Ubuntu Security Notice 6307-1 - It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. An attacker could use this to cause a denial of service or might expose sensitive information.
0fe1a24114e00e5ae9f25a559d718911b8f95a69aeb879b5dabc16383b1d3100
Ubuntu Security Notice 6306-1 - It was discovered that Fast DDS incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service and information exposure. This issue only affected Ubuntu 22.04 LTS. It was discovered that Fast DDS incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash.
8112de7e7bb9012f06bcecc49b76cc664db02b07546a4635fbe0104870bd0e76
Debian Linux Security Advisory 5482-1 - Edbo and Cedric Krier discovered that the Tryton application server does enforce record rules when only reading fields without an SQL type.
db39b6059e17e6fbce67ad1fed139ed2bab834101ae55fcd954cc2f780332cf1
Business Directory Script version 3.2 suffers from a remote SQL injection vulnerability.
70beafbc3bc77ef2706b657991478e81d839a8727871b92bc885284db5f7ddbd
Gusto Recipes Management version 1.5.1 suffers from an ignored default credential vulnerability.
32d7aefee98e0a012396d1b6b1d374bc146494b7a53c02640c0c74560f4f3f38
Groupoffice version 3.4.21 suffers from a directory traversal vulnerability.
af3ae7eb776652fc303d2525606aca9ffb8fe19c67d2388b4d47c78078badb01
Grawlix CMS version 1.1.1 suffers from a cross site scripting vulnerability.
8ad66853091e8bbea73a95ba47f340da0444431f040779c2e81229c7c52c689d
Gravigra CMS version 1.0 suffers from a remote SQL injection vulnerability.
d63c15d485ec65c19a876c0bd313c19bbd8cdc74e8c552260439c2f5f53d42b7
Global Domains International version 2.0 suffers from an html injection vulnerability.
fb087830fc216043aff6e7499d4513b206b06bfd2260f51fa2875744afbab21b
GetSimple CMS version 3.3.2 suffers from a cross site scripting vulnerability.
248bf69c42979908312c5a15b7db76779a02426a5c3d039f534bf1298482142c
G and G Corporate CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
0f3b11f5ba0b3acc1637cac9aaef798d7b9bfc9ed225d72b67b0aaec9d20ea43