Category: Advisories

FEDORA-2022-a6b383aab1 Packages in this update: chafa-1.10.3-1.fc37 Update description: Automatic update for chafa-1.10.3-1.fc37. Changelog * Fri May 6 2022 Miro Hrončok <mhroncok@redhat.com> - 1.10.3-1 - Update...

The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class. Read More

The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An...

In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings,...

SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. Read More

SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. Read More

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. Read More

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. Read More

SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. Read More

FEDORA-EPEL-2022-cf82fb137a Packages in this update: clamav-0.103.6-1.el7 Update description: https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html Read More