Open Source Vulnerabilities

DotNetNuke.Core

DNN XSS Vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Directory Traversal in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Authentication in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Use of Hard-coded Cryptographic Key in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Insertion of Sensitive Information into Log File in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat does not properly handle an invalid Transfer-Encoding header

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Authentication in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Authentication Bypass in Apache Tomcat

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin SSRF in replication

donfig

Donfig Command Injection in collect_yaml method

select2

Improper Neutralization of Input During Web Page Generation in Select2

snipe/snipe-it

Snipe-IT XSS Vulnerability

org.springframework:spring-webmvc, org.springframework:spring-webmvc

Improper Neutralization of Input During Web Page Generation in Spring Framework

org.apache.activemq:apollo-project

Apache ActiveMQ Apollo XXE Vulnerability

org.apache.activemq:activemq-client

Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

org.apache.activemq:activemq-client, org.apache.activemq:activemq-broker

Improper Restriction of XML External Entity Reference in Apache ActiveMQ

org.apache.activemq:activemq-broker, org.apache.activemq:activemq-jaas

Improper Authentication in Apache WSS4J

org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

org.apache.activemq:activemq-client

Improper Input Validation in Apache ActiveMQ

org.apache.activemq:activemq-client

Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

org.apache.activemq:activemq-client, org.apache.activemq:activemq-client, org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

librenms/librenms

LibreNMS SQL Injection

org.openrefine:main

OpenRefine Directory Traversal

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/http-foundation, symfony/http-foundation, symfony/http-foundation, symfony/http-foundation, symfony/http-foundation

Symfony DoS

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/security, symfony/security

Symfony CSRF Token Fixation

ansible, ansible, ansible

Ansible Logs Passwords If PowerShell ScriptBlock is Enabled

edu.internet2.middleware:shibboleth-identityprovider, org.opensaml:opensaml

Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java

elgg/elgg, elgg/elgg

Elgg open redirect

jupyter-notebook, notebook

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

silverstripe/framework, silverstripe/framework, silverstripe/framework, silverstripe/framework, silverstripe/framework, silverstripe/framework

Silverstripe Framework SQLi Vulnerability

org.uberfire:uberfire-parent

UberFire Framework Improperly Restricts Paths

intelliants/subrion

Subrion CMS vulnerable to CSRF in blog/delete

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat is vulnerable to HTTP request-smuggling

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Denial of Service vulnerability

org.apache.tomcat:tomcat

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Authentication in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote

Integer Overflow or Wraparound in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper

Missing XML Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Uncontrolled Resource Consumption in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Access Control in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat