Open Source Vulnerabilities

org.bouncycastle:bcprov-jdk15on

Improper Input Validation in Bouncy Castle

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins allows HTTP Injection and Response Splitting

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins allows Cross-Site Scripting (XSS)

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins affected by Open Redirect Vulnerability

salt

Salt Improper Access Control

python-glanceclient

python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate

swift

OpenStack Swift Unchecked user input in XML responses

pymongo

Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

python-bugzilla

python-bugzilla has improper validation of X.509 certificates

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin micro history Implementation XSS Vulnerability

django, django, django, django

Django Allows Open Redirects

eyed3

eyeD3 is vulnerable to arbitrary file modification via symlink attack

logilab-common

Creation of Temporary File With Insecure Permissions in logilab-commons

django, django, django, django

Django data leakage via querystring manipulation in admin

logilab-common

Improper Link Resolution Before File Access in logilab-commons

django, django, django, django

Django Middleware Enables Session Hijacking

requests

Exposure of Sensitive Information to an Unauthorized Actor in Requests

django, django, django

Django Incorrectly Validates URLs

horizon

OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin full path disclosure vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin vulnerable to Cross-site Scripting

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin vulnerable to Cross-Site Request Forgery

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin vulnerable to Cross-site Scripting

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin vulnerable to Cross-site Scripting

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Cross-site scripting (XSS) vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Denial Of Service (DOS) attack

mercurial

Mercurial arbitrary code execution vulnerability

mercurial

Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository

mercurial

Mercurial arbitrary code execution via a crafted git ext:: URL

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Unsafe comparison of XSRF/CSRF token

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin XSS Vulnerability

django, django, django

Django Denial-of-service possibility with strip_tags

django, django, django, django

Django cross-site scripting (XSS) attack via user-supplied redirect URLs

mercurial

Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command

pillow

Pillow denial of service via PNG bomb

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin cross-site scripting vulnerability in crafted view name

ipython

IPython Notebook vulnerable to improper validation of the origin of websocket requests

pillow, pillow

Pillow denial of service via Crafted Block Size

pillow

Pillow is vulnerable to Denial of Service (DOS) in the Jpeg2KImagePlugin

org.python:jython-standalone

Jython Improper Access Restrictions vulnerability

simplejson

simplejson before 2.6.1 vulnerable to array index error

django, django, django

Django denial of service via file upload naming

notebook, ipython

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

twig/twig

Twig remote code execution in templates

ansible

Ansible Arbitrary Code Execution

ansible

Ansible uses a socket with predictable filename in /tmp

ansible

Ansible Arbitrary File Overwrite Vulnerability

webrick

WEBrick RCE Vulnerability

openssl

Ruby OpenSSL DoS Vulnerability