Open Source Vulnerabilities

LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting

python39, python39-core, python39-core, python39, python39-core, python39-documentation, python39, python39-core, python39-documentation

Security update for python39

git, git, git, git

Security update for git

subversion

Security update for subversion

Vendure - XSS via SVG File Upload

Snipe-IT - Host Header Injection

fuse-exfat, fuse-exfat, fuse-exfat

ntfs-3g, ntfs-3g, ntfs-3g

ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g

ntfs-3g

CVE-2021-46790 affecting package ntfs-3g for versions less than 2022.5.17-1

fuse-exfat, fuse-exfat, fuse-exfat, fuse-exfat, fuse-exfat, fuse-exfat, fuse-exfat, fuse-exfat

ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g, ntfs-3g

libinput

libinput vulnerability

mono

Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability

org.jruby:jruby-core

Cross-site Scripting in in JRuby

org.apache.activemq:activemq-parent

Cross-site request forgery in Apache ActiveMQ

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

typo3/cms

TYPO3 PHP remote file inclusion vulnerability

typo3/cms-saltedpasswords

TYPO3 Authentication Bypass via Salted user password hashes extension

moin, moin

MoinMoin Cross-site Scripting (XSS) vulnerability

moin

MoinMoin has improper default configuration

org.apache.activemq:activemq-parent

Cross-site scripting in Apache ActiveMQ

moin, moin

MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration

moin

MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set

moin, moin

MoinMoin improper sanitizes user profiles

in2code/powermail

TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors

puppet, puppet

Puppet arbitrary files overwrite via a symlink attack

ruby-sinatra, ruby-sinatra, ruby-sinatra