Open Source Vulnerabilities

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin allows to detect if user is logged in

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Authentication Bypass

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Reflected File Download attack

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Denial of service (DOS) attack with dbase extension

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Remote code execution vulnerability when PHP is running with dbase extension

org.springframework.data:spring-data-jpa, org.springframework.data:spring-data-jpa

Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA

adodb/adodb-php

ADOdb Library SQL Injection

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Cryptographic Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin path disclosure

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Bypass logout timeout

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Bypass white-list protection for URL redirection

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Denial of Service (DoS)

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin CSRF Vulnerability

org.opendaylight.odlparent:opendaylight-karaf-resources

Opendaylight will authenticate any username and password combination

NewRelic.Agent

New Relic .NET Agent contains SQL Injection

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

mantisbt/mantisbt, mantisbt/mantisbt, mantisbt/mantisbt

MantisBT vulnerable to CSRF and Open Redirect attacks

Microsoft.ChakraCore

ChakraCore information disclosure vulnerability

mantisbt/mantisbt

MantisBT XSS via my_view_page.php and view_user_page.php

moodle/moodle, moodle/moodle

Moodle XSS Vulnerability

moodle/moodle

Moodle Global search displays user names for unauthenticated users

moodle/moodle, moodle/moodle

Moodle XSS in attachments to evidence of prior learning

drupal/core, drupal/drupal

Drupal Cross-Site Request Forgery (CSRF)

mantisbt/mantisbt, mantisbt/mantisbt, mantisbt/mantisbt

MantisBT XSS via move_attachments_page.php

mantisbt/mantisbt, mantisbt/mantisbt, mantisbt/mantisbt

MantisBT XSS via adm_config_report.php's action parameter

mantisbt/mantisbt, mantisbt/mantisbt, mantisbt/mantisbt

MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings Cross-site Scripting vulnerability

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings vulnerable to SQL injection

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings displays Tomcat version and detailed error stack trace

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings does not correctly validate uploaded XML documents

org.apache.openmeetings:openmeetings-parent

Apache OpenMeetings vulnerable to Cross-Site Request Forgery

bolt/bolt

Bolt stored Cross-site Scripting (XSS)

bolt/bolt

Bolt CMS Stored XSS

moodle/moodle, moodle/moodle, moodle/moodle

Moodle User fullname disclosure on user preferences page

modx/revolution

MODX Revolution blind SQL injection

org.apache.sling:org.apache.sling.xss, org.apache.sling:org.apache.sling.xss.compat

XML External Entity Reference in Apache Sling

yiisoft/yii2-dev, yiisoft/yii2

Yii Cross-site Scripting Framework vulnerability

Nancy, Nancy

Deserialization of Untrusted Data in NancyFX Nancy

phpmyadmin/phpmyadmin

phpMyAdmin Cookie attribute injection attack

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.apache.qpid:qpid-broker, org.apache.qpid:qpid-broker

Exposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java

org.apache.solr:solr

Apache Solr Cross-site scripting Vulnerability

org.apache.axis2.wso2:axis2

Improper Input Validation in Apache Axis2

txaws

txAWS AWSServiceEndpoint defaults to not verifying server certificates