Open Source Vulnerabilities

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Access Control in Apache Tomcat

org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util

Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

org.apache.tomcat:tomcat-catalina

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Inconsistent documentation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Insufficient Verification of Data Authenticity in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request

org.jenkins-ci.plugins:saltstack

Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins

com.synopsys.integration:synopsys-detect

Jenkins Black Duck Detect Plugin information exposure vulnerability

jquery, jQuery, jquery-rails, org.webjars.npm:jquery

jQuery vulnerable to Cross-Site Scripting (XSS)

org.apache.archiva:archiva

Apache Archiva vulnerable to Cross-site Scripting

org.apache.archiva:archiva

Apache Archiva vulnerable to Cross Site Request Forgery

aubio

Aubio is vulnerable to denial of service via aubio_pitch_set_unit function

contao/contao, contao/core-bundle

Contao CSRF Token Bypass

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin CSRF Vulnerability

contao/contao, contao/contao, contao/core-bundle, contao/core-bundle, contao/core

Contao Does Not Invalidate Existing Sessions When Password Changes

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site Scripting (XSS) vulnerability

katello

Katello SQL Injection vulnerabilities

nova

OpenStack Nova VMware instance leak potentially leading to compute DoS

rubygems-update, rubygems-update, rubygems-update

RubyGems vulnerable to DNS hijack attack

numpy

Numpy arbitrary file write via symlink attack

rubygems-update, rubygems-update, rubygems-update, rubygems-update

RubyGems Regular Expression Denial of Service vulnerability

suds, suds-py3

Improper Link Resolution Before File Access in Suds

phpmyadmin/phpmyadmin

phpMyAdmin Local file inclusion through transformation feature

org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core

Unrestricted Upload of File with Dangerous Type Apache Tomcat

microweber/microweber

Microweber XSS Vulnerability

Microsoft.ChakraCore

ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

Microsoft.ChakraCore

ChakraCore vulnerable to remote code execution

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore vulnerable to remote code execution

org.jenkins-ci.plugins:git

Cross-Site Request Forgery in Jenkins Git Plugin

org.wildfly.core:wildfly-server

Improper Limitation of a Pathname to a Restricted Directory in WildFly

org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation Apache ActiveMQ

org.opencastproject:base

Opencast RCE Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin CSRF Vulnerability

org.apache.struts:struts2-core

Apache Struts forced double OGNL evaluation

org.apache.nifi:nifi, org.apache.nifi:nifi

Cross-site Scripting in Apache NiFi

simplesamlphp/simplesamlphp-module-infocard

SimpleSAMLphp InfoCard module Incorrect signature verification

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Deserialization of Untrusted Data in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Authentication in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Session Fixation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Path Traversal in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-Site Request Forgery in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-site Scripting in Jenkins Core