisories