Open Source Vulnerabilities

mercurial

Mercurial Directory traversal vulnerability

trac

Trac Open Redirect vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Directory Traversal vulnerability

typo3/cms-core, typo3/cms-core, typo3/cms-core

TYPO3 Unrestricted File Upload vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Path Traversal Vulnerability

django, django, django

Django Cross-site scripting (XSS) vulnerability

struts:struts

Apache Struts Cross-site Scripting vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core

Apache Tomcat Cross-site scripting (XSS) vulnerability

moin

MoinMoin vulnerable to privilege escalation

org.opencms:opencms-core

Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp

org.igniterealtime.openfire:parent, org.igniterealtime.openfire:openfire

Ignite Realtime Openfire allows remote authenticated users to cause a denial of service

org.opencms:opencms-core

Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter

moodle/moodle

Moodle vulnerable to Cross-site scripting

roundup

Roundup vulnerability related to Cross-site scripting (XSS)

roundup

Roundup xml-rpc server improper check of property permissions

plone

Plone credentials stored in session cookie

plone

Plone Improper Session Management

plone

Plone CMS Improper Session Management

org.opencms:opencms-core

Alkacon Open CMS XSS via Logfile Viewer Settings function

org.opencms:opencms-core

Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter

com.sun.faces:jsf-api

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Cross-site scripting (XSS) vulnerability

moin

MoinMoin Improper Access Control

moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

org.opencms:opencms-core

Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp

moin

MoinMoin Directory traversal vulnerability

moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

moin, moin

MoinMoin Cross-site scripting (XSS) vulnerability

paramiko

Paramiko Unsafe randomness usage may allow access to sensitive information

cherrypy, cherrypy

CherryPy Malicious cookies allow access to files outside the session directory

plone

Plone Cross-site request forgery (CSRF)

org.apache.tomcat:tomcat

Apache Tomcat Sensitive Information Disclosure

pyftpdlib

Improper privilege management in pyftpdlib

pyftpdlib

pyftpdlib vulnerable to allocation of resources without limits

pyftpdlib

Improper Input Validation in pyftpdlib

pyftpdlib

Improper Authentication in pyftpdlib

pyftpdlib

Directory Traversal in pyftpdlib

pyftpdlib

pyftpdlib Use of Insufficiently Random Values of port selection on PASV command

bouncycastle:bcprov-jdk14, bouncycastle:bcprov-jdk15, bouncycastle:bcprov-jdk16

Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability

org.apache.struts:struts2-dojo-plugin

Apache Struts Dojo Plugin XSS Vulnerability

org.mortbay.jetty:jetty

Mortbay Jetty Double Slash URI Information Disclosure Vulnerability

mongrel, mongrel

Mongrel vulnerable to directory traversal via double-encoded sequences

net.sf.robocode:robocode.core

Robocode Arbitrary Code Execution

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Does Not Properly Handle Empty Requests

plone, plone

Plone Arbitrary Code Execution via Unsafe Handling of Pickles

django, django, django

Django vulnerable to Denial of Service via i18n middleware component

org.mortbay.jetty:jetty

Improper Authentication in Mortbay Jetty

org.mortbay.jetty:jetty

Mortbay Jetty CRLF Injection Vulnerability

org.mortbay.jetty:jetty

Mortbay Jetty vulnerable to Cross-site scripting