Open Source Vulnerabilities

ams, ams, ams, ams, ams, ams, ams, ams

radare2, radare2, radare2, radare2, radare2, radare2, radare2

curl, curl, curl, curl

Security update for curl

tomcat9, tomcat9, tomcat9

tomcat8, tomcat9

Response mix-up with WebSocket concurrent send and close

mapproxy

MapProxy vulnerable to cross-site scripting in demo service

cobbler

Cobbler has Exposed Dangerous Method or Function

ansible

Ansible Sandbox Escape via Symlink Attack

sosreport

SoSReport Predictable Tmp File Names

io.netty:netty, io.netty:netty, io.netty:netty, io.netty:netty, io.netty:netty, io.netty:netty-all

Netty denial of service vulnerability

sickrage

SiCKRAGE Discloses Plaintext Credentials

rap2hpoutre/laravel-log-viewer

Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0

Microsoft.ChakraCore

ChakraCore information disclosure vulnerability

Microsoft.ChakraCore

ChakraCore Security Bypass

Microsoft.ChakraCore

ChakraCore information disclosure vulnerability

org.apache.sentry:sentry

Apache Sentry may allow attacker to access/remove data from Sentry protected table

org.apache.pdfbox:pdfbox, org.apache.pdfbox:pdfbox

Loop with Unreachable Exit Condition in Apache PDFBox

org.apache.cassandra:cassandra-all

Missing Authentication for Critical Function in Apache Cassandra

simplesamlphp/saml2, simplesamlphp/saml2, simplesamlphp/saml2

SimpleSAMLphp Improper Verification of Cryptographic Signature

npm

Incorrect Permission Assignment for Critical Resource in NPM

ep_etherpad-lite

Etherpad Lite Access Restriction Bypass

simplesamlphp/simplesamlphp

SimpleSAMLphp Use of insecure connection charset (sqlauth module)

mysql:mysql-connector-java

Improper Privilege Management in MySQL Connectors Java

craftcms/cms

Craft CMS Vulnerable to Server-Side Template Injection

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Incorrect Authorization in Jenkins

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Missing Release of Resource after Effective Lifetime in Jenkins

org.jenkins-ci.main:jenkins-core

Infinite Loop in Jenkins Core