Open Source Vulnerabilities

sjbr/sr-feuser-register

Frontend User Registration extension for TYPO3 does not properly verify access rights

org.springframework:spring-core

Spring Framework Inefficient Regular Expression Complexity

phpmyadmin/phpmyadmin

phpMyAdmin HTTP Response Splitting Vulnerability

typo3/cms, typo3/cms, typo3/cms, typo3/cms, typo3/cms

Typo3 Backend XSS Vulnerability

typo3/cms, typo3/cms, typo3/cms

TYPO3 leaks a hash secret in an error message

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Cross-site scripting in Apache Tomcat

zodb3

Zope Object Database (ZODB) vulnerable to arbitrary Python code execution in ZEO storage servers

zodb3

Zope Object Database (ZODB) Authentication bypass in ZEO storage servers

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information in Apache Tomcat

moin

MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature

typo3/cms, typo3/cms, typo3/cms

Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection

moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

typo3/cms, typo3/cms, typo3/cms

Authentication library in TYPO3 vulnerable to session fixation

org.apache.santuario:xmlsec

Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

org.apache.geronimo.plugins:console

Apache Geronimo Application Server CSRF vulnerabilities

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Denial of Service via Malformed Request Headers

org.apache.geronimo.plugins:console

Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities

org.apache.jackrabbit:jackrabbit

Apache Jackrabbit contains Cross-site Scripting

plone

Plone Cross-site Scripting vulnerability in the LiveSearch module

adaptcms/adaptcms

AdaptCMS SQL Injection vulnerability

webrick

WEBrick Denial of Service Vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat information disclosure vulnerability

joomla/framework

Joomla! Open Redirect vulnerability

django, django, django

Django cross-site request forgery (CSRF) vulnerability

ghostscript

Heap-buffer-overflow in s_PFBD_process

linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-oem-osp1, linux-oracle, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

,

linux

linux - security update

jackson-databind

jackson-databind - security update

moin, moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

trac

Trac Cross-site Scripting (XSS) vulnerability

joomla/framework

Joomla! Open Redirect vulnerability

joomla/joomla-platform

Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

drupal/drupal

Drupal vulnerable to Cross-site Scripting

joomla/joomla-platform

Joomla! allows attackers to access cached pages

mehrwert/phpmyadmin

phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability

mercurial

Mercurial Directory traversal vulnerability

trac

Trac Open Redirect vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Directory Traversal vulnerability

typo3/cms-core, typo3/cms-core, typo3/cms-core

TYPO3 Unrestricted File Upload vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Path Traversal Vulnerability

django, django, django

Django Cross-site scripting (XSS) vulnerability

struts:struts

Apache Struts Cross-site Scripting vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-core

Apache Tomcat Cross-site scripting (XSS) vulnerability