Open Source Vulnerabilities

topthink/framework

ThinkPHP SQL Injection vulnerability

Microsoft.ChakraCore

ChakraCore information disclosure vulnerability

pimcore/pimcore

Pimcore XSS Vulnerability

thorsten/phpmyfaq

phpMyFAQ CSRF

org.apache.cayenne:cayenne-parent, org.apache.cayenne:cayenne-parent

XML External Entity Reference in Apache Cayenne

org.dojotoolkit:dojo

Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness

gogs.io/gogs

Gogs XSS Vulnerability

intelliants/subrion

Subrion CMS CSRF Vulnerability

intelliants/subrion

Subrion Cross-site scripting (XSS) vulnerability

Auth0-ASPNET-Owin, auth0-aspnet

Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery

intelliants/subrion

Subrion CMS Cross-site scripting in search

intelliants/subrion

Subrion CMS Cross-site Scripting

intelliants/subrion

Subrion CMS PHP Object Injection

intelliants/subrion

Subrion CMS Stored Cross-site Scripting (XSS)

intelliants/subrion

Subrion Cross-site Scripting (XSS)

wallabag/wallabag

Wallabag cross-site scripting (XSS) vulnerability

net.mingsoft:ms-mcms

Mingsoft MCMS CSRF vulnerability

nova

OpenStack Nova Long server names grow nova-api log files significantly

org.xwiki.platform:xwiki-platform

XWiki XSS Vulnerability

nova

OpenStack Nova Denial of Service in network source security groups

nova

OpenStack Nova Multiple directory traversal vulnerabilities

nova, nova

OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability

keystone

OpenStack Keystone Token authorization for a user in a disabled tenant is allowed

keystone

OpenStack Keystone Improper Authentication vulnerability

nova

OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information

smarty/smarty

Smarty Path Traversal Vulnerability

nova, nova

OpenStack Compute (nova) allows remote authenticated users to cause a denial of service

cinder

OpenStack Cinder Denial of Service using XML entities

nova

OpenStack Nova DoS through ephemeral disk backing files

nova

OpenStack Nova live snapshots use an insecure local directory

nova

OpenStack Nova Potential Xen connection password leak via StorageError

nova

OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service

nova, nova

OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity

nova

OpenStack Nova instance migration process does not stop when instance is deleted

nova, nova

OpenStack Compute (Nova) Denial of Service vulnerability

nova, nova

OpenStack Compute (Nova) allows remote attackers to bypass intended restriction

oslo-utils

OpenStack Oslo utility sensitive information exposure via log files

nova

OpenStack Nova host data access through resize/migration

web-feet/coastercms

Coaster CMS Stored Cross-site Scripting vulnerability

elefant/cms

Elefant CMS Code Execution Vulnerability

topthink/framework

ThinkPHP SQL injection vulnerability

quickapps/cms

QuickAppsCMS Cross-Site Request Forgery (CSRF)

alchemy_cms

Withdrawn Advisory: AlchemyCMS is vulnerable to stored XSS via the /admin/pictures image field

org.apache.struts:struts2-core

Cross-site Scripting in Apache Struts

org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

Arbitrary code execution in Apache Struts 2

org.apache.struts:struts2-core

Cross-site Scripting in Apache Struts

org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

Arbitrary code execution in Apache Struts 2

mediawiki/core

Mediawiki tarball is missing .htaccess files

org.apache.solr:solr-core, org.apache.solr:solr-core

Apache Solr insecure inter-node communication

opencc

Open Chinese Convert subject to Denial of Service via Out-of-bounds Read