Open Source Vulnerabilities

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

django, django, django

Django Denial-of-service possibility with strip_tags

django, django, django, django

Django cross-site scripting (XSS) attack via user-supplied redirect URLs

mercurial

Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command

pillow

Pillow denial of service via PNG bomb

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin cross-site scripting vulnerability in crafted view name

ipython

IPython Notebook vulnerable to improper validation of the origin of websocket requests

pillow, pillow

Pillow denial of service via Crafted Block Size

pillow

Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

org.python:jython-standalone

Jython Improper Access Restrictions vulnerability

simplejson

simplejson before 2.6.1 vulnerable to array index error

django, django, django

Django denial of service via file upload naming

notebook, ipython

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

twig/twig

Twig remote code execution in templates

ansible

Ansible Arbitrary Code Execution

ansible

Ansible uses a socket with predictable filename in /tmp

ansible

Ansible Arbitrary File Overwrite Vulnerability

webrick

WEBrick RCE Vulnerability

openssl

Ruby OpenSSL DoS Vulnerability

topthink/framework

ThinkPHP SQL Injection vulnerability

Microsoft.ChakraCore

ChakraCore information disclosure vulnerability

pimcore/pimcore

Pimcore XSS Vulnerability

thorsten/phpmyfaq

phpMyFAQ CSRF

org.apache.cayenne:cayenne-parent, org.apache.cayenne:cayenne-parent

XML External Entity Reference in Apache Cayenne

org.dojotoolkit:dojo

Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness

gogs.io/gogs

Gogs XSS Vulnerability

intelliants/subrion

Subrion CMS CSRF Vulnerability

intelliants/subrion

Subrion Cross-site scripting (XSS) vulnerability

Auth0-ASPNET-Owin, auth0-aspnet

Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery

intelliants/subrion

Subrion CMS Cross-site scripting in search

intelliants/subrion

Subrion CMS Cross-site Scripting

intelliants/subrion

Subrion CMS PHP Object Injection

intelliants/subrion

Subrion CMS Stored Cross-site Scripting (XSS)

intelliants/subrion

Subrion Cross-site Scripting (XSS)

wallabag/wallabag

Wallabag cross-site scripting (XSS) vulnerability

net.mingsoft:ms-mcms

Mingsoft MCMS CSRF vulnerability

nova

OpenStack Nova Long server names grow nova-api log files significantly

org.xwiki.platform:xwiki-platform

XWiki XSS Vulnerability

nova

OpenStack Nova Denial of Service in network source security groups

nova

OpenStack Nova Multiple directory traversal vulnerabilities

nova, nova

OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability

keystone

OpenStack Keystone Token authorization for a user in a disabled tenant is allowed

keystone

OpenStack Keystone Improper Authentication vulnerability

nova

OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information

smarty/smarty

Smarty Path Traversal Vulnerability

nova, nova

OpenStack Compute (nova) allows remote authenticated users to cause a denial of service

cinder

OpenStack Cinder Denial of Service using XML entities

nova

OpenStack Nova DoS through ephemeral disk backing files

nova

OpenStack Nova live snapshots use an insecure local directory