Open Source Vulnerabilities

microweber/microweber

Unrestricted file upload leads to stored cross-site scripting in Microweber

code.gitea.io/gitea

Gitea Missing Authorization vulnerability

microweber/microweber

Static Code Injection in Microweber

phpmyadmin/phpmyadmin

Exposure of Sensitive Information to an Unauthorized Actor in PhpMyAdmin

github.com/IceWhaleTech/CasaOS

Command Injection in CasaOS

trytond, trytond, trytond, proteus, proteus, proteus

XML Entity Expansion in trytond and proteus

org.postgresql:postgresql

Path traversal in org.postgresql:postgresql

trytond, trytond, trytond, proteus, proteus, proteus

Improper Restriction of XML External Entity Reference in trytond and proteus

croogo/croogo

Unrestricted Upload of File with Dangerous Type in Croogo

gerapy

Duplicate Advisory: Incorrect Authorization in Gerapy

org.jeecgframework.boot:jeecg-boot-base, org.jeecgframework.boot:jeecg-boot-base-core

Cross-site Scripting in jeecg-boot

php

Heap-buffer-overflow in zend_gc_collect_cycles

ghostscript

UNKNOWN READ in pdfi_fapi_get_glyph

opensc

Heap-buffer-overflow in do_fileid

Buffer overflow in pjsip

Missing Authorization in saleor/saleor

Missing Authorization in gogs/gogs

vim

vim - security update

tryton-server

tryton-server - security update

tryton-proteus

tryton-proteus - security update

Improper Authorization in orchardcms/orchardcore

Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

minidlna, minidlna

Security update for minidlna

github.com/nats-io/nats-server/v2, github.com/nats-io/nats-streaming-server

Arbitrary file write in nats-server

,

gerapy

Unauthenticated control plane denial of service attack in Istio

subversion

subversion vulnerability

linux, linux, linux

linux, linux, linux

linux, linux, linux

linux, linux, linux

linux, linux, linux