Ubuntu Security Notice 6354-1 - It was discovered that Python did not properly handle XML entity declarations in plist files. An attacker could possibly use this vulnerability to perform an XML External Entity injection, resulting in a denial of service or information disclosure.
55bae84a27165496e4c61f96e67a29907c9b0b2752c81b4e650223bf8ebf69c7
Debian Linux Security Advisory 5491-1 - Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
3a6cfcbdc911ffcc1d3db52f8089b5fad3df27b575010e4f29577ea3ede1e7d0
TECHView LA5570 Wireless Gateway version 1.0.19_T53 suffers from directory traversal, privilege escalation, and information disclosure vulnerabilities.
d1257e7bf2cdf6fd21b1cc76b8960cbdf567e1b24499e73c14da1c1903331e35
Remote disconnect exploit for AtlasVPN Linux client version 1.0.3 that will allow a remote website to extract a client's real IP address.
c22b568ca47d98ca9a5a328dfea2c54acf630205d9141efd30804e6c4fe23e1f
DLINK DPH-400SE version FRU2.2.15.8 suffers from an information disclosure vulnerability.
e04c693b7f9f2fc627223d12d2bb72ef8540956fc844b65711e66b98c9fb70bb
PlayTube version 3.0.1 suffers from an information leakage vulnerability.
6634c359fbe26d15c6168d3a3cc4055c0d3b3c5bc2b752d4130d644d141485be
i-Gallery version 3.4 suffers from a database disclosure vulnerability.
4b8a837753cf89aafb9402b3feaaf42295a6b6cdf0c9c587a99043708662b845
Human Resource PMS version 1.4 suffers from a database disclosure vulnerability.
57bdfb1d2e047a7027d3da9cb5073ca412afeb4304b018eb24ff2852b5d4c72a
Debian Linux Security Advisory 5483-1 - Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
ebed94ee6ac4cac7ece2b82c3d9d5e59c2c4c1abfcc4c95b864d91e9024c2f1b
Geeklog version 2.1.0b1 suffers from a database disclosure vulnerability.
e1960968a2002ca2ef10cf0d61448826dadf202337748e60da850b30c8698b71
Forma LMS version 1.4 suffers from a database disclosure vulnerability.
4ac4e0bad7d2a5dab1dbea6491156c0298d7d086895c6fd5cb2f8db0445100b9
FixBook Repair Shop Management Tool version 3.0 suffers from an information leakage vulnerability.
ddf7722992f5b066e8c74b71a59d38b69d0979349c7731ee3ad21f220ae825b3
FixBook Repair Shop Management Tool version 2.2 suffers from an information leakage vulnerability.
cca9cd6b4f15f93c2ce4de83d177d9b79dd893c5d9b8597cc907d88aab5d43ef
DoorGets CMS version 12 suffers from an information leakage vulnerability.
1979fc108f5ff900725da4d3f94060a8f67d69123005ed02143164fae6fc34f9
E-mailer Newsletter and Mailing System with Analytics + GEO location version 1.16 suffers from an information leakage vulnerability.
de698923ad14bb1bc258b0c0a5c562b59f67f25cf050cd857b5e718f2838903d
Fara Melk Estate CMS version 1.5.0 suffers from an information leakage vulnerability.
4af12b7169ce378353d4cf96d1c4969efdc42f2c001caa9c8366ef3c2c37e915
DoorGets CMS version 7.0 suffers from an information leakage vulnerability.
e4dd4e13f6683cf82c0e69a415af646d4525941805e5d02a2a2a1438821ec8e2
Debian Linux Security Advisory 5479-1 - Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
aee0f620a740c7ebf8d3a5388c4cb2acee86d35cf2761c6423c720350e0a280f
Debian Linux Security Advisory 5478-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in bypass of sandbox restrictions, information disclosure, reduced cryptographic strength of the AES implementation, directory traversal or denial of service.
1abbda9face35cc55de373d200a91797c0b8a6083da1289cd62ef92eff8eca01
ExcessWeb and Network CMS version 4.0 suffers from a database disclosure vulnerability.
3804ccc9e62f4f0b3d7f7e5d2646a5827031767b52189c5bfbdb8fee5663b88f
Erim Upload version 4 suffers from a database disclosure vulnerability.
0a5d9f97ad99a2e396c97011db6206b01062091d026186ae3e3e5346edff23b4
Debian Linux Security Advisory 5477-1 - Several vulnerabilities have been discovered in Samba, which could result in information disclosure, denial of service or insufficient enforcement of security-relevant config directives.
af91853d8e5f0024764f5543a8b80895c57747aa8c34de789911957203c66602
eLitius version 1.0 appears to leave backups in a world accessible directory under the document root.
37a6ad9ab40e37e23d7cbfe01ee9334c417b3339776c4691b7ae872e89ddb896
BookingWizz version 6.0.1 suffers from an information leakage vulnerability.
14dc808fba0c29bec381b92941a79a68db7e7dccd2b66351dfa0ae504f014329
Debian Linux Security Advisory 5475-1 - Daniel Moghimi discovered Gather Data Sampling (GDS), a hardware vulnerability for Intel CPUs which allows unprivileged speculative access to data which was previously stored in vector registers. This mitigation requires updated CPU microcode provided in the intel-microcode package. Daniel Trujillo, Johannes Wikner and Kaveh Razavi discovered INCEPTION, also known as Speculative Return Stack Overflow (SRSO), a transient execution attack that leaks arbitrary data on all AMD Zen CPUs. An attacker can mis-train the CPU BTB to predict non-architectural CALL instructions in kernel space and use this to control the speculative target of a subsequent kernel RET, potentially leading to information disclosure via a speculative side-channel.
95ac8bf618237ec9a9702db5e01782fb41ac590afd3c1d06d81109f4cc731eeb