Category: Advisories

The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class. Read More

The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An...

In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings,...

SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. Read More

SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. Read More

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. Read More

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. Read More

SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. Read More

FEDORA-EPEL-2022-cf82fb137a Packages in this update: clamav-0.103.6-1.el7 Update description: https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html Read More

FEDORA-EPEL-2022-334a36ba83 Packages in this update: clamav-0.103.6-1.el8 Update description: https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html Read More