Open Source Vulnerabilities

glance

OpenStack Glance Server-Side Request Forgery (SSRF)

org.apache.ambari:ambari

Apache Ambari reveals administrator passwords

glance

OpenStack Glance Signature Verification Bypass

cryptography

Improper input validation in cryptography

org.apache.ambari:ambari

Apache Ambari Improper Access Control

dweeves/magmi

Magmi XSS Vulnerability

movingbytes/social-network

SocialNetwork Cross-Site Scripting (XSS) vulnerability

capstone

Capstone Integer overflow

genix/cms

GeniXCMS SQL injection vulnerability

org.apache.geode:geode-core

Apache Geode information disclosure vulnerability

org.opendaylight.openflowplugin:openflowplugin

OpenFlow plugin for OpenDaylight allows spoofing the SDN topology

org.opendaylight.openflowplugin:openflowplugin

OpenFlow plugin for OpenDaylight LLDP Relay

org.jboss.resteasy:resteasy-client

JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack

salt

SaltStack has insecure /tmp file handling in salt/modules/chef.py

salt

Salt improper handling of tmp files

nilsteampassnet/teampass

TeamPass vulnerable to SQL Injection

nilsteampassnet/teampass

TeamPass vulnerable to Cross-site Scripting

org.jboss.resteasy:resteasy-client, org.jboss.resteasy:resteasy-client

Improper Neutralization of Input During Web Page Generation in RESTEasy

craftcms/cms

Craft CMS XSS Vulnerability

pillow

Pillow Buffer overflow in Jpeg2KEncode.c

austintoddj/canvas

Canvs Canvas Cross-site Scripting (XSS) via title and content fields

salt

SaltStack Salt Information Exposure

yiisoft/yii2

Yii Framework Reflected XSS

genix/cms

GeniXCMS Cross-site Scripting (XSS)

genix/cms

GeniXCMS SQL Injection

craftcms/cms

Craft CMS XSS Vulnerability

craftcms/cms

Craft CMS subject to URL forgery

genix/cms

GeniXCMS Arbitrary User Password Reset Vulnerability

genix/cms

GeniXCMS Cross-site Scripting (XSS)

genix/cms

GeniXCMS Cross-site Scripting

dolibarr/dolibarr

Dolibarr ERP and CRM contain XSS Vulnerability

dolibarr/dolibarr

Dolibarr ERP and CRM Insecure Encryption

dolibarr/dolibarr

Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter

baserproject/basercms

baserCMS Cross Site Request Forgery vulnerability

baserproject/basercms

CSRF in baserCMS 3.0.10 and earlier

baserproject/basercms

baserCMS Cross-site Scripting vulnerability

org.apache.tomcat:tomcat

Apache Tomcat Allows Replacing of XML Parser

org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Cross-Site Request Forgery (CSRF)

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

modx/revolution

MODX Revolution Reflected XSS

modx/revolution

MODX Revolution allows overwriting .htaccess

modx/revolution

MODX Revolution cross-site scripting vulnerability

modx/revolution

MODX Revolution XSS via HTTP Host header

modx/revolution

MODX Revolution Directory Traversal Vulnerability

opensolutions/vimbadmin

ViMbAdmin Cross-site Scripting Vulnerabilities

admidio/admidio

admidio CSRF Vulnerability

contao/core, contao/core

Contao Core directory traversal vulnerability