Open Source Vulnerabilities

org.springframework.security:spring-security-core, org.springframework.security:spring-security-core, org.acegisecurity:acegi-security

Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security

org.apache.shiro:shiro-root

Apache Shiro Path Traversal vulnerability

spree, spree

Spree allows remote attackers to obtain sensitive information

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Neutralization of Input During Web Page Generation in Apache Tomcat

org.apache.tomcat:tomcat

Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header

org.apache.archiva:archiva

Apache Archiva does not require entry of the administrator's password at the time of modifying a user account

impresscms/impresscms

ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter

symfony/form, symfony/form, symfony/form, symfony/form, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony SSRF Vulnerability via Form Component

org.apache.geronimo.plugins:console

Apache Geronimo Application Server multiple directory traversal vulnerabilities

phpmailer/phpmailer

PHPMailer susceptible to arbitrary code execution

DotNetNuke.Core

DotNetNuke Default Machine Key Exposure

org.jboss.resteasy:resteasy-bom

JBoss RESTEasy vulnerable to Improper Input Validation

pimcore/pimcore

Pimcore SQLi Vulnerability

pimcore/pimcore

Pimcore CSRF Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

org.jenkins-ci.plugins:publish-over-cifs

Jenkins Publisher Over CIFS Plugin confused deputy vulnerability

org.jenkins-ci.plugins:confluence-publisher

Server-Side Request Forgery (SSRF) in Jenkins Confluence Publisher Plugin

org.apache.struts:struts-core, struts:struts

Withdrawn Advisory: Apache Struts XSS

ember-source, ember-source, ember-source, ember-source, ember-source

ember-source Cross-site Scripting vulnerability

org.apache.activemq:activemq-client

Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Host Header Injection