Open Source Vulnerabilities

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

org.jenkins-ci.plugins:publish-over-cifs

Jenkins Publisher Over CIFS Plugin confused deputy vulnerability

org.jenkins-ci.plugins:confluence-publisher

Server-Side Request Forgery (SSRF) in Jenkins Confluence Publisher Plugin

org.apache.struts:struts-core, struts:struts

Withdrawn Advisory: Apache Struts XSS

ember-source, ember-source, ember-source, ember-source, ember-source

ember-source Cross-site Scripting vulnerability

org.apache.activemq:activemq-client

Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Host Header Injection

gleez/cms

Gleez CMS CSRF Allows Adding of Administrator Accounts

code.gitea.io/gitea, gogs.io/gogs

Gogs and Gitea SSRF Vulnerability

elefant/cms

Elefant CMS Improper Input Validation

neutron, neutron

OpenStack Neutron Improper Input Validation vulnerability

cobbler

Cobbler XSS Vulnerability

villagedefrance/opencart-overclocked

OpenCart-Overclocked Cross-site Scripting Vulnerability

neutron, neutron

OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

neutron, neutron

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

zendframework/zend-mail, zendframework/zend-mail, zendframework/zend-mail, zendframework/zend-mail

zend-mail remote code execution via Sendmail adapter

tqdm, tqdm

TDQM Arbitrary Code Execution

zendframework/zendframework

Zend Framework Allows SQL Injection

zendframework/zendframework, zendframework/zendframework1

Zend Framework Allows SQL Injection

org.jboss.fuse:jboss-fuse

Exposure of Sensitive Information to an Unauthorized Actor in JBoss Fuse

cakephp/cakephp, cakephp/cakephp, cakephp/cakephp, cakephp/cakephp, cakephp/cakephp, cakephp/cakephp

CakePHP allows remote attackers to spoof their IP

elefant/cms

Elefant CMS CSRF Vulnerability

nokogiri

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

showdoc/showdoc

Showdoc XSS Vulnerability

gleez/cms

Gleez CMS Vulnerable to Cross-site Scripting in media/imagecache/resize

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site Scripting (XSS) in the import dialog

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment