Open Source Vulnerabilities

dolibarr/dolibarr

Dolibarr ERP and CRM contain XSS Vulnerability

dolibarr/dolibarr

Dolibarr Cross-Site Scripting (XSS) vulnerability

dolibarr/dolibarr

Dolibarr SQL injection via type parameter in product/stats/card.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability

topthink/framework

thinkphp SQL Injection via the index.php s parameter

moodle/moodle

Moodle Cross-site Scripting in the Course summary filter of the Add a new course

phpmyadmin/phpmyadmin

phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution

suricata-update

OISF suricata-update unsafely deserializes YAML data

tryton, tryton, tryton, tryton, trytond, trytond, trytond, trytond, trytond

Tryton vulnerable to arbitrary command execution

genix/cms

GeniXCMS Cross-site scripting (XSS) vulnerability

rainlab/user-plugin

User Plugin for October CSS Allows XSS

dolibarr/dolibarr

Dolibarr Cross-site scripting (XSS) vulnerability

matrix-synapse

Matrix Synapse DoS

org.jenkins-ci.plugins:google-login

Jenkins Google Login Plugin Open Redirect vulnerability

org.jenkins-ci.plugins:google-login

Jenkins Google Login Plugin Session Fixation vulnerability

org.jenkins-ci.plugins:s3

Stored XSS vulnerability in Jenkins S3 Publisher Plugin

org.jenkins-ci.plugins:htmlpublisher

Jenkins HTML Publisher Plugin path traversal vulnerability

org.jenkins-ci.plugins:email-ext

Jenkins Email Extension Plugin showed plain text SMTP password in configuration form field

joomla/joomla-cms

Joomla! XSS Vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Portfolio forum caller class allows a user to download any file

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Portfolio script allows instantiation of class chosen by user

org.apache.nifi:nifi

Apache NiFi JMS Deserialization issue

org.apache.nifi:nifi-standard-processors

Improper Restriction of XML External Entity Reference in Apache NiFi

org.graylog2:graylog2-server

Cross-site Scripting in Graylog

org.graylog2:graylog2-server

Cross-site Scripting in Graylog Server

opencart/opencart

OpenCart Path Traversal

opencart/opencart

OpenCart Path Traversal

org.apache.struts:struts-core, struts:struts

Improper Input Validation in Apache Struts

org.apache.struts:struts2-core

Special top object can be used to access Struts' internals

org.apache.struts:struts2-core

Apache Struts vulnerable to possible DoS attack when using URLValidator

org.apache.struts:struts2-parent

Apache Struts RCE Vulnerability

simplesamlphp/simplesamlphp

SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module

dolibarr/dolibarr

Dolibarr SQL injection vulnerability

pagekit/pagekit

Pagekit Stored Cross-site Scripting

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin server-side request forgery (SSRF)

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Denial of service (DOS) attack in transformation feature

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin PHP code injection

org.jenkins-ci.plugins:git

Server-Side Request Forgery in Jenkins Git Plugin

org.jvnet.hudson.plugins:groovy-postbuild

Jenkins Groovy Postbuild Plugin vulnerable to Cross-site Scripting

org.jenkins-ci.plugins:ghprb

Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability

org.jenkins-ci.plugins:github-branch-source

Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery

org.jenkins-ci.plugins:cas-plugin

Jenkins CAS Plugin Server-Side Request Forgery vulnerability

com.coravy.hudson.plugins.github:github

Jenkins GitHub Plugin server-side request forgery vulnerability exists

org.csanchez.jenkins.plugins:kubernetes

Exposure of Sensitive Information in Jenkins Kubernetes Plugin

com.coravy.hudson.plugins.github:github

Jenkins GitHub Plugin exposure of sensitive information vulnerability exists

com.blackducksoftware.integration:blackduck-hub

Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin

org.jenkins-ci.ruby-plugins:gitlab-hook

Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text

com.blackducksoftware.integration:blackduck-hub

XML External Entity processing vulnerability in Jenkins Black Duck Hub Plugin

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Neutralization of Input During Web Page Generation in Apache Tomcat