Open Source Vulnerabilities

flarum/framework

Flarum Core Leaks PII

org.sonarsource.sonarqube:sonar-plugin-api

Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API

org.eclipse.rdf4j:rdf4j

RDF4J vulnerable to zip slip

bolt/bolt

Bolt Cross-site Scripting (XSS) via text input click preview button

dolibarr/dolibarr

Dolibarr stored cross-site scripting (XSS) vulnerability

phpservermon/phpservermon

CSRF in PHP Server Monitor before 3.3.2

dolibarr/dolibarr

Dolibarr reflected cross-site scripting (XSS) vulnerability

dolibarr/dolibarr

Dolibarr stored cross-site scripting (XSS) vulnerability

github.com/grafana/grafana

Grafana XSS Vulnerability

org.apache.karaf:apache-karaf

Improper Input Validation in Apache Karaf

dolibarr/dolibarr

Dolibarr error-based SQL injection vulnerability in product/card.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in user/card.php

Microsoft.AspNetCore.WebSockets, Microsoft.AspNetCore.WebSockets, Microsoft.AspNetCore.Server.Kestrel.Core, System.Net.WebSockets.WebSocketProtocol, Microsoft.NETCore.App, Microsoft.NETCore.App, Microsoft.AspNetCore.App, Microsoft.AspNetCore.App, Microsoft.AspNetCore.All, Microsoft.AspNetCore.All

Denial of service in ASP.NET Core

Microsoft.NETCore.App, Microsoft.NETCore.App

Exposure of Sensitive Information in System.Net.Http

dolibarr/dolibarr

Dolibarr ERP and CRM contain XSS Vulnerability

microweber/microweber

Microweber XSS Vulnerability

com.haulmont.cuba:cuba-web-toolkit, com.haulmont.cuba:cuba-web-toolkit, com.haulmont.cuba:cuba-web-toolkit

The Reporting Addon for CUBA Platform has Persistent XSS

league/commonmark

PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)

org.jenkins-ci.plugins:config-file-provider

Stored XSS vulnerability in Config File Provider Plugin

com.github.binarywang:weixin-java-common

XML External Entity Reference in weixin-java-tools

shopware/shopware

Shopware SQL Injection

org.jenkins-ci.plugins:config-file-provider

CSRF vulnerability in Config File Provider Plugin

org.jenkins-ci.plugins:email-ext

CSRF vulnerability in Email Extension Template Plugin

forkcms/forkcms

Fork CMS XSS Vulnerability

github.com/sylabs/singularity

Sylabs Singularity Improper Input Validation

phpmyadmin/phpmyadmin

phpMyAdmin SQL injection in Designer feature

org.jenkins-ci.plugins:junit

Jenkins JUnit Plugin CSRF vulnerability

org.apache.mesos:mesos

Crash when decoding malformed HTTP requests or malformed JSON payload

croogo/croogo

Croogo vulnerable to XSS in title field

croogo/croogo

Croogo vulnerable to XSS in title field

croogo/croogo

Croogo vulnerable to Cross-site Scripting in title field

croogo/croogo

Croogo vulnerable to XSS in title field

croogo/croogo

Croogo vulnerable to XSS in Blog field

org.jenkins-ci.plugins:mesos

Server-side request forgery vulnerability in Jenkins Mesos Plugin

com.sonyericsson.hudson.plugins.rebuild:rebuild

Cross-site Scripting in Jenkins Rebuilder Plugin

org.jenkins-ci.plugins:crowd2

Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability

github.com/caddyserver/caddy

Caddy allows enumeration of Certificates and Hostnames

gogs.io/gogs

Gogs Directory Traversal

trytond, trytond, trytond, trytond

trytond arbitrary fields write via a sequence of records

prestashop/prestashop

PrestaShop PHP Object Injection

org.owasp.esapi:esapi

Missing Cryptographic Step in OWASP Enterprise Security API for Java

glance

OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme

onionshare-cli

Withdrawn Advisory: OnionShare Predictable Pathname

github.com/hashicorp/consul

HashiCorp Consul can use cleartext agent-to-agent RPC communication

ec-cube/ec-cube

EC-CUBE Open redirect vulnerability

modx/revolution

MODX Revolution allows XSS via document resources

modx/revolution

MODX Revolution allows XSS through extended user fields

modx/revolution

MODX Revolution vulnerable to XSS attack through its User Photo field

buildbot

Buildbot CRLF Injection

pyboolector

Boolector use after free