Open Source Vulnerabilities

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in adherents/subscription/info.php

dolibarr/dolibarr

Dolibarr sensitive information disclosure

forkcms/forkcms

Fork CMS XSS via Highlight Parameter

forkcms/forkcms

Fork CMS XSS Vulnerability

passbolt/passbolt_api

Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar

dolibarr/dolibarr

Dolibarr ERP and CRM contain XSS Vulnerability

phpbb/phpbb

phpBB Server-Side Request Forgery (SSRF)

github.com/syncthing/syncthing

Syncthing vulnerable to symlink traversal and arbitrary file overwrite

lavalite/cms

Stored XSS in LavaLite 5.2.4

shiba

Shiba vulnerable to XSS leading to code execution

cobbler

Cobbler vulnerable to arbitrary code execution

quickapps/cms

QuickApps CMS Cross-site Scripting

products-cmfplone, products-cmfplone, products-cmfplone, plone, plone

Products.CMFPlone XSS in profile home_page property

desperado/xml-bundle

XXE Vulnerability in XMLBundle 0.1.7

ezsystems/ezpublish-legacy, ezsystems/ezpublish-legacy

eZ Publish Cross-site Scripting (XSS) vulnerability

django, django

Django Vulnerable to Cache Poisoning

django, django

Django Might Allow CSRF Requests via URL Verification

sqlalchemy

SQLAlchemy vulnerable to SQL injection

products-cmfplone, products-cmfplone, products-cmfplone, plone, plone

Products.CMFPlone Open Redirect Vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability

shopware/shopware

Shopware XSS Vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability

VladTheEnterprising

VladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file

numpy

Arbitrary file write in NumPy

codders-dataset

codders-dataset Process Table Local Plaintext Credential Disclosure

backup-agoddard, backup_checksum

backup-agoddard and backup_checksum have Information Exposure vulnerability

VladTheEnterprising

VladTheEnterprising allows local users to write to arbitrary files via a symlink attack

kajam

kajam allows local users to obtain sensitive information by listing the process

point-cli

point-cli allows local users to obtain sensitive information by listing the process

lean-ruport

lean-ruport allows local users to obtain sensitive information by listing the process

edu.vt.middleware:vt-ldap, edu.internet2.middleware:shibboleth-identityprovider

Improper Certificate Validation in vt-ldap

Microsoft.AspNetCore.All, Microsoft.AspNetCore.Mvc.Core

Open redirect in ASP.NET Core

org.apache.geode:geode-core

Apache Geode gfsh authorization vulnerability

org.apache.geode:geode-core

Apache Geode OQL bind parameter vulnerability

magento/community-edition, magento/community-edition

Magento Cross-Site Request Forgery (CSRF)

org.apache.sling:org.apache.sling.xss, org.apache.sling:org.apache.sling.xss.compat

Cross-site Scripting in Apache Sling XSS Protection API

smarty/smarty

Smarty PHP code injection

werkzeug

Pallets Werkzeug cross-site scripting vulnerability

org.apache.sling:org.apache.sling.jcr.contentloader

Apache Sling JCR ContentLoader XmlReader Arbitrary File Load

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Privilege escalation in quiz web services

org.apache.guacamole:guacamole-common

Apache Guacamole Race Condition vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

org.jvnet.hudson.plugins:pmd

XXE vulnerability in Jenkins PMD Plugin

org.jvnet.hudson.plugins:checkstyle

XXE vulnerability in Jenkins Checkstyle Plugin

org.jvnet.hudson.plugins:dry

XXE vulnerability in Jenkins DRY Plugin

org.jvnet.hudson.plugins.findbugs:library

XML External Entity Reference in Jenkins FindBugs Plugin