Tag
#debian
Open WebUI version 0.1.105 suffers from a persistent cross site scripting vulnerability.
Debian Linux Security Advisory 5740-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, the bypass of sandbox restrictions or an information leak.
Debian Linux Security Advisory 5739-1 - user able to escalate to the netdev group can load arbitrary shared object files in the context of the wpa_supplicant process running as root.
Covid-19 Directory on Vaccination System version 1.0 suffers from an ignored default credential vulnerability.
Computer Laboratory Management System version 1.0 suffers from an ignored default credential vulnerability.
Debian Linux Security Advisory 5737-1 - If LibreOffice failed to validate a signed macro, it displayed a warning but still allowed execution of the script after printing a warning. Going forward in high macro security mode such macros are now disabled.
Linux DRM has drm_file_update_pid() call to get_pid() too late, which creates a race condition that can lead to use-after-free issue of a struct pid.
Debian Linux Security Advisory 5736-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of Java sandbox restrictions.
AccPack Khanepani version 1.0 suffers from an insecure direct object reference vulnerability.