Open Source Vulnerabilities

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token

jcbrand/converse.js, converse.js

Converse.js Exposure of Sensitive Information

org.owasp:dependency-check-maven

Path Traversal in OWASP Dependency-Check

nzedb/nzedb

nZEDb Cross-site Scripting (XSS) in the 404 error page

net.bull.javamelody:javamelody-core

Cross-site Scripting in JavaMelody

symfony/security-core, symfony/security-core, symfony/security-core, symfony/security-core, symfony/security, symfony/security, symfony/security, symfony/security, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Authentication Bypass

ptheofan/yii2-statemachine

Yii2-StateMachine extension for Yii2 XSS Vulnerability

symfony/security-core, symfony/security-core, symfony/security, symfony/security, symfony/symfony, symfony/symfony

Symfony Authentication Bypass

oauth2orize-fprm

oauth2orize-fprm XSS vulnerability

codeigniter/framework

CodeIgniter Session Fixation Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in product/card.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in product/card.php

knowledge-repo

Airbnb Knowledge Repo XSS In Comments

joomla/joomla-cms

Joomla! vulnerable to Cross-site Scripting

joomla/joomla-cms

Joomla! vulnerable to Cross-site Scripting

django-tastypie

Django Tastypie Improper Deserialization of YAML Data

ember-source, ember-source, ember-source, ember-source, ember-source

Ember.js Cross-site Scripting vulnerability

tlslite

tlslite remote denial of service vulnerability

salt

Salt vulnerable to Improper Certificate Validation

aubio

Aubio is vulnerable to a NULL pointer dereference

org.jenkins-ci.plugins:ssh-credentials, org.jenkins-ci.plugins:credentials

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin

org.jenkins-ci.plugins:saml

Jenkins SAML Plugin Session Fixation vulnerability

joplin

Joplin Vulnerable to Cross-site Scripting in Note Content

net.opentsdb:opentsdb

OpenTSDB Cross-site Scripting vulnerability

net.opentsdb:opentsdb

OpenTSDB Cross-site Scripting vulnerability

baserproject/basercms, baserproject/basercms

Sensitive Data Exposure in baserCMS

baserproject/basercms, baserproject/basercms

XSS in baserCMS

baserproject/basercms, baserproject/basercms

XSS in baserCMS

baserproject/basercms, baserproject/basercms

OS Command Injection in baserCMS

baserproject/basercms, baserproject/basercms

baserCMS arbitrary file upload vulnerability

deap

Improper Input Validation in Deap

angular-jwt

Auth0 angular-jwt misinterprets allowlist as regex

org.jenkins-ci.plugins:badge

Jenkins Badge Plugin cross-site scripting vulnerability

io.jenkins:configuration-as-code

Jenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive Information

org.jenkins-ci.plugins:fortify-cloudscan-jenkins-plugin

Arbitrary file write vulnerability in Jenkins Fortify CloudScan Plugin

org.jenkins-ci.plugins:urltrigger

URLTrigger Plugin server-side request forgery vulnerability

org.cloudfoundry.identity:cloudfoundry-identity-server, org.cloudfoundry.identity:cloudfoundry-identity-server, org.cloudfoundry.identity:cloudfoundry-identity-server, org.cloudfoundry.identity:cloudfoundry-identity-server

Cloud Foundry UAA open redirect

angular-redactor

Angular Redactor XSS Vulnerability

xapian-core

xapian-core Cross-site Scripting vulnerability

centreon/centreon, centreon/centreon

Centreon RCE Vulnerability

galaxy-app, galaxy-app

Galaxy cross-site scripting (XSS)

opencart/opencart

OpenCart Cross-Site Request Forgery (CSRF)

github.com/ethereum/go-ethereum

Go Ethereum LES protocol implementation vulnerable to Denial of Service

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in product/card.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in product/card.php

com.github.wxpay:wxpay-sdk

WeChat Pay Java SDK allows XXE

System.Private.ServiceModel, System.Private.ServiceModel, System.Private.ServiceModel, System.Private.ServiceModel, System.ServiceModel.Duplex, System.ServiceModel.Duplex, System.ServiceModel.Duplex, System.ServiceModel.Duplex, System.ServiceModel.Http, System.ServiceModel.Http, System.ServiceModel.Http, System.ServiceModel.Http, System.ServiceModel.NetTcp, System.ServiceModel.NetTcp, System.ServiceModel.NetTcp, System.ServiceModel.NetTcp, System.ServiceModel.Primitives, System.ServiceModel.Primitives, System.ServiceModel.Primitives, System.ServiceModel.Primitives, System.ServiceModel.Security, System.ServiceModel.Security, System.ServiceModel.Security, System.ServiceModel.Security

Improper Certificate Validation in Microsoft .NET Framework components

com.amazonaws:codedeploy

Jenkins AWS CodeDeploy Plugin has Insufficiently Protected Credentials

phpoffice/common

PHPOffice Common Improper Restriction of XML External Entity Reference