Open Source Vulnerabilities

helm.sh/helm

Helm Path Traversal

mpdf/mpdf

mPDF Unsafe Deserialization

fileutils

Fileutils Command Injection vulnerability

github.com/ory/hydra

Hydra has Reflected XSS via error_hint parameter

yiisoft/yii2

Yii Incorrectly Implements CORS

net.sourceforge.pmd:pmd-core

Improper Restriction of XML External Entity Reference in PMD

github.com/gofiber/fiber/v2, github.com/rs/cors

github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

getkirby/kirby

Kirby XSS Vulnerability

intelliants/subrion

Subrion CMS XSS

laravel/framework

Laravel Framework Deserialization Vulnerability

evolutioncms/evolution

Evolution CMS Stored Cross-site Scripting (XSS)

evolutioncms/evolution

Evolution CMS Cross-site Scripting (XSS)

org.cloudfoundry.identity:cloudfoundry-identity-server, org.cloudfoundry.identity:cloudfoundry-identity-server

Cloud Foundry vulnerable to Improper Certificate Validation

org.apache.tomee:tomee-webapp

Apache TomEE console vulnerable to Cross-site Scripting

drupal/core, drupal/core, drupal/core, drupal/core, drupal/drupal, drupal/drupal, drupal/drupal, drupal/drupal

Drupal Core Remote Code Execution Vulnerability

org.apache.portals.pluto:pluto-container

Exposure of Sensitive Information in Apache Pluto

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings RCE

org.jenkins-ci.plugins:mailer

Cross-Site Request Forgery in Jenkins Mailer Plugin

asyncssh

AsyncSSH SSH Server Authentication Bypass

org.apache.commons:commons-email

Improper Input Validation Apache Commons Email

Microsoft.NETCore.App, Microsoft.NETCore.App, System.Private.Uri

Improper Input Validation in .Net Framework API's

org.jolokia:jolokia-core

Cross-site Scripting in Jolokia agent

org.eclipse.jetty:jetty-server

Improper Input Validation in Jetty

dolibarr/dolibarr

Dolibarr Stored Cross-site Scripting in expensereport/card.php

passenger

Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability

passenger

Phusion Passenger Race Condition Allows Privilege Escalation

org.jolokia:jolokia-core

Injection in Jolokia agent

dolibarr/dolibarr

Dolibarr SQL injection via the integer parameters qty and value_unit

org.apache.solr:solr-core

Apache Solr Kerberos delegation token functionality flaws

baserproject/basercms, baserproject/basercms

baserCMS SQL Injection vulnerability

baserproject/basercms, baserproject/basercms

Code Injection in baserCMS

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/security, symfony/security

Symfony Session Fixation Vulnerability

pdfjs-dist, pdfjs-dist

Malicious PDF can inject JavaScript into PDF Viewer

intelliants/subrion

Subrion CMS vulnerable to CSRF in admin/blocks/add

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/security

Symfony Open Redirect

paypal/merchant-sdk-php

PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability

symfony/intl, symfony/intl, symfony/intl, symfony/intl, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Directory Traversal

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle

Symfony Open Redirect

genix/cms

GeniXCMS SQL injection vulnerability

craftcms/cms

Craft CMS Cross-site Scripting (XSS) Vulnerability

silverstripe/cms, silverstripe/cms

Silverstripe CMS XSS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Open Redirect

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin CSS Injection Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

org.apache.syncope:syncope, org.apache.syncope:syncope

Apache Syncope JEXL Code Injection

org.jboss.resteasy:resteasy-client, org.jboss.resteasy:resteasy-client

Incorrect Privilege Assignment in RESTEasy

org.hibernate:hibernate-validator, org.hibernate:hibernate-validator, org.hibernate:hibernate-validator

Improper Authentication in Hibernate Validator

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Verification of Source of a Communication Channel in Apache Tomcat

moodle/moodle

Moodle SSRF Vulnerability