Open Source Vulnerabilities

typo3/cms, typo3/cms, typo3/cms, typo3/cms, typo3/cms

Typo3 XSS Vulnerabilities

rtv

Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks

org.picketlink:picketlink-common

XML External Entity Reference in org.picketlink:picketlink-common

ca.juliusdavies:not-yet-commons-ssl

Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL

swift

OpenStack Swift Unauthorized delete of versioned Swift object

cinder, cinder, glance, nova

OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

swift

OpenStack Object Storage (Swift) Sensitive Data Exposure

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins has CRLF Injection Vulnerability in the CLI

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins allows Execution of Code by Opening a JRMP Listener

org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information in Jenkins Core

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins allows Deserialization of Untrusted Data via an XML File

org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information in Jenkins Core

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins allows Remote Users to Inject Build Parameters

org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information in Jenkins Core

org.jenkins-ci.main:jenkins-core

Incorrect Authorization in Jenkins Core

org.jenkins-ci.main:jenkins-core

Missing permissions check in Jenkins Core

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins Exposes Sensitive Information from Job Configuration

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins affected by Open Redirect Vulnerability

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins Exposes Sensitive Information via API URL

django, django

Django CSRF Protection Bypass

ipsilon, ipsilon, ipsilon, ipsilon

Session Fixation in ipsilon

nova, nova, nova

OpenStack Nova logs sensitive context from notification exceptions

horizon, horizon, horizon

OpenStack Horizon Cross-site Scripting (XSS)

org.apache.sling:org.apache.sling.auth.core

Apache Sling Authentication Service vulnerability

org.apache.drill:drill-common

Apache Drill vulnerable to Cross-site Scripting

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Input Validation in Apache Tomcat

commons-fileupload:commons-fileupload

Arbitrary file write in Apache Commons Fileupload

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in comm/multiprix.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in fourn/index.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in adherents/subscription/info.php

dolibarr/dolibarr

Dolibarr sensitive information disclosure

forkcms/forkcms

Fork CMS XSS via Highlight Parameter

forkcms/forkcms

Fork CMS XSS Vulnerability

passbolt/passbolt_api

Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar

dolibarr/dolibarr

Dolibarr ERP and CRM contain XSS Vulnerability

phpbb/phpbb

phpBB Server-Side Request Forgery (SSRF)

github.com/syncthing/syncthing

Syncthing vulnerable to symlink traversal and arbitrary file overwrite

lavalite/cms

Stored XSS in LavaLite 5.2.4

shiba

Shiba vulnerable to XSS leading to code execution

cobbler

Cobbler vulnerable to arbitrary code execution

quickapps/cms

QuickApps CMS Cross-site Scripting

products-cmfplone, products-cmfplone, products-cmfplone, plone, plone

Products.CMFPlone XSS in profile home_page property

desperado/xml-bundle

XXE Vulnerability in XMLBundle 0.1.7

ezsystems/ezpublish-legacy, ezsystems/ezpublish-legacy

eZ Publish Cross-site Scripting (XSS) vulnerability

django, django

Django Vulnerable to Cache Poisoning

django, django

Django Might Allow CSRF Requests via URL Verification

sqlalchemy

SQLAlchemy vulnerable to SQL injection

products-cmfplone, products-cmfplone, products-cmfplone, plone, plone

Products.CMFPlone Open Redirect Vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability

wpglobus/wpglobus

WPGlobus plugin Stored XSS & CSRF security vulnerability