Ubuntu Security Notice 6307-1 - It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. An attacker could use this to cause a denial of service or might expose sensitive information.
0fe1a24114e00e5ae9f25a559d718911b8f95a69aeb879b5dabc16383b1d3100Ubuntu Security Notice 6306-1 - It was discovered that Fast DDS incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service and information exposure. This issue only affected Ubuntu 22.04 LTS. It was discovered that Fast DDS incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash.
8112de7e7bb9012f06bcecc49b76cc664db02b07546a4635fbe0104870bd0e76Debian Linux Security Advisory 5482-1 - Edbo and Cedric Krier discovered that the Tryton application server does enforce record rules when only reading fields without an SQL type.
db39b6059e17e6fbce67ad1fed139ed2bab834101ae55fcd954cc2f780332cf1Business Directory Script version 3.2 suffers from a remote SQL injection vulnerability.
70beafbc3bc77ef2706b657991478e81d839a8727871b92bc885284db5f7ddbdGusto Recipes Management version 1.5.1 suffers from an ignored default credential vulnerability.
32d7aefee98e0a012396d1b6b1d374bc146494b7a53c02640c0c74560f4f3f38Groupoffice version 3.4.21 suffers from a directory traversal vulnerability.
af3ae7eb776652fc303d2525606aca9ffb8fe19c67d2388b4d47c78078badb01Grawlix CMS version 1.1.1 suffers from a cross site scripting vulnerability.
8ad66853091e8bbea73a95ba47f340da0444431f040779c2e81229c7c52c689dGravigra CMS version 1.0 suffers from a remote SQL injection vulnerability.
d63c15d485ec65c19a876c0bd313c19bbd8cdc74e8c552260439c2f5f53d42b7Global Domains International version 2.0 suffers from an html injection vulnerability.
fb087830fc216043aff6e7499d4513b206b06bfd2260f51fa2875744afbab21bGetSimple CMS version 3.3.2 suffers from a cross site scripting vulnerability.
248bf69c42979908312c5a15b7db76779a02426a5c3d039f534bf1298482142cG and G Corporate CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
0f3b11f5ba0b3acc1637cac9aaef798d7b9bfc9ed225d72b67b0aaec9d20ea43
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed