Open Source Vulnerabilities

vim, vim, vim

vim security update

golang, golang, golang

golang security update

mosquitto, mosquitto, mosquitto

mosquitto security update

ruby, ruby, ruby

ruby security update

sphinx, sphinx, sphinx

sphinx security update

kernel, kernel, kernel

kernel security update

libarchive, libarchive, libarchive

libarchive security update

qt5-qtsvg, qt5-qtsvg, qt5-qtsvg

qt5-qtsvg security update

lighttpd, lighttpd, lighttpd

lighttpd security update

phpmyadmin, phpmyadmin, phpmyadmin

phpmyadmin, phpmyadmin, phpmyadmin

phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin

phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin

net.mingsoft:ms-mcms

Arbitrary File Upload in Mingsoft MCMS

net.mingsoft:ms-mcms

RCE in Mingsoft MCMS

net.mingsoft:ms-mcms

Arbitrary file upload in Mingsoft MCMS

ghostscript

Heap-use-after-free in pdfi_cspace_free_callback

snipe/snipe-it

Incorrect Default Permissions and Improper Access Control in snipe-it

OrchardCore

orchardcore is vulnerable to Cross-site Scripting

nanoid

Exposure of Sensitive Information to an Unauthorized Actor in nanoid

dolibarr/dolibarr

SQL Injection in dolibarr

node-fetch, node-fetch

node-fetch forwards secure headers to untrusted sites

calibreweb

calibre-web is vulnerable to Cross-site Scripting

bytefury/crater

crater is vulnerable to Unrestricted Upload of File with Dangerous Type

bytefury/crater

Unrestricted Upload of File with Dangerous Type in Crater

epubjs

Cross-site Scripting in epubjs

org.apache.knox:gateway-service-knoxsso

Cross-site Scripting in Apache Knox SSO

pimcore/pimcore

pimcore is vulnerable to Cross-site Scripting

pimcore/pimcore

pimcore is vulnerable to SQL Injection

remdex/livehelperchat

livehelperchat is vulnerable to Cross-site Scripting

pimcore/pimcore

pimcore is vulnerable to Cross-site Scripting

icecoder/icecoder

icecoder is vulnerable to Cross-site Scripting

calibreweb

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

calibreweb

calibre-web is vulnerable to Business Logic Errors

wagtail

Comment reply notifications sent to incorrect users

gradio

Files on the host computer can be accessed from the Gradio interface

edu.stanford.nlp:stanford-corenlp

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

colors

Infinite Loop in colors.js

de.tum.in.ase:artemis-java-test-sandbox

Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares

io.jenkins:configuration-as-code, io.jenkins:configuration-as-code, io.jenkins:configuration-as-code, io.jenkins:configuration-as-code

Observable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code Plugin

io.jenkins.plugins:warnings-ng, io.jenkins.plugins:warnings-ng, io.jenkins.plugins:warnings-ng, io.jenkins.plugins:warnings-ng

Path Traversal in Jenkins Warnings Next Generation Plugin

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-Site Request Forgery in Jenkins

shelljs

Improper Privilege Management in shelljs

remdex/livehelperchat

User enumeration in livehelperchat

org.apache.james:james-server

Path traversal in Apache James

node-forge

Open Redirect in node-forge

PeterO.Cbor

Denial of service in CBOR library

Umbraco.Cms.Core

Umbraco Persistent Password Reset Poison