Open Source Vulnerabilities

phpbb/phpbb

phpBB vulnerable to sensitive information disclosure

moin

MoinMoin Denial of Service vulnerability via password_checker function

org.apache.struts:struts2-core, org.apache.struts:struts2-core

Apache Struts is vulnerable to Cross-site Scripting

org.apache.struts:struts2-core, org.apache.struts:struts2-core

Apache Struts directory traversal vulnerability

org.geoserver:gs-main, org.geoserver.web:gs-web-app

PartialBufferOutputStream2 flush issues

phpbb/phpbb

phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."

org.apache.myfaces.core:myfaces-core-module, org.apache.myfaces.core:myfaces-core-module

Apache MyFaces Cross-site Scripting vulnerability

org.dojotoolkit:dojo, org.dojotoolkit:dojo, org.dojotoolkit:dojo, org.dojotoolkit:dojo, org.dojotoolkit:dojo

Dojo Open Redirect vulnerability

plone

Plone Cross-site Scripting vulnerability in PortalTransforms

ezyang/htmlpurifier

HTML Purifier Cross-site Scripting (XSS) vulnerability

python-cjson

Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

moin, moin

MoinMoin cross-site scripting (XSS) vulnerability

moin, moin, moin

MoinMoin Cross-site Scripting (XSS) vulnerability

moin

MoinMoin cross-site scripting (XSS) vulnerability

mako

Mako contains Cross-site Scripting vulnerability

zope, zope

Zope Denial of Service (DoS) vulnerability in ZServer

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site Scripting vulnerability

drupal/drupal

Drupal cross-site scripting vulnerability via actions feature and trigger module

in2code/powermail

powermail extension for TYPO3 vulnerable to SQL Injection

pyftpdlib

Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

pyftpdlib

Improper input validation in pyftpdlib

pyftpdlib

Directory traversal in pyftpdlib

pyftpdlib

Improper Authentication in pyftpdlib

typo3/cms-backend, typo3/cms-backend, typo3/cms-backend

TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend

org.apache.myfaces.shared:myfaces-shared-core, org.apache.myfaces.shared:myfaces-shared-core, org.apache.myfaces.shared:myfaces-shared-core, org.apache.myfaces.core:myfaces-impl, org.apache.myfaces.core:myfaces-impl, org.apache.myfaces.core:myfaces-impl

Improper Authentication in Apache MyFaces

cobbler

Cobbler is vulnerable to code injection

paste

Paste is vulnerable to Cross-site Scripting via vectors involving a 404 status code

org.drools:drools-core

Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP

cakephp/cakephp

CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code

zodb3

Zope Object Database Denial of Service vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information

phpmyadmin/phpmyadmin

phpMyAdmin unsafely handles temporary files

pywebdav

PyWebDAV SQL Injection vulnerability

org.apache.struts:struts2-parent

Apache Struts Multiple XSS Vulnerabilities

plone

Plone XSS Vulnerability

fabric

Fabric vulnerable to symlink attack on tmp files

apache-libcloud

Apache Libcloud does not verify SSL certificates for HTTPS connections

org.apache.httpcomponents:httpclient

Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient

zope2, zope2

Zope Command Execution Vulnerability

plone, plone, plone

Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer

OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled

joomla/joomla-cms

Joomla! vulnerable to Cross-site Scripting

celery, celery, celery

Celery local privilege escalation vulnerability

org.apache.activemq:activemq-core

Denial of Service in Apache ActiveMQ

org.apache.struts:struts2-core

Cross-site Scripting in Apache Struts

virtualenv

Virtualenv Allows Symlink Attack on /tmp/

phpmyadmin/phpmyadmin

phpMyAdmin Open Redirect in redirector

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests

ejabberd, ejabberd

Ejabberd DoS via malformed stanza

ezyang/htmlpurifier

HTML Purifier allows remote attackers to obtain sensitive information