Category: Advisories

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the...

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 (com.sina.weibo.sdk.share.WbShareTransActivity), any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity. Read More

Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment. Read More

It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-42392) It...

FEDORA-2022-3012e64f8c Packages in this update: openscad-2021.01-8.fc35 Update description: Security fixes for CVE-2022-0496 and CVE-2022-0497 Read More

FEDORA-2022-1961907229 Packages in this update: openscad-2021.01-8.fc34 Update description: Security fixes for CVE-2022-0496 and CVE-2022-0497 Read More

FEDORA-2022-1cf6eefd62 Packages in this update: openscad-2021.01-8.fc36 Update description: Security fixes for CVE-2022-0496 and CVE-2022-0497 Read More

FEDORA-2022-2e64749f77 Packages in this update: openscad-2021.01-8.fc37 Update description: Automatic update for openscad-2021.01-8.fc37. Changelog * Tue Apr 5 2022 Lumír Balhar <lbalhar@redhat.com> - 2021.01-8 - Security...

Multiple vulnerabilities have been discovered in the Google Android operating system (OS), the most severe of which could allow for remote code execution. Android is...

It was discovered that Waitress incorrectly handled certain requests. An attacker could possibly use this issue to expose sensitive information. Read More