Open Source Vulnerabilities

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin remote variable manipulation

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin vulnerable to static code injection

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Directory Traversal vulnerability

org.springframework:spring-core, org.springframework.security:spring-security-core, org.springframework.security:spring-security-core

Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data

plone, plone, plone

Plone Open Redirection vulnerability via next parameter

org.glassfish:javax.faces, org.glassfish:javax.faces

Improper Neutralization of Input During Web Page Generation in Mojarra

com.jamonapi:jamon

Improper Neutralization of Input During Web Page Generation in JAMon

apache-libcloud

Libcloud does not properly scrub data when destroying a DigitalOcean node

dompdf/dompdf

DOMPDF Arbitrary File Read

cobbler, cobbler

Cobbler Path Traversal vulnerability

org.apache.syncope:syncope

Apache Syncope uses a weak PNRG

org.elasticsearch:elasticsearch

Cross-site scripting in Elasticsearch

org.apache.struts:struts2-core

Cross-Site Request Forgery in Apache Struts

org.apache.cassandra:apache-cassandra, org.apache.cassandra:apache-cassandra

Improper Neutralization of Special Elements used in a Command in Apache Cassandra

org.elasticsearch:elasticsearch, org.elasticsearch:elasticsearch

Improper Access Control in Elasticsearch

fat_free_crm

Fat Free CRM Cross-Site Request Forgery vulnerability

org.apache.jackrabbit:jackrabbit-core, org.apache.jackrabbit:jackrabbit-core, org.apache.jackrabbit:jackrabbit-core, org.apache.jackrabbit:jackrabbit-core, org.apache.jackrabbit:jackrabbit-core, org.apache.jackrabbit:jackrabbit-core

Improper Input Validation in Apache Jackrabbit

org.opencms:opencms-core

Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters

org.apache.storm:storm

Apache Storm remote code execution vulnerability

org.elasticsearch:elasticsearch

Improper Access Control in Elasticsearch

silverstripe/cms, silverstripe/framework

Silverstripe CMS Open Redirect

typo3/cms, typo3/cms, typo3/cms

TYPO3 cross-site scripting (XSS)

org.elasticsearch:elasticsearch

Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

org.apache.james:james-server

Apache James Server OS Command Injection

symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security

Symfony Session Fixation Vulnerability

cakephp/cakephp

CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter

org.apache.openmeetings:openmeetings-install

Apache OpenMeetings Directory Traversal vulnerability

org.apache.sling:org.apache.sling.servlets.post

Exposure of Sensitive Information to an Unauthorized Actor in Apache Sling Servlets Post

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings allows remote attackers to read arbitrary files by attempting to upload a file

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings Cross-site Scripting vulnerability

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings Cross-site Scripting vulnerability

shopware/shopware, shopware/shopware

Shopware RCE Vulnerability

org.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui, org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt.ui, org.wso2.carbon.commons:org.wso2.carbon.messageflows.ui

WSO2 Carbon vulnerable to Cross-site Scripting

org.wso2.carbon.commons:org.wso2.carbon.logging.view.ui

WSO2 Carbon directory traversal vulnerability

org.apache.shiro:shiro-core

Improper Access Control in Apache Shiro

org.apache.qpid:qpid-jms-client

Improper Input Validation in Apache Qpid AMQP 0-x JMS

django, django, django

Django Cross-site scripting Vulnerability

org.apache.shiro:shiro-all, org.apache.shiro:shiro-web

Improper Access Control in Apache Shiro

plone, plone

Plone vulnerable to filesystem information leak

plone, plone

Plone XSS

plone, plone, plone

Plone Open Redirect Vulnerability

plone, plone, plone

Plone XSS

plone, plone, plone

Plone Cross-site Scripting (XSS) vulnerability

plone, plone

Plone vulnerable to Cross-site Scripting

org.apache.sling:org.apache.sling.servlets.post

Improper Neutralization of Input During Web Page Generation Apache Sling Servlets Post

org.jenkins-ci.plugins:resource-disposer

Jenkins Resource Disposer Plugin allows attacker to stop tracking specified resource

silverstripe/cms, silverstripe/framework

SilverStripe vulnerable to Cross-site Scripting

org.apache.activemq:activemq-web-console

Apache ActiveMQ Sensitive Information Disclosure via the Jetty ResourceHandler

org.apache.axis2.wso2:axis2

Improper Neutralization of Input During Web Page Generation in Apache Axis2

mantisbt/mantisbt

MantisBT Cross-site Scripting vulnerability