Open Source Vulnerabilities

dmk/webkitpdf

Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

dmk/webkitpdf

Webkit PDFs for TYPO3 has SQL Injection vulnerability

typo3/cms-frontend, typo3/cms-frontend

TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality

typo3/cms-frontend, typo3/cms-frontend, typo3/cms-frontend

TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content object

typo3/cms, typo3/cms, typo3/cms

TYPO3 Path Traversal vulnerability

typo3/cms-install, typo3/cms-install, typo3/cms-install

TYPO3 Cross-Site Scripting vulnerability in the Install Tool

typo3/cms, typo3/cms, typo3/cms

TYPO3 Directory Traversal vulnerability

typo3/cms-core, typo3/cms-core, typo3/cms-core

TYPO3 Sensitive Information Disclosure via escapeStrForLike method

typo3/cms, typo3/cms, typo3/cms

TYPO3 SQL Injection vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin Directory Traversal Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin vulnerable to XML external entity (XXE) injection attack

symphonycms/symphony-2

Symphony CMS vulnerable to Cross-site Scripting

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site Scripting vulnerability

org.jboss.resteasy:resteasy-jaxb-provider

Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

org.jboss.resteasy:resteasy-client

Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

org.apache.struts:struts2-parent, org.apache.struts:struts2-parent

Apache Struts Multiple Cross-site Scripting Vulnerabilities

pyfribidi

PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function

forkcms/forkcms

Fork CMS Multiple XSS Vulnerabilities

forkcms/forkcms

ForkCMS Directory Traversal vulnerability

elefant/cms, elefant/cms

Elefant CMS Multiple XSS Vulnerabilities

horizon

OpenStack Horizon Cross-site scripting (XSS) vulnerability

nova

Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules

typo3/cms, typo3/cms, typo3/cms, typo3/cms

Typo3 Exception Handler XSS

horizon

OpenStack Horizon Session Fixation

pycrypto

PyCrypto makes Use of Insufficiently Random Values

nova

OpenStack Compute (Nova) Improper Input Validation

nova

Arbitrary file overwrite in OpenStack Nova

org.apache.qpid:qpid-parent

Apache QPID Allows Remote Authentication Bypass

typo3/cms, typo3/cms, typo3/cms

TYPO3 allows remote authenticated backend users to unserialize arbitrary objects

typo3/cms, typo3/cms, typo3/cms

Typo3 Backend XSS Vulnerability

typo3/cms, typo3/cms, typo3/cms

Typo3 Backend Configuration XSS Vulnerability

typo3/cms, typo3/cms, typo3/cms

Typo3 API XSS Vulnerability

typo3/cms, typo3/cms, typo3/cms

Typo3 Install Tool XSS Vulnerability

org.apache.struts:struts2-core

Cross-Site Request Forgery in Apache Struts

org.apache.struts.xwork:xwork-core

Denial of service in Apache Struts

swift

OpenStack Object Storage (swift) Code Injection vulnerability

keystone

OpenStack Keystone does not invalidate existing tokens when granting or revoking roles

glance

OpenStack Glance arbitrary deletion of non-protected images

glance

OpenStack Glance arbitrary deletion of non-protected images

keystone

OpenStack Keystone intended authorization restrictions bypass

keystone

OpenStack Keystone Insufficient token expiration

org.apache.axis2:axis2, org.apache.axis2:axis2-transport-http

Apache Axis2 has Improper Input Validation

org.codehaus.xfire:xfire-core

Improper Input Validation in XFire

tweepy

Tweepy does not verify SSL Certificate

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Authentication in Apache Tomcat

b13/seo_basics

Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting

org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina

Improper Authentication in Apache Tomcat

yui2

Cross-site scripting in yui 2.4.0

in2code/powermail

powermail extension for TYPO3 has Cross-site Scripting vulnerability

sjbr/sr-feuser-register

Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords