php-Smarty-3.1.48-1.fc38
FEDORA-2023-199edf23f0 Packages in this update: php-Smarty-3.1.48-1.fc38 Update description: [3.1.48] - 2023-03-28 Security Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447. Fixed Output...
php-Smarty-3.1.48-1.fc36
FEDORA-2023-7490239652 Packages in this update: php-Smarty-3.1.48-1.fc36 Update description: [3.1.48] - 2023-03-28 Security Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447. Fixed Output...
nodejs16-16.20.0-2.fc37 nodejs18-18.15.0-6.fc37 nodejs20-19.8.1-7.fc37
FEDORA-2023-2edcc2b186 Packages in this update: nodejs16-16.20.0-2.fc37 nodejs18-18.15.0-6.fc37 nodejs20-19.8.1-7.fc37 Update description: Fixes for virtual Provides/Requires of nodejs and nodejs-devel Assorted fixes for v8-devel Update to 19.8.1...
nodejs16-16.20.0-2.fc38 nodejs18-18.15.0-6.fc38 nodejs20-19.8.1-7.fc38
FEDORA-2023-973319d5b7 Packages in this update: nodejs16-16.20.0-2.fc38 nodejs18-18.15.0-6.fc38 nodejs20-19.8.1-7.fc38 Update description: Fixes for virtual Provides/Requires of nodejs and nodejs-devel Assorted fixes for v8-devel Update to 19.8.1...
CVE-2022-36440
A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP...
CVE-2022-38072
An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to...
dnsmasq-2.89-2.fc37
FEDORA-2023-828bf01834 Packages in this update: dnsmasq-2.89-2.fc37 Update description: According to DNS flag day set default packet size to 1232 Read More
dnsmasq-2.89-2.fc38
FEDORA-2023-eeca11a4df Packages in this update: dnsmasq-2.89-2.fc38 Update description: According to DNS flag day set default packet size to 1232 Read More
CVE-2022-38922
BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settings' token using a Time-based blind SLEEP payload....
CVE-2022-38923
BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' field using a Time-based blind SLEEP payload. Read More