20107 matches found
CVE-2025-27402
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability to trick victims into removing or updating tracker fields. This vulnerability i...
[SECURITY] Fedora 41 Update: firefox-136.0-2.fc41
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Code-Projects Blood Bank Management System 注入漏洞
Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter donorid that can lead to SQL injection...
A Bootiful Podcast: Johannes Bechberger, Java engineer at SAP
Hi, Spring fans! In this installment I talk to Johannes Bechberger, Java engineer working on profilers and their underlying technology in the SapMachine team at SAP. His work today comprises many open-source contributions and his blog, where he regularly writes on in-depth profiling and debugging...
Code-Projects Blood Bank Management System 注入漏洞
Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter memberid that can lead to SQL injection...
E-Commerce-Website-Using-PHP 注入漏洞
E-Commerce-Website-Using-PHP is a free and open source full-featured e-commerce website project. An injection vulnerability exists in E-Commerce-Website-Using-PHP version 1.0, which stems from the fact that incorrect manipulation of the parameter pcat can lead to SQL injection...
Code-Projects Blood Bank Management System 注入漏洞
Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter requesterid that can lead to SQL...
CVE-2025-27418
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionartipoatendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into t...
CVE-2025-27094
Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute...
CVE-2025-27419
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service DoS vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by performing aggressive spidering. The vulnerabilit...
Linux kernel memory misreference vulnerability (CNVD-2025-04672)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a driver uninstallation without logging off the platform device, which can be exploited by an attacker to...
Peppermint 访问控制错误漏洞
Peppermint is an open source ticket management system from Peppermint Labs. A security vulnerability exists in Peppermint version 0.4.6 that stems from improper access control that allows a regular user to elevate privileges to administrator...
Apollo 访问控制错误漏洞
Apollo is a genome annotation editor in the Generic Model Organism Database open source. An access control error vulnerability exists in Apollo versions prior to 2.8.0 that stems from a lack of authentication and allows bypassing privilege checks...
Apollo 安全漏洞
Apollo is a genome annotation editor open-sourced by Generic Model Organism Database. A security vulnerability exists in Apollo versions prior to 2.8.0 that stems from the presence of a path information disclosure issue...
Code-Projects Blood Bank Management System 安全漏洞
Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter name that can lead to cross-site...
Linux Distros Unpatched Vulnerability : CVE-2022-39324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Prior to versions 8.5.16 and 9.2.8, malicious user can create a snapshot and arbitrarily...
Linux Distros Unpatched Vulnerability : CVE-2023-4235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodedeliverreport function during the SMS decoding...
CVE-2025-27156
Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail...
CVE-2025-27401 In Tuleap, deleting a report can delete criteria filters in other reports
Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly leave dangling data. However, a malicious user could create and delete reports multiple times to cycle through all the...
