Open Source Vulnerabilities

roundup, roundup

Roundup Improper Access Control

zodb3, zodb3

Zope Object Database (ZODB) Arbitrary files reading and deletion

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Directory Traversal vulnerability

django, django

Django Admin Media Handler Vulnerable to Directory Traversal

org.igniterealtime.openfire:parent

Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts

org.mortbay.jetty:jetty, org.mortbay.jetty:jetty

Directory traversal in Mort Bay Jetty

moin

MoinMoin Cross-site Scripting (XSS) vulnerability

org.apache.tiles:tiles-core

Apache Tiles Vulnerable to XSS via EL Expression Injection

sjbr/sr-feuser-register

Frontend User Registration extension for TYPO3 does not properly verify access rights

org.springframework:spring-core

Spring Framework Inefficient Regular Expression Complexity

phpmyadmin/phpmyadmin

phpMyAdmin HTTP Response Splitting Vulnerability

typo3/cms, typo3/cms, typo3/cms, typo3/cms, typo3/cms

Typo3 Backend XSS Vulnerability

typo3/cms, typo3/cms, typo3/cms

TYPO3 leaks a hash secret in an error message

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Cross-site scripting in Apache Tomcat

zodb3

Zope Object Database (ZODB) vulnerable to arbitrary Python code execution in ZEO storage servers

zodb3

Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information in Apache Tomcat

moin

MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature

typo3/cms, typo3/cms, typo3/cms

Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection

moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

typo3/cms, typo3/cms, typo3/cms

Authentication library in TYPO3 vulnerable to session fixation

org.apache.santuario:xmlsec

Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

org.apache.geronimo.plugins:console

Apache Geronimo Application Server CSRF vulnerabilities

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Denial of Service via Malformed Request Headers

org.apache.geronimo.plugins:console

Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities

org.apache.jackrabbit:jackrabbit

Apache Jackrabbit contains Cross-site Scripting

plone

Plone Cross-site Scripting vulnerability in the LiveSearch module

adaptcms/adaptcms

AdaptCMS SQL Injection vulnerability

webrick

WEBrick Denial of Service Vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat information disclosure vulnerability

joomla/framework

Joomla! Open Redirect vulnerability

django, django, django

Django cross-site request forgery (CSRF) vulnerability

ghostscript

Heap-buffer-overflow in s_PFBD_process

linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-oem-osp1, linux-oracle, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

linux

linux - security update

jackson-databind

jackson-databind - security update

,

moin, moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

trac

Trac Cross-site Scripting (XSS) vulnerability

joomla/framework

Joomla! Open Redirect vulnerability

joomla/joomla-platform

Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

drupal/drupal

Drupal vulnerable to Cross-site Scripting

joomla/joomla-platform

Joomla! allows attackers to access cached pages

mehrwert/phpmyadmin

phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability