Open Source Vulnerabilities

salt

SaltStack Salt Information Exposure

yiisoft/yii2

Yii Framework Reflected XSS

genix/cms

GeniXCMS Cross-site Scripting (XSS)

genix/cms

GeniXCMS SQL Injection

craftcms/cms

Craft CMS XSS Vulnerability

craftcms/cms

Craft CMS subject to URL forgery

genix/cms

GeniXCMS Arbitrary User Password Reset Vulnerability

genix/cms

GeniXCMS Cross-site Scripting (XSS)

genix/cms

GeniXCMS Cross-site Scripting

dolibarr/dolibarr

Dolibarr ERP and CRM contain XSS Vulnerability

dolibarr/dolibarr

Dolibarr ERP and CRM Insecure Encryption

dolibarr/dolibarr

Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter

baserproject/basercms

baserCMS Cross Site Request Forgery vulnerability

baserproject/basercms

CSRF in baserCMS 3.0.10 and earlier

baserproject/basercms

baserCMS Cross-site Scripting vulnerability

org.apache.tomcat:tomcat

Apache Tomcat Allows Replacing of XML Parser

org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Cross-Site Request Forgery (CSRF)

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

modx/revolution

MODX Revolution Reflected XSS

modx/revolution

MODX Revolution allows overwriting .htaccess

modx/revolution

MODX Revolution cross-site scripting vulnerability

modx/revolution

MODX Revolution XSS via HTTP Host header

modx/revolution

MODX Revolution Directory Traversal Vulnerability

opensolutions/vimbadmin

ViMbAdmin Cross-site Scripting Vulnerabilities

admidio/admidio

admidio CSRF Vulnerability

contao/core, contao/core

Contao Core directory traversal vulnerability

dolibarr/dolibarr

Dolibarr ERP and CRM SQLi

laravel/laravel, illuminate/auth, illuminate/auth, laravel/framework, laravel/framework

Laravel does not properly constrain the host portion of a password-reset URL

org.apache.hadoop:hadoop-common, org.apache.hadoop:hadoop-common

Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation

nilsteampassnet/teampass

TeamPass SQL injection in users.queries.php

zendframework/zendframework

Zend Framework CSRF Vulnerability

org.apache.xmlrpc:xmlrpc-common

ws-xmlrpc DoS Vulnerability

org.apache.nifi:nifi, org.apache.nifi:nifi

Origin Validation Error in Apache NiFi

org.apache.nifi:nifi, org.apache.nifi:nifi

Cross-site Scripting in Apache NiFi

dolibarr/dolibarr

Dolibarr ERP and CRM Unsafe File Upload Vulnerability

pillow

PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

pygments

Command Injection in Pygments

mercurial

Mercurial vulnerable to arbitrary code execution when converting Git repos

adodb/adodb-php

ADOdb Cross-site scripting vulnerability in old test script

phpmyadmin/phpmyadmin

phpMyAdmin cookie-attribute injection

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Code Injection vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site Scripting (XSS)

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Local file exposure through symlinks with UploadDir

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Local file exposure