Open Source Vulnerabilities

django, django, django

Django settings leak in date template filter

symfony/symfony, symfony/symfony, symfony/form, symfony/form, symfony/form, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/symfony

Symfony Vulnerable to Timing Attack

org.jruby:jruby

Ruby vulnerable to denial of service

org.apache.activemq:activemq-broker, org.apache.activemq:activemq-jaas

Improper Input Validation in Apache ActiveMQ

sup, sup

Sup Code Injection vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin cross-site scripting Vulnerability in Table or Column Names

django, django, django

Django WSGI Header Spoofing Vulnerability

django, django

Django database denial-of-service with ModelMultipleChoiceField

django, django, django

Django DoS in django.views.static.serve

django, django, django

Django Cross-site Scripting Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin ReCaptcha bypass

keystonemiddleware, python-keystoneclient

OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks

horizon

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

zendframework/zendframework, zendframework/zendframework, zendframework/zendframework1, zendframework/zendxml, zendframework/zendframework

ZendXml and Zend Framework contain XXE and XEE Vulnerabilities

django, django

Denial-of-service possibility in logout() view by filling session store

cinder

OpenStack Cinder file disclosure in image convert

org.apache.struts:struts2-core

Open redirect in Apache Struts

org.glassfish:javax.faces

Path Traversal in Eclipse Mojarra

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value

joomla/joomla-cms

Joomla! Cross-site Scripting vulnerability

friendsoftypo3/openid, friendsoftypo3/openid, friendsoftypo3/openid, friendsoftypo3/openid

TYPO3 OpenID extension Open redirect vulnerability

symfony/http-kernel, symfony/http-kernel, symfony/http-kernel, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/http-kernel

Symfony Incorrect Access Control

glance

OpenStack Glance Denial of service by creating a large number of images

glance

OpenStack Glance Denial of service by creating a large number of images

django, django, django

Django Vulnerable to MySQL Injection

django, django, django

Code Injection in Django

django, django, django

Django Reuses Cached CSRF Token

django, django, django, django

Django Vulnerable to Cache Poisoning

james-heinrich/getid3

getID3 is vulnerable to XML External Entity (XXE)

neutron, neutron

OpenStack Neutron allows remote authenticated users to cause a denial of service

glance

OpenStack Glance improper validation of the image_size_cap configuration option

drupal/core, drupal/core

Drupal Open Redirect

drupal/core, drupal/core, drupal/drupal, drupal/drupal

Drupal sensitive information disclosure

bottle

bottle.py vulnerable to CRLF Injection

web2py

Web2py Reflected XSS vulnerability

urllib3

Urllib3 Incorrect Certificate Validation

trytond, trytond, trytond, trytond, trytond

Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter

com.liferay.portal:portal-impl, com.liferay.portal:portal-service

Shell command injection in Liferay Portal

web2py

Web2py Cross-Site Request Forgery vulnerability

typo3/cms

TYPO3 Backend component Cross-site scripting (XSS) vulnerability

moodle/moodle

Moodle Glossary search displays entries without checking user permissions to view them

moodle/moodle, moodle/moodle

Moodle Cross-site Scripting in assignment submission page

typo3/cms-extbase, typo3/cms-extbase, typo3/cms-extbase

Extbase for TYPO3 allows RCE

priority

priority vulnerable to denial of service

python-jose

python-jose failure to use a constant time comparison for HMAC keys

moin

MoinMoin Cross-site Scripting (XSS) vulnerability

moin

MoinMoin Cross-site Scripting (XSS) vulnerability

moin

MoinMoin Cross-site Scripting (XSS) vulnerability

salt, salt

Salt Insecure configuration of PAM external authentication service

salt

Salt allows deleted minions to read or write to minions with the same id