Category: Advisories

A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction. Read More

FEDORA-2022-c4ec706488 Packages in this update: xen-4.16.1-5.fc36 Update description: Linux disk/nic frontends data leaks [XSA-403, CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-3374] Read More

FEDORA-2022-42c54e9e5f Packages in this update: php-laminas-diactoros2-2.12.0-1.fc36 Update description: Version 2.12.0 Bug 99: Merge release 2.11.3 into 2.12.x thanks to @github-actions[bot] 92: Fix typo in property...

JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issue affects: JFrog JFrog Artifactory...

JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one of the XHR parameters in Users REST API...

FEDORA-2022-2af658b090 Packages in this update: subversion-1.14.2-5.fc36 Update description: This update includes the latest stable release of Apache Subversion, version 1.14.2. This update addresses two security...

FEDORA-2022-13cc09ecf2 Packages in this update: subversion-1.14.2-5.fc35 Update description: This update includes the latest stable release of Apache Subversion, version 1.14.2. This update addresses two security...

FEDORA-2022-ec0491574d Packages in this update: php-8.1.8-1.fc36 Update description: PHP version 8.1.8 (07 Jul 2022) Core: Fixed bug GH-8338 (Intel CET is disabled unintentionally). (Chen, Hu)...

This vulnerability allows local attackers to escalate privileges on affected installations of xhyve. An attacker must first obtain the ability to execute high-privileged code on...

This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities. Read More