Category: Advisories

A vulnerability has been discovered in specific WSO2 products, which could allow for remote code execution. WSO2 is an open-source technology provider. It offers an...

FEDORA-2022-17787e290f Packages in this update: recutils-1.9-1.fc36 Update description: New upstream release (#2075962, #2047809, #2047807, #2047805, #2046941) Use %%gpgverify macro Remove recutils-shared-lib-calls-exit.patch Install rec-mode.el from a...

FEDORA-2022-4e6bd7ca62 Packages in this update: recutils-1.9-1.fc35 Update description: New upstream release (#2075962, #2047809, #2047807, #2047805, #2046941) Use %%gpgverify macro Remove recutils-shared-lib-calls-exit.patch Install rec-mode.el from a...

USN-5376-1 fixed vulnerabilities in Git, some patches were missing to properly fix the issue. This update fixes the problem. Original advisory details: 俞晨东 discovered that...

Douglas Mendizábal discovered that Barbican incorrectly handled access restrictions. An authenticated attacker could possibly use this issue to consume protected resources and possibly cause a...

The Advanced Page Visit Counter WordPress plugin through 5.0.8 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art...

The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the...

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue Read...

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request,...

The DW Question & Answer Pro WordPress plugin through 1.3.4 does not properly check for CSRF in some of its functions, allowing attackers to make...