Open Source Vulnerabilities

org.apache.jspwiki:jspwiki-war, org.apache.jspwiki:jspwiki-main

Cross-site Scripting in Apache JSPWiki

homeassistant

Home Assistant information disclosure vulnerability

pagekit/pagekit

Pagekit User enumeration

drupal/core, drupal/core, drupal/core, drupal/drupal, drupal/drupal, drupal/drupal

Drupal Cross Site Scripting (XSS) vulnerability

org.gradle:gradle-core

Use of a weak cryptographic algorithm in Gradle

pimcore/pimcore

Pimcore RCE via PHAR upload

pimcore/pimcore

Pimcore Unrestricted Upload of File with Dangerous Type

org.jenkins-ci.plugins:aqua-serverless

Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields

org.jenkins-ci.plugins:script-security

Sandbox bypass vulnerability in Jenkins Script Security Plugin

org.jenkins-ci.plugins:build-environment

Jenkins Build Environment Plugin vulnerable to Cross-site Scripting

org.jenkins-ci.plugins:beaker-builder

Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials

org.jenkins-ci.plugins:dashboard-view

Jenkins Dashboard View Plugin vulnerable to Cross-site Scripting

org.jenkins-ci.plugins:script-security

Sandbox bypass vulnerability in Jenkins Script Security Plugin

org.jenkins-ci.plugins:script-security

Sandbox bypass vulnerability in Jenkins Script Security Plugin

org.jenkins-ci.plugins:script-security

Sandbox bypass vulnerability in Script Security Plugin

org.jenkins-ci.plugins:git-client

Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin

lmdb

py-lmdb Divide by Zero interruptions

lmdb

py-lmdb Invalid write operation

lmdb

py-lmdb Invalid write operation

lmdb

LMDB invalid write

limesurvey/limesurvey

Cross-site Scripting in LimeSurvey

github.com/gophish/gophish

Gophish XSS Vulnerability

limesurvey/limesurvey

Cross-site Scripting in LimeSurvey

com.liferay:com.liferay.journal.taglib

Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

librenms/librenms

LibreNMS Information Disclosure

total4

Total.js CMS Path Traversal

total4

Total.js CMS Unauthorized Access

total4

Total.js CMS RCE Vulnerability

cosenary/instagram

Cosenary Instagram-PHP-API contains reflected XSS vulnerability

org.mule.runtime:mule

Mule modules contain Directory Traversal

k8s.io/client-go, k8s.io/kubernetes

Kubernetes client-go library logs may disclose credentials to unauthorized users

k8s.io/apiextensions-apiserver, k8s.io/apiextensions-apiserver, k8s.io/apiextensions-apiserver

Kubernetes kube-apiserver unauthorized access

os-vif, os-vif

OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning

com.hcl.security:ibm-application-security

Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Neutralization of Input During Web Page Generation in Jenkins

com.splunk.splunkins:splunk-devops

Jenkins Splunk Plugin Sandbox Bypass

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-Site Request Forgery in Jenkins

bedita/bedita

BEdita vulnerable to SQL injection

org.ohdsi:WebAPI

OHDSI WebAPI vulnerable to SQL Injection

spoon/library

Spoon Library as used in Fork CMS allows PHP object injection

kevinpapst/kimai2

Kimai v2 is vulnerable to Cross-Site Scripting (XSS)

bolt/bolt

Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log

elastic-apm

Elastic APM agent for Python client CGI proxy redirection flaw

mantisbt/mantisbt

MantisBT allows cross-site scripting (XSS) via crafted filename

ehang.io/nps

cnlh nps vulnerable to file overwrite by local user

dolibarr/dolibarr

Dolibarr Cross-Site Request Forgery (CSRF)

golang.org/x/net

golang.org/x/net/http vulnerable to a reset flood

golang.org/x/net

golang.org/x/net/http vulnerable to ping floods

istio.io/istio, istio.io/istio

Istio ReDoS Vulnerability

github.com/hashicorp/nomad

Hashicorp Nomad Access Control Issues