Open Source Vulnerabilities

Microsoft.NETCore.App, Microsoft.NETCore.App, System.Private.Uri

Improper Input Validation in .Net Framework API's

org.jolokia:jolokia-core

Cross-site Scripting in Jolokia agent

org.eclipse.jetty:jetty-server

Improper Input Validation in Jetty

dolibarr/dolibarr

Dolibarr Stored Cross-site Scripting in expensereport/card.php

passenger

Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability

passenger

Phusion Passenger Race Condition Allows Privilege Escalation

org.jolokia:jolokia-core

Injection in Jolokia agent

dolibarr/dolibarr

Dolibarr SQL injection via the integer parameters qty and value_unit

org.apache.solr:solr-core

Apache Solr Kerberos delegation token functionality flaws

baserproject/basercms, baserproject/basercms

baserCMS SQL Injection vulnerability

baserproject/basercms, baserproject/basercms

Code Injection in baserCMS

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/security, symfony/security

Symfony Session Fixation Vulnerability

pdfjs-dist, pdfjs-dist

Malicious PDF can inject JavaScript into PDF Viewer

intelliants/subrion

Subrion CMS vulnerable to CSRF in admin/blocks/add

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/security

Symfony Open Redirect

paypal/merchant-sdk-php

PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability

symfony/intl, symfony/intl, symfony/intl, symfony/intl, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Directory Traversal

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle

Symfony Open Redirect

genix/cms

GeniXCMS SQL injection vulnerability

craftcms/cms

Craft CMS Cross-site Scripting (XSS) Vulnerability

silverstripe/cms, silverstripe/cms

Silverstripe CMS XSS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin Open Redirect

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin CSS Injection Vulnerability

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin DoS Vulnerability

org.apache.syncope:syncope, org.apache.syncope:syncope

Apache Syncope JEXL Code Injection

org.jboss.resteasy:resteasy-client, org.jboss.resteasy:resteasy-client

Incorrect Privilege Assignment in RESTEasy

org.hibernate:hibernate-validator, org.hibernate:hibernate-validator, org.hibernate:hibernate-validator

Improper Authentication in Hibernate Validator

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Verification of Source of a Communication Channel in Apache Tomcat

moodle/moodle

Moodle SSRF Vulnerability

DotNetNuke.Core

DNN XSS Vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Directory Traversal in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Authentication in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Use of Hard-coded Cryptographic Key in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Insertion of Sensitive Information into Log File in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat does not properly handle an invalid Transfer-Encoding header

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Authentication in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Authentication Bypass in Apache Tomcat

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin SSRF in replication

donfig

Donfig Command Injection in collect_yaml method

select2

Improper Neutralization of Input During Web Page Generation in Select2

snipe/snipe-it

Snipe-IT XSS Vulnerability

org.springframework:spring-webmvc, org.springframework:spring-webmvc

Improper Neutralization of Input During Web Page Generation in Spring Framework

org.apache.activemq:apollo-project

Apache ActiveMQ Apollo XXE Vulnerability

org.apache.activemq:activemq-client

Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

org.apache.activemq:activemq-client, org.apache.activemq:activemq-broker

Improper Restriction of XML External Entity Reference in Apache ActiveMQ

org.apache.activemq:activemq-broker, org.apache.activemq:activemq-jaas

Improper Authentication in Apache WSS4J