Open Source Vulnerabilities

microweber/microweber

Unrestricted Upload of File with Dangerous Type in microweber

saleor

saleor Missing Authorization vulnerability

gogs.io/gogs

Duplicate Advisory: Improper Authorization in Gogs

gogs.io/gogs

SSRF in repository migration

microweber/microweber

Cross-site Scripting in microweber

nystudio107/craft-seomatic

Server-side Template Injection in nystudio107/craft-seomatic

simple-git

Command injection in simple-git

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle denial-of-service risk in the draft files area

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle stored Cross-site Scripting

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor

moodle/moodle, moodle/moodle, moodle/moodle

Moodle reflected XSS

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Blind SQL injection possible via MNet authentication

moodle/moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Information Disclosure vulnerability

microweber/microweber

Unrestricted Upload of File with Dangerous Type in Microweber

com.alibaba.nacos:nacos-common, com.alibaba.nacos:nacos-common

Cross-site Scripting in Nacos

url-js

Improper Input Validation in url-js

opensc

Stack-buffer-overflow in sc_format_oid

nbd, nbd

nbd - security update

Command Injection in Parse server

parse-server

Command injection in Parse Server through prototype pollution

pillow

Infinite loop in Pillow

pillow

Path traversal in Pillow

cobbler

Improper Authorization in cobbler

ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject

pjproject, pjproject, ring, ring

Improper Input Validation