Category: Advisories

In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting. Read More

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing...

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability in Brocade Fabric OS versions v7.4.1b and v7.3.1d could allow local users to conduct privileged directory transversal. Brocade...

Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an attacker to delete reviews. Read More

Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code. Read More

FEDORA-2022-9cd3e3a570 Packages in this update: rubygem-rails-html-sanitizer-1.4.3-1.fc37 Update description: Automatic update for rubygem-rails-html-sanitizer-1.4.3-1.fc37. Changelog * Fri Aug 5 2022 Vít Ondruch <vondruch@redhat.com> - 1.4.3-1 - Update...

FEDORA-2022-3af7a32fc0 Packages in this update: net-snmp-5.9.3-1.fc36 Update description: New upstream release 5.9.3 Read More

FEDORA-2022-7254ec5e96 Packages in this update: mingw-gdk-pixbuf-2.42.8-1.fc35 Update description: Update to 2.42.8, fixes CVE-2021-46829. Read More

FEDORA-2022-d6faaa50eb Packages in this update: owncloud-client-2.10.1-1.fc35 Update description: Security fix for CVE-2021-44537 Read More

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OPC Foundation UA .NET Standard. Authentication is not required to exploit this...