Open Source Vulnerabilities
org.apache.nifi:nifi-framework-core, org.apache.nifi:nifi-security-utils
Insertion of Sensitive Information into Log File in Apache NiFi
org.apache.nifi:nifi-framework-core/ org.apache.nifi:nifi-security-utils
Insertion of Sensitive Information into Log File in Apache NiFi
org.apache.nifi:nifi-parameter
Apache NiFi Insertion of Sensitive Information into Log File
org.apache.nifi:nifi-parameter
Apache NiFi Insertion of Sensitive Information into Log File
org.apache.xmlgraphics:batik-svgbrowser
Server-side request forgery (SSRF) in Apache Batik
org.apache.xmlgraphics:batik-svgbrowser
Server-side request forgery (SSRF) in Apache Batik
org.apache.nifi:nifi
Cross-site scripting in Apache NiFi
org.apache.ambari:ambari
Cross-site Scripting (XSS) in Apache Ambari Views
org.apache.ambari:ambari
Cross-site Scripting (XSS) in Apache Ambari Views
copy-props
Prototype Pollution in copy-props
org.apache.guacamole:guacamole-common-js, org.apache.guacamole:guacamole-common
Incorrect Default Permissions in Apache Guacamole
org.apache.guacamole:guacamole-common-js/ org.apache.guacamole:guacamole-common
Incorrect Default Permissions in Apache Guacamole
org.apache.velocity:velocity-engine-parent, org.apache.velocity:velocity
Sandbox Bypass in Apache Velocity Engine
org.apache.velocity:velocity-engine-parent/ org.apache.velocity:velocity
Sandbox Bypass in Apache Velocity Engine
stringstream
Out-of-Bounds read in stringstream
lodash, lodash-es, lodash.trimend, lodash.trim, lodash-rails
Regular Expression Denial of Service (ReDoS) in lodash
lodash/ lodash-es/ lodash.trimend/ lodash.trim/ lodash-rails
Regular Expression Denial of Service (ReDoS) in lodash
url-parse
Improper Validation and Sanitization in url-parse
url-parse
Improper Validation and Sanitization in url-parse
http-proxy-agent
Resource Exhaustion Denial of Service in http-proxy-agent
http-proxy-agent
Resource Exhaustion Denial of Service in http-proxy-agent
com.softwaremill.akka-http-session:core_2.12
Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12
com.softwaremill.akka-http-session:core_2.12
Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12
gpac, gpac, gpac, gpac, gpac, gpac
gpac, gpac, gpac, gpac, gpac, gpac
gpac, gpac, gpac, gpac, gpac, gpac
gpac, gpac, gpac, gpac, gpac, gpac
mermaid
Incorrect sanitisation function leads to `XSS` in mermaid
mermaid
Incorrect sanitisation function leads to `XSS` in mermaid
org.apache.iotdb:iotdb-parent
Improper Certificate Validation in Apache IoTDB
org.apache.iotdb:iotdb-parent
Improper Certificate Validation in Apache IoTDB
svg2png
XSS in svg2png (NPM package)
org.apache.heron:heron-simulator
Deserialization of Untrusted Data in Apache Heron
org.apache.heron:heron-simulator
Deserialization of Untrusted Data in Apache Heron
msrcrypto
Incorrect Calculation in the MSR JavaScript Cryptography Library
msrcrypto
Incorrect Calculation in the MSR JavaScript Cryptography Library
org.apache.syncope.client:syncope-client-enduser, org.apache.syncope.client:syncope-client-enduser
Cross-site scripting in Apache Syncome EndUser
org.apache.syncope.client:syncope-client-enduser/ org.apache.syncope.client:syncope-client-enduser
Cross-site scripting in Apache Syncome EndUser
org.jenkins-ci.plugins:scriptler
Stored XSS vulnerability in Jenkins Scriptler Plugin
org.jenkins-ci.plugins:scriptler
Stored XSS vulnerability in Jenkins Scriptler Plugin
org.jenkins-ci.plugins:scriptler
Stored XSS vulnerability in Jenkins Scriptler Plugin
org.jenkins-ci.plugins:scriptler
Stored XSS vulnerability in Jenkins Scriptler Plugin
com.github.fracpete:vfsjfilechooser2
ReDOS in Vfsjfilechooser2
com.github.fracpete:vfsjfilechooser2
ReDOS in Vfsjfilechooser2
org.apache.cxf:apache-cxf, org.apache.cxf:apache-cxf, org.apache.cxf:cxf, org.apache.cxf:cxf
Infinite loop in Apache CFX
org.apache.cxf:apache-cxf/ org.apache.cxf:apache-cxf/ org.apache.cxf:cxf/ org.apache.cxf:cxf
Infinite loop in Apache CFX
moodle/moodle
Cross-Site Request Forgery in Moodle
oro/platform, oro/platform, oro/platform
XSS vulnerability on email template preview page
oro/platform/ oro/platform/ oro/platform
XSS vulnerability on email template preview page
jsx-slack
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
jsx-slack
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
solidus_frontend, solidus_frontend, solidus_frontend
CSRF forgery protection bypass in solidus_frontend
solidus_frontend/ solidus_frontend/ solidus_frontend
CSRF forgery protection bypass in solidus_frontend
org.keycloak:keycloak-services
Improper Authorization in Keycloak
org.keycloak:keycloak-services
Improper Authorization in Keycloak
AjaxNetProfessional
AjaxNetProfessional deserializes arbitrary JavaScript objects
AjaxNetProfessional
AjaxNetProfessional deserializes arbitrary JavaScript objects
org.powernukkit:powernukkit
Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library
org.powernukkit:powernukkit
Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library
github.com/crypto-org-chain/cronos, github.com/tharsis/ethermint, github.com/tharsis/evmos, github.com/tharsis/ethermint
Drainage of FeeCollector's Block Transaction Fees in cronos
github.com/crypto-org-chain/cronos/ github.com/tharsis/ethermint/ github.com/tharsis/evmos/ github.com/tharsis/ethermint
Drainage of FeeCollector's Block Transaction Fees in cronos
github.com/keep-network/keep-ecdsa
Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme
github.com/keep-network/keep-ecdsa
Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme
oro/platform, oro/platform
Client-Side JavaScript Prototype Pollution in oro/platform
oro/platform/ oro/platform
Client-Side JavaScript Prototype Pollution in oro/platform
