Open Source Vulnerabilities

symfony/symfony, symfony/symfony, symfony/symfony, symfony/http-kernel, symfony/http-kernel, symfony/http-kernel

Symfony Vulnerable to PHP Eval Injection

ceph-deploy

ceph-deploy allows local users to obtain sensitive information by reading the file

swift

OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser

phpmyadmin/phpmyadmin

phpMyAdmin Improper Input Validation

yiisoft/yii2

Yii Framework Cross-site Scripting Vulnerability

dolibarr/dolibarr

Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability

django

Django allows user sessions hijacking via an empty string in the session key

concrete5/concrete5

concrete5 vulnerable to Cross-site Scripting

radicale

Radicale regex metacharacters injection in the user name

swift, swift

OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

radicale

Radicale vulnerable to arbitrary file read or write

org.elasticsearch:elasticsearch

Elasticsearch Improper Access Control vulnerability

org.restlet.jse:org.restlet

Restlet Arbitrary Java Code Execution via a serialized object

org.springframework:spring, org.springframework:spring

Improper Control of Generation of Code ('Code Injection') in Spring Framework

glance

OpenStack Glance Bypass the storage quota and Denial of service

org.apache.struts:struts2-core, org.apache.struts:struts2-rest-plugin

Code injection in Apache Struts

org.restlet.jse:org.restlet

Restlet is vulnerable to Arbitrary Java Code Execution via crafted XML

ipsilon, ipsilon

Ipsilon denial of service by deleting a SAML2 Service Provider (SP)

notebook, ipython

Improper Input Validation in Jupyter Notebook

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin allows remote attackers to spoof content via the url parameter

django, django, django

Django settings leak in date template filter

symfony/symfony, symfony/symfony, symfony/form, symfony/form, symfony/form, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/symfony

Symfony Vulnerable to Timing Attack

org.jruby:jruby

Ruby vulnerable to denial of service

org.apache.activemq:activemq-broker, org.apache.activemq:activemq-jaas

Improper Input Validation in Apache ActiveMQ

sup, sup

Sup Code Injection vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin cross-site scripting Vulnerability in Table or Column Names

django, django, django

Django WSGI Header Spoofing Vulnerability

django, django

Django database denial-of-service with ModelMultipleChoiceField

django, django, django

Django DoS in django.views.static.serve

django, django, django

Django Cross-site Scripting Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin ReCaptcha bypass

keystonemiddleware, python-keystoneclient

OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks

horizon

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

zendframework/zendframework, zendframework/zendframework, zendframework/zendframework1, zendframework/zendxml, zendframework/zendframework

ZendXml and Zend Framework contain XXE and XEE Vulnerabilities

django, django

Denial-of-service possibility in logout() view by filling session store

cinder

OpenStack Cinder file disclosure in image convert

org.apache.struts:struts2-core

Open redirect in Apache Struts

org.glassfish:javax.faces

Path Traversal in Eclipse Mojarra

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value

joomla/joomla-cms

Joomla! Cross-site Scripting vulnerability

friendsoftypo3/openid, friendsoftypo3/openid, friendsoftypo3/openid, friendsoftypo3/openid

TYPO3 OpenID extension Open redirect vulnerability

symfony/http-kernel, symfony/http-kernel, symfony/http-kernel, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/http-kernel

Symfony Incorrect Access Control

glance

OpenStack Glance Denial of service by creating a large number of images

glance

OpenStack Glance Denial of service by creating a large number of images

django, django, django

Django Vulnerable to MySQL Injection

django, django, django

Code Injection in Django

django, django, django

Django Reuses Cached CSRF Token

django, django, django, django

Django Vulnerable to Cache Poisoning

james-heinrich/getid3

getID3 is vulnerable to XML External Entity (XXE)