Open Source Vulnerabilities

typo3/cms-frontend, typo3/cms-frontend

TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function

typo3/cms-frontend, typo3/cms-frontend, typo3/cms-frontend, typo3/cms-frontend

TYPO3 is vulnerable to Spam Abuse in the native form content element

typo3/cms-backend, typo3/cms-backend, typo3/cms-backend, typo3/cms-backend

TYPO3 is vulnerable to Information Disclosure on the backend

typo3/cms-install, typo3/cms-install, typo3/cms-install, typo3/cms-install

TYPO3 is vulnerable to Insecure randomness in uniqid function

typo3/cms-install, typo3/cms-install, typo3/cms-install, typo3/cms-install

TYPO3 is vulnerable to Session Fixation

typo3/cms-backend, typo3/cms-backend, typo3/cms-backend, typo3/cms-backend

TYPO3 SQL injection vulnerability on the backend

typo3/cms-backend, typo3/cms-backend, typo3/cms-backend, typo3/cms-backend

TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend

typo3/cms-backend, typo3/cms-backend, typo3/cms-backend, typo3/cms-backend

TYPO3 Open Redirection vulnerability on the backend

typo3/cms-backend, typo3/cms-backend, typo3/cms-backend, typo3/cms-backend

TYPO3 Arbitrary Code Execution vulnerability on the backend

mercurial

Mercurial Improper Certificate Validation vulnerability

markdown2

Cross-site scripting in markdown2 for python

mantisbt/mantisbt

MantisBT Insufficient Session Expiration cookie string not reset after logout

libredwg

Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

opensc

UNKNOWN READ in sc_pkcs15_decode_pubkey_ec

, , ,

Use of Out-of-range Pointer Offset in vim/vim

linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

linux-aws-5.13, linux-azure-5.13, linux-gcp-5.13, linux-hwe-5.13, linux-intel-5.13, linux-oracle-5.13

linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-oracle-5.13, linux-raspi vulnerabilities

, , ,

, , ,

, , ,

gpac

epiphany-browser, epiphany-browser, epiphany-browser

gpac, gpac, gpac, gpac, gpac, gpac

epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser

libinput, libinput

libinput vulnerability

vyper

Buffer Overflow in vyper

Improper access control in humhub

Improper Access Control in shopware

linux-oem-5.14

linux-oem-5.14 vulnerabilities

Server-Side Request Forgery (SSRF) in Shopware

Malicious Javascript injection in OriginProtocol/origin-website

Server-Side Request Forgery in Databasir

Remote Code Execution in Databasir

Cross Site Scripting in Wire Webapp

convict

Prototype Pollution in convict