Open Source Vulnerabilities

dolibarr/dolibarr

Dolibarr ERP and CRM SQLi

laravel/laravel, illuminate/auth, illuminate/auth, laravel/framework, laravel/framework

Laravel does not properly constrain the host portion of a password-reset URL

org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common

Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation

nilsteampassnet/teampass

TeamPass SQL injection in users.queries.php

zendframework/zendframework

Zend Framework CSRF Vulnerability

org.apache.xmlrpc:xmlrpc-common

ws-xmlrpc DoS Vulnerability

org.apache.nifi:nifi, org.apache.nifi:nifi

Origin Validation Error in Apache NiFi

org.apache.nifi:nifi, org.apache.nifi:nifi

Cross-site Scripting in Apache NiFi

dolibarr/dolibarr

Dolibarr ERP and CRM Unsafe File Upload Vulnerability

pillow

PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

pygments

Command Injection in Pygments

mercurial

Mercurial vulnerable to arbitrary code execution when converting Git repos

adodb/adodb-php

ADOdb Cross-site scripting vulnerability in old test script

phpmyadmin/phpmyadmin

phpMyAdmin cookie-attribute injection

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Code Injection vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site Scripting (XSS)

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Local file exposure through symlinks with UploadDir

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Local file exposure

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin allows to detect if user is logged in

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Authentication Bypass

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Reflected File Download attack

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Denial of service (DOS) attack with dbase extension

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Remote code execution vulnerability when PHP is running with dbase extension

org.springframework.data:spring-data-jpa, org.springframework.data:spring-data-jpa

Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA

adodb/adodb-php

ADOdb Library SQL Injection

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Cryptographic Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin path disclosure

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Bypass logout timeout

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Bypass white-list protection for URL redirection

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Denial of Service (DoS)

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin CSRF Vulnerability

org.opendaylight.odlparent:opendaylight-karaf-resources

Opendaylight will authenticate any username and password combination

NewRelic.Agent

New Relic .NET Agent contains SQL Injection

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

mantisbt/mantisbt, mantisbt/mantisbt, mantisbt/mantisbt

MantisBT vulnerable to CSRF and Open Redirect attacks

Microsoft.ChakraCore

ChakraCore information disclosure vulnerability

mantisbt/mantisbt

MantisBT XSS via my_view_page.php and view_user_page.php

moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

moodle/moodle

Moodle Global search displays user names for unauthenticated users

moodle/moodle, moodle/moodle

Moodle XSS in attachments to evidence of prior learning

drupal/core, drupal/drupal

Drupal Cross-Site Request Forgery (CSRF)