Open Source Vulnerabilities

org.apache.struts:struts2-parent

Apache Struts RCE Vulnerability

simplesamlphp/simplesamlphp

SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module

dolibarr/dolibarr

Dolibarr SQL injection vulnerability

pagekit/pagekit

Pagekit Stored Cross-site Scripting

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin server-side request forgery (SSRF)

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Denial of service (DOS) attack in transformation feature

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin PHP code injection

org.jenkins-ci.plugins:git

Server-Side Request Forgery in Jenkins Git Plugin

org.jvnet.hudson.plugins:groovy-postbuild

Jenkins Groovy Postbuild Plugin vulnerable to Cross-site Scripting

org.jenkins-ci.plugins:ghprb

Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability

org.jenkins-ci.plugins:github-branch-source

Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery

org.jenkins-ci.plugins:cas-plugin

Jenkins CAS Plugin Server-Side Request Forgery vulnerability

com.coravy.hudson.plugins.github:github

Jenkins GitHub Plugin server-side request forgery vulnerability exists

org.csanchez.jenkins.plugins:kubernetes

Exposure of Sensitive Information in Jenkins Kubernetes Plugin

com.coravy.hudson.plugins.github:github

Jenkins GitHub Plugin exposure of sensitive information vulnerability exists

com.blackducksoftware.integration:blackduck-hub

Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin

org.jenkins-ci.ruby-plugins:gitlab-hook

Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text

com.blackducksoftware.integration:blackduck-hub

XML External Entity processing vulnerability in Jenkins Black Duck Hub Plugin

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Neutralization of Input During Web Page Generation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token

jcbrand/converse.js, converse.js

Converse.js Exposure of Sensitive Information

org.owasp:dependency-check-maven

Path Traversal in OWASP Dependency-Check

nzedb/nzedb

nZEDb Cross-site Scripting (XSS) in the 404 error page

net.bull.javamelody:javamelody-core

Cross-site Scripting in JavaMelody

symfony/security-core, symfony/security-core, symfony/security-core, symfony/security-core, symfony/security, symfony/security, symfony/security, symfony/security, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Authentication Bypass

ptheofan/yii2-statemachine

Yii2-StateMachine extension for Yii2 XSS Vulnerability

symfony/security-core, symfony/security-core, symfony/security, symfony/security, symfony/symfony, symfony/symfony

Symfony Authentication Bypass

oauth2orize-fprm

oauth2orize-fprm XSS vulnerability

codeigniter/framework

CodeIgniter Session Fixation Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in product/card.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in product/card.php

knowledge-repo

Airbnb Knowledge Repo XSS In Comments

joomla/joomla-cms

Joomla! vulnerable to Cross-site Scripting

joomla/joomla-cms

Joomla! vulnerable to Cross-site Scripting

django-tastypie

Django Tastypie Improper Deserialization of YAML Data

ember-source, ember-source, ember-source, ember-source, ember-source

Ember.js Cross-site Scripting vulnerability

tlslite

tlslite remote denial of service vulnerability

salt

Salt vulnerable to Improper Certificate Validation

aubio

Aubio is vulnerable to a NULL pointer dereference

org.jenkins-ci.plugins:ssh-credentials, org.jenkins-ci.plugins:credentials

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin

org.jenkins-ci.plugins:saml

Jenkins SAML Plugin Session Fixation vulnerability

joplin

Joplin Vulnerable to Cross-site Scripting in Note Content

net.opentsdb:opentsdb

OpenTSDB Cross-site Scripting vulnerability

net.opentsdb:opentsdb

OpenTSDB Cross-site Scripting vulnerability

baserproject/basercms, baserproject/basercms

Sensitive Data Exposure in baserCMS

baserproject/basercms, baserproject/basercms

XSS in baserCMS

baserproject/basercms, baserproject/basercms

XSS in baserCMS

baserproject/basercms, baserproject/basercms

OS Command Injection in baserCMS