Open Source Vulnerabilities

openvpn-monitor

furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client

lief

LIEF heap-buffer-overflow

halibut, halibut, halibut

halibut, halibut, halibut

halibut, halibut, halibut

undertow

,

undertow

undertow, undertow, undertow, undertow, undertow, undertow, undertow

undertow, undertow, undertow, undertow, undertow, undertow, undertow

halibut, halibut, halibut, halibut, halibut, halibut, halibut

halibut, halibut, halibut, halibut, halibut, halibut, halibut

halibut, halibut, halibut, halibut, halibut, halibut, halibut

org.matrix.android:matrix-android-sdk2

Logic error in Matrix SDK for Android

postorius

GNU Mailman Postorius Access Control Issues

apache-airflow

Missing Authentication for Critical Function in Apache Airflow

salt

Improper Authentication in SaltStack Salt

magento/community-edition, magento/community-edition

Magento Information Disclosure vulnerability

magento/community-edition, magento/community-edition, magento/project-community-edition

Magento Improper Authorization vulnerability in the customers module

neutron, neutron, neutron

OpenStack Neutron Denial of Service vulnerability

lxdui

AdaptiveScale LXDUI Hardcoded JWT Secret Key

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento affected by a business logic error in the placeOrder graphql mutation

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento XML Injection vulnerability in the Widgets Update Layout

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento XML Injection vulnerability in the 'City' field

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento has an XML Injection vulnerability

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento is affected by an improper input validation vulnerability

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento is affected by an improper input validation vulnerability while saving a customer's details

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento Path Traversal vulnerability via the `theme[preview_image]` parameter

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento improper authorization vulnerability

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento XML Injection vulnerability in the Widgets Module

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento allows attackers to alter the price of items

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento is affected by an os command injection via the Data collection endpoint

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento discloses sensitive information

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento executes code via the API File Option Upload Extension

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento affected by remote code execution via a file upload

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento vulnerable to file upload attack

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento has a file extension restrictions bypass

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento is affected by an improper authorization vulnerability

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento discloses sensitive information via the Multishipping Module

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento affected by a server-side denial-of-service using a GraphQL field

org.jenkins-ci.plugins:saml

Jenkins SAML Plugin allows bypassing CSRF protection for any URL

io.jenkins.plugins:code-coverage-api

RCE vulnerability in Jenkins Code Coverage API Plugin