Open Source Vulnerabilities

rdf-graph-array

Uncontrolled Resource Consumption in rdf-graph-array

compile-sass

OS Command Injection in compile-sass

corenlp-js-prefab

Command injection in corenlp-js-prefab

enpeem

OS Command Injection in enpeem

react-adal

Improper Authentication in react-adal

serial-number

OS Command Injection in serial-number

giting

OS Command Injection in giting

valib

Exposure of Resource to Wrong Sphere in valib

port-killer

Code injection in port-killer

decal

Prototype Pollution in decal

decal

Prototype Pollution in decal

launchpad

Command injection in launchpad

iniparserjs

Prototype Pollution in iniparserjs

vis-timeline

Cross-site Scripting in vis-timeline

es6-crawler-detect

Regular Expression Denial of Service (ReDoS) in es6-crawler-detect

nuance-gulp-build-common

Command Injection in nuance-gulp-build-common

eslint-fixer

Command injection in eslint-fixer

@theia/console

Improper Neutralization of Input in Theia console

private-ip

Server-Side Request Forgery in private-ip

@theia/preview

Cross-site Scripting (XSS) in Eclipse Theia

@theia/mini-browser

Insufficient Verification of Data Authenticity in Eclipse Theia

lsof

OS Command Injection in lsof

network-manager

Improper Input Validation in network-manager

im-metadata

OS Command Injection in im-metadata

im-resize

OS Command Injection in im-resize

killport

Command Injection in killport

freediskspace

Improper neutralization of arguments in freediskspace

get-ip-range

Denial of Service in get-ip-range

gitlog

Command injection in gitlog

phpgacl

phpgacl

shopware/platform, shopware/core

After order payment process manipulation in shopware/platform and shopware/core

shopware/production, shopware/shopware

Exposure of .env if project root is configured as web root in shopware/production

shopware/core, shopware/platform

Leak of information via Store-API aggregations in shopware/platform and shopware/core

matrix-synapse

Open redirect via transitional IPv6 addresses on dual-stack networks

matrix-synapse

Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints

matrix-synapse

Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints

pwweb/laravel-core

User (Encrypted) Password Field Being Serialised

sopel-modules-weather

Potential API key leak

nettle, nettle, nettle

nettle vulnerability

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon

linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities

xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server

xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerability