Open Source Vulnerabilities

rubygems-update, org.jruby:jruby-stdlib

RubyGems Path Traversal vulnerability

tribalsystems/zenario

Zenario CMS vulnerable to CSRF

topthink/framework

ThinkPHP SQLi Vulnerability

topthink/framework

ThinkPHP SQLi Vulnerability

librenms/librenms

LibreNMS XSS Vulnerability

topthink/framework

ThinkPHP SQLi Vulnerability

org.apache.xmlrpc:xmlrpc

Apache XML-RPC XXE Vulnerability

org.apache.xmlrpc:xmlrpc

Apache XML-RPC vulnerable to Deserialization of Untrusted Data

ajenti

Ajenti Cross-site Scripting Via Filename

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins vulnerable to Cross-site Scripting

sabre/dav, sabre/dav, sabre/dav

SabreDAV Directory Traversal vulnerability

httplib2

httplib2 incorrectly checks SSL certificate

mantisbt/mantisbt

MantisBT allows XSS via Edit Filter page

mantisbt/mantisbt

MantisBT allows XSS via the Manage Filter page

org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

Apache Struts Code injection due to conversion error

baserproject/basercms

XSS in baserCMS before 4.1.4

org.apache.spark:spark-core_2.11, org.apache.spark:spark-core_2.10

Improper Input Validation in Apache Spark

karo

karo Metacharacter Handling Remote Command Execution

mercurial

Mercurial Out-of-bounds Read vulnerability

i18n

i18n Vulnerable to Denial of Service Attack

athlon1600/php-proxy

LFI in PHP-Proxy 5.1.0

fineuploader/php-traditional-server

FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability

athlon1600/php-proxy-app

Unauthenticated File Read in PHP Proxy

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Jenkins Cross-site Scripting vulnerability

kerberos, pykerberos

python-kerberos vulnerable to KDC spoofing attacks

showdoc/showdoc

Showdoc Forced Browsing

showdoc/showdoc

Showdoc CSRF Vulnerability

athlon1600/php-proxy-app

XSS in PHP-Proxy-App through v3.0

org.grails.plugins:asset-pipeline

Asset Pipeline plugin for Grails vulnerable to Path Traversal

umbraco

Umbraco CMS vulnerable to stored XSS

flarum/framework

Flarum Core Leaks PII

org.sonarsource.sonarqube:sonar-plugin-api

Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API

org.eclipse.rdf4j:rdf4j

RDF4J vulnerable to zip slip

bolt/bolt

Bolt Cross-site Scripting (XSS) via text input click preview button

dolibarr/dolibarr

Dolibarr stored cross-site scripting (XSS) vulnerability

phpservermon/phpservermon

CSRF in PHP Server Monitor before 3.3.2

dolibarr/dolibarr

Dolibarr reflected cross-site scripting (XSS) vulnerability

dolibarr/dolibarr

Dolibarr stored cross-site scripting (XSS) vulnerability

github.com/grafana/grafana

Grafana XSS Vulnerability

org.apache.karaf:apache-karaf

Improper Input Validation in Apache Karaf

dolibarr/dolibarr

Dolibarr error-based SQL injection vulnerability in product/card.php

dolibarr/dolibarr

Dolibarr SQL injection vulnerability in user/card.php

Microsoft.AspNetCore.WebSockets, Microsoft.AspNetCore.WebSockets, Microsoft.AspNetCore.Server.Kestrel.Core, System.Net.WebSockets.WebSocketProtocol, Microsoft.NETCore.App, Microsoft.NETCore.App, Microsoft.AspNetCore.App, Microsoft.AspNetCore.App, Microsoft.AspNetCore.All, Microsoft.AspNetCore.All

Denial of service in ASP.NET Core

Microsoft.NETCore.App, Microsoft.NETCore.App

Exposure of Sensitive Information in System.Net.Http

dolibarr/dolibarr

Dolibarr ERP and CRM contain XSS Vulnerability

microweber/microweber

Microweber XSS Vulnerability

com.haulmont.cuba:cuba-web-toolkit, com.haulmont.cuba:cuba-web-toolkit, com.haulmont.cuba:cuba-web-toolkit

The Reporting Addon for CUBA Platform has Persistent XSS

league/commonmark

PHP League CommonMark vulnerable to Cross-Site Scripting (XSS)

org.jenkins-ci.plugins:config-file-provider

Stored XSS vulnerability in Config File Provider Plugin

com.github.binarywang:weixin-java-common

XML External Entity Reference in weixin-java-tools