Open Source Vulnerabilities

katello

Katello SQL Injection vulnerabilities

nova

OpenStack Nova VMware instance leak potentially leading to compute DoS

rubygems-update, rubygems-update, rubygems-update

RubyGems vulnerable to DNS hijack attack

numpy

Numpy arbitrary file write via symlink attack

rubygems-update, rubygems-update, rubygems-update, rubygems-update

RubyGems Regular Expression Denial of Service vulnerability

suds, suds-py3

Improper Link Resolution Before File Access in Suds

phpmyadmin/phpmyadmin

phpMyAdmin Local file inclusion through transformation feature

org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core

Unrestricted Upload of File with Dangerous Type Apache Tomcat

microweber/microweber

Microweber XSS Vulnerability

Microsoft.ChakraCore

ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

Microsoft.ChakraCore

ChakraCore vulnerable to remote code execution

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore vulnerable to remote code execution

org.jenkins-ci.plugins:git

Cross-Site Request Forgery in Jenkins Git Plugin

org.wildfly.core:wildfly-server

Improper Limitation of a Pathname to a Restricted Directory in WildFly

org.apache.activemq:activemq-client

Improper Neutralization of Input During Web Page Generation Apache ActiveMQ

org.opencastproject:base

Opencast RCE Vulnerability

phpmyadmin/phpmyadmin

phpMyAdmin CSRF Vulnerability

org.apache.struts:struts2-core

Apache Struts forced double OGNL evaluation

org.apache.nifi:nifi, org.apache.nifi:nifi

Cross-site Scripting in Apache NiFi

simplesamlphp/simplesamlphp-module-infocard

SimpleSAMLphp InfoCard module Incorrect signature verification

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Deserialization of Untrusted Data in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Authentication in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Session Fixation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Path Traversal in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-Site Request Forgery in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-site Scripting in Jenkins Core

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-site Scripting in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core, org.kohsuke.stapler:stapler-parent

Improper Limitation of a Pathname to a Restricted Directory in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Certificate Validation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Input Validation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Input Validation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Input Validation in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Improper Neutralization of Input During Web Page Generation in Jenkins

mercurial

Mercurial missing symlink check

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

OS Command Injection in Jenkins

symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/form, symfony/form, symfony/form, symfony/form, symfony/form, symfony/form

Symfony Path Disclosure

org.jboss.mod_cluster:mod_cluster-parent

mod_cluster Denial of Service vulnerability

symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security-http, symfony/security, symfony/security, symfony/security, symfony/security, symfony/security, symfony/security, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony, symfony/symfony

Symfony Open Redirect

simplesamlphp/simplesamlphp

SimpleSAMLphp Authentication context bypass in the multiauth module

simplesamlphp/simplesamlphp

SimpleSAMLphp XSS Vulnerability

rubygems-update

RubyGems Improper Input Validation vulnerability

simplesamlphp/simplesamlphp

SimpleSAMLphp Signature validation bypass