The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file
postgresql-jdbc-42.3.1-4.fc36
Security fix for CVE-2022-31197
postgresql-jdbc-42.2.26-1.fc35
Security fix for CVE-2022-31197.
firefox-105.0.1-1.fc35
Update to latest upstream (105.0.1)
firefox-105.0.1-1.fc37
Update to latest upstream (105.0.1)
firefox-105.0.1-1.fc36
Update to latest upstream (105.0.1)
This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
This vulnerability allows local attackers to escalate privileges on affected installations of Measuresoft ScadaPro Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
libdxfrw-1.1.0-0.1.rc1.fc35
librecad-2.2.0-0.15.rc4.fc35
Update to 2.2.0 RC4.
Update librecad to 2.2.0 rc3. Apply fixes to libdxfrw and librecad for CVE-2021-45341, CVE-2021-45342, CVE-2021-45343. This also resolves the issue where some dwg files no longer opened.
