Open Source Vulnerabilities

org.apache.struts:struts2-core

Code injection in Apache Struts

org.elasticsearch:elasticsearch, org.elasticsearch:elasticsearch

Improper Access Control in Elasticsearch

org.apache.derby:derby

Improper Restriction of XML External Entity Reference in Apace Derby

org.apache.struts:struts2-core

Server side object manipulation in Apache Struts

org.apache-extras.beanshell:bsh

Improper Input Validation in BeanShell

org.apache.poi:poi-examples

Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability

org.apache.xmlgraphics:batik

Deserialization of Untrusted Data in Apache Batik

org.apache.poi:poi

Improper Restriction of Recursive Entity References in DTDs in Apache POI

com.itextpdf:itextpdf, com.itextpdf:itextpdf, com.lowagie:itext

Improper Restriction of XML External Entity Reference in iText

org.apache.xmlgraphics:batik

Improper Restriction of XML External Entity Reference in Apache Batik

org.bouncycastle:bcprov-jdk15on

Observable Discrepancy in BouncyCastle

ceilometer

Ceilometer Prints Sensitive Configuration Data to Log

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

symphonycms/symphony-2

Symphony CMS XSS Vulnerabilities

silverstripe/cms, silverstripe/cms

Silverstripe CMS XSS Vulnerability

open-uri-cached

open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution

lxml

Improper Neutralization of Input During Web Page Generation in LXML

moodle/moodle

Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members

moodle/moodle

Moodle allows remote authenticated users to cause a denial of service (invalid database records)

moodle/moodle

Moodle allows remote authenticated users to cause a denial of service (invalid database records)

moodle/moodle

Moodle vulnerable to Cross-site Scripting

moodle/moodle

Moodle Incorrect Default Settings

moodle/moodle

Moodle does not force password changes for autosubscribed users

moodle/moodle

Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page

moodle/moodle

Moodle vulnerable to XSS via bundled spikephpcoverage library

moodle/moodle

Moodle vulnerable to Cross-Site Request Forgery

moodle/moodle

Moodle does not use the forceloginforprofiles setting for course-profiles access control

moodle/moodle, moodle/moodle

Moodle does not properly restrict comment capabilities

moodle/moodle, moodle/moodle

Moodle does not properly restrict access to category and course data

moodle/moodle, moodle/moodle

Moodle vulnerable to Cross-Site Scripting

moodle/moodle

Moodle Open Redirect in Calendar Set Page

moodle/moodle, moodle/moodle

Moodle vulnerable to Cross-Site Request Forgery

moodle/moodle, moodle/moodle

Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory

moodle/moodle

Moodle XSS Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Open Redirect Via Error Messages

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Allows Modification of Constants

apereo/phpcas, moodle/moodle, moodle/moodle

phpCAS client library and Moodle Cross-site Scripting vulnerability

moodle/moodle, moodle/moodle

Moodle XSS In Tag Autocomplete functionality

moodle/moodle, moodle/moodle

Moodle vulnerable to Cross-site Scripting

moodle/moodle, moodle/moodle

Moodle vulnerable to SQL injection

moodle/moodle, moodle/moodle

Moodle allows remote attackers to obtain sensitive information

moodle/moodle, moodle/moodle

Moodle vulnerable to Cross-site Scripting

moodle/moodle

Moodle vulnerable to Cross-Site Request Forgery

moodle/moodle, moodle/moodle

Moodle is vulnerable to unauthorized new accounts creation

moodle/moodle, moodle/moodle

Moodle vulnerable to Cross-site Scripting

moodle/moodle

Moodle Session Fixation vulnerability

moodle/moodle, moodle/moodle

Moodle doesn't properly check role

moodle/moodle, moodle/moodle

Moodle Authentication Bypass in Question-Bank

moodle/moodle, moodle/moodle

Moodle Exposes Sensitive User Information

moodle/moodle, moodle/moodle

Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter