Open Source Vulnerabilities

org.apache.hadoop:hadoop-client, org.apache.hadoop:hadoop-client, org.apache.hadoop:hadoop-client

Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop

concrete5/concrete5

Concrete5 Vulnerable to Cross-Site Scripting (XSS)

github.com/vbatts/tar-split

tar-split memory exhaustion

org.jenkins-ci.plugins:git-client

Insecure temporary file usage in Jenkins Git Client Plugin

github.com/moby/moby

Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)

genix/cms

MetalGenix GeniXCMS vulnerable to SQL Injection

home-assistant-frontend

Withdrawn Advisory: Home Assistant Frontend XSS Vulnerability

Microsoft.ChakraCore

Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

Microsoft.ChakraCore

Chakra Core vulnerable to privilege escalation due to type confusion

Microsoft.ChakraCore

Chakra Core vulnerable to privilege escalation due to reading an invalid pointer

sanic

Sanic arbitrary file read and directory traversal

filp/whoops

filp whoops Cross-site Scripting vulnerability

Microsoft.NETCore.App, Microsoft.NETCore.App

Improper Input Validation in Microsoft.NETCore.App

zetacomponents/mail

Zeta Components Mail Arbitrary code execution via a crafted email address

typo3/cms, typo3/cms

TYPO3 Arbitrary Code Execution

codeigniter4/framework

CodeIgniter HTTP Header Injection

com.neovisionaries:nv-websocket-client

nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor

nilsteampassnet/teampass

TeamPass stored cross-site scripting (XSS) vulnerability

nilsteampassnet/teampass

TeamPass arbitrary file upload vulnerability

rubygems-update, rubygems-update, rubygems-update, rubygems-update

RubyGems Regular Expression Denial of Service

rubygems-update, rubygems-update, rubygems-update

RubyGems Improper Input Validation vulnerability

swauth

OpenStack Swauth object/proxy server writing Auth Token to log file

org.springframework.amqp:spring-amqp, org.springframework.amqp:spring-amqp, org.springframework.amqp:spring-amqp

Deserialization of Untrusted Data in Spring AMQP

org.wildfly:wildfly-undertow

Improper Neutralization of CRLF Sequences in Wildfly Undertow

io.undertow:undertow-core, io.undertow:undertow-core

Undertow Uncaught Exception vulnerability

aubio

Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function

org.richfaces:richfaces, org.richfaces:richfaces

JBoss RichFaces Improper Input Validation vulnerability

python-keystoneclient

python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware

org.opendaylight.integration:distribution-karaf

Password change doesn't result in Karaf clearing cache

Microsoft.ChakraCore

ChakraCore vulnerable to remote code execution due to insufficient InlineCache check

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

genix/cms

GeniXCMS XSS Vulnerability

calibreweb

SQL injection in calibreweb

code.gitea.io/gitea

Shell command injection in gitea

formidable

Formidable arbitrary file upload

connect-multiparty

Connect-Multiparty allows arbitrary file upload

tiddlywiki

Withdrawn: Code execution via SVG file upload in tiddlywiki

bootstrap-table

Cross-site Scripting in bootstrap-table

publify_core

Publify exposes article metadata

publify_core

Publify vulnerable to code injection

publify_core

Publify Incorrect Authorization

org.apache.tika:tika-core, org.apache.tika:tika-core

Regular expression denial of service in apache tika

org.apache.tika:tika, org.apache.tika:tika

Apache Tika vulnerable to uncontrolled memory consumption

IpMatcher

Improper Input Validation in IpMatcher

org.craftercms:crafter-studio

Crafter CMS Crafter Studio vulnerable to Improper Control of Dynamically-Managed Code Resources

org.craftercms:craftercms

Log value insertion in craftercms

org.craftercms:craftercms

Improper Privilege Management in craftercms

upb

Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert