Open Source Vulnerabilities

mailman

Mailman Cross-site scripting (XSS) vulnerability

org.apache.tomcat:tomcat

Jakarta Tomcat Directory Listing vulnerability

org.apache.tomcat:tomcat

Jakarta Tomcat Denial of Service vulnerability

httpx

Improper Input Validation in httpx

snipe/snipe-it

Improper Access Control in snipe/snipe-it

facturascripts/facturascripts

Cross site scripting in FacturaScripts

github.com/containerd/imgcrypt

Incorrect authorization in github.com/containerd/imgcrypt

thunderbird, thunderbird-l10n

Updated thunderbird packages fix security vulnerabilities

firefox, firefox-l10n, nss, rootcerts

Updated firefox/nss/rootcerts packages fix security vulnerability

org.xwiki.commons:xwiki-commons-velocity, org.xwiki.commons:xwiki-commons-velocity

Arbitrary filesystem write access from velocity.

zendframework/zend-diactoros, zendframework/zend-feed, zendframework/zend-http

URL Rewrite vulnerability in multiple zendframework components

shopware/shopware

Multiple valid tokens for password reset in Shopware

shopware/shopware

Malfunction of CSRF token validation in Shopware

org.keycloak:keycloak-parent

Reflected XSS on clients-registrations endpoint

org.keycloak:keycloak-services

Keycloak is vulnerable to IDN homograph attack

org.keycloak:keycloak-services

Keycloak is vulnerable to IDN homograph attack

shopware/shopware

Reflected Cross-site Scripting in Shopware storefront

sqlite3

Denial-of-Service when binding invalid parameters in sqlite3

libsdl1.2, libsdl1.2, libsdl1.2

libsdl1.2, libsdl2 vulnerability

Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml

org.xwiki.commons:xwiki-commons-xml, org.xwiki.commons:xwiki-commons-xml, org.xwiki.commons:xwiki-commons-xml

Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml

curl, curl, curl

curl vulnerabilities

org.keycloak:keycloak-oidc-client-adapter-pom

OIDC Logout redirect in keycloak

ghostscript

ghostscript vulnerability

networkd-dispatcher, networkd-dispatcher, networkd-dispatcher

networkd-dispatcher vulnerabilities

kernel-linus

Updated kernel-linus packages fix security vulnerabilities

kernel, kmod-virtualbox, kmod-xtables-addons, xtables-addons

Updated kernel packages fix security vulnerabilities

Stored XSS via upload plugin functionality in zip format in neorazorx/facturascripts