Open Source Vulnerabilities

org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

org.apache.activemq:activemq-client

Improper Input Validation in Apache ActiveMQ

org.apache.activemq:activemq-client

Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ

org.apache.activemq:activemq-client, org.apache.activemq:activemq-client, org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

librenms/librenms

LibreNMS SQL Injection

org.openrefine:main

OpenRefine Directory Traversal

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/http-foundation, symfony/http-foundation, symfony/http-foundation, symfony/http-foundation, symfony/http-foundation

Symfony DoS

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-bundle, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/security, symfony/security

Symfony CSRF Token Fixation

ansible, ansible, ansible

Ansible Logs Passwords If PowerShell ScriptBlock is Enabled

edu.internet2.middleware:shibboleth-identityprovider, org.opensaml:opensaml

Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java

elgg/elgg, elgg/elgg

Elgg open redirect

jupyter-notebook, notebook

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

silverstripe/framework, silverstripe/framework, silverstripe/framework, silverstripe/framework, silverstripe/framework, silverstripe/framework

Silverstripe Framework SQLi Vulnerability

org.uberfire:uberfire-parent

UberFire Framework Improperly Restricts Paths

intelliants/subrion

Subrion CMS vulnerable to CSRF in blog/delete

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat is vulnerable to HTTP request-smuggling

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Denial of Service vulnerability

org.apache.tomcat:tomcat

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Authentication in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote

Integer Overflow or Wraparound in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Input Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper

Missing XML Validation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Uncontrolled Resource Consumption in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Access Control in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Access Control in Apache Tomcat

org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util

Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

org.apache.tomcat:tomcat-catalina

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Inconsistent documentation in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Insufficient Verification of Data Authenticity in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request

org.jenkins-ci.plugins:saltstack

Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins

com.synopsys.integration:synopsys-detect

Jenkins Black Duck Detect Plugin information exposure vulnerability

jquery, jQuery, jquery-rails, org.webjars.npm:jquery

jQuery vulnerable to Cross-Site Scripting (XSS)

org.apache.archiva:archiva

Apache Archiva vulnerable to Cross-site Scripting

org.apache.archiva:archiva

Apache Archiva vulnerable to Cross Site Request Forgery

aubio

Aubio is vulnerable to denial of service via aubio_pitch_set_unit function

contao/contao, contao/core-bundle

Contao CSRF Token Bypass

phpmyadmin/phpmyadmin, phpmyadmin/phpmyadmin

phpMyAdmin CSRF Vulnerability

contao/contao, contao/contao, contao/core-bundle, contao/core-bundle, contao/core

Contao Does Not Invalidate Existing Sessions When Password Changes

phpmyadmin/phpmyadmin

phpMyAdmin Cross-site Scripting (XSS) vulnerability