Security advisories

medium2022-10-25

CVE-2022-34870-Apache Geode vulnerable to Cross-Site Scripting

View chart →

apache/geode · GHSA-373r-9mg8-3jc4

medium2022-10-25

CVE-2022-3644-Plaintext storage of tokens in pulp_ansible

View chart →

pulp/pulp_ansible · GHSA-qv37-mfjf-42h8

medium2022-10-24

CVE-2022-43677-free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

View chart →

free5gc/free5gc · GHSA-59hj-62f5-fgmc

high2022-10-21

CVE-2022-21986-.NET Denial of Service Vulnerability

View chart →

dotnet/aspnetcore · GHSA-x459-p2rx-f8ff

high2022-10-20

CVE-2022-42344-Magento Improper input validation vulnerability

View chart →

magento/magento2 · GHSA-297f-r9w7-w492

low2022-10-20

Hardening of TypedArrays with non-canonical numeric property names in SES

View chart →

endojs/endo · GHSA-whpx-q3rq-w8jc

medium2022-10-20

CVE-2022-39259-Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack

View chart →

skylot/jadx · GHSA-3r7j-8mqh-6qhx

critical2022-10-20

CVE-2022-3327-Rdiffweb is missing authentication for critical function

View chart →

ikus060/rdiffweb · GHSA-99j5-fvg3-54pm

critical2022-10-20

CVE-2022-37298-Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control

View chart →

naparuba/shinken · GHSA-p373-jqfm-j6wr

medium2022-10-19

CVE-2022-31683-Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution

View chart →

concourse/concourse · GHSA-5jp2-vwrj-99rf

medium2022-10-19

CVE-2022-3607-OctoPrint vulnerable to Special Element Injection

View chart →

octoprint/octoprint · GHSA-rj5f-vm79-5j84

high2022-10-19

CVE-2022-3608-phpMyFAQ vulnerable to Cross-site Scripting

View chart →

thorsten/phpmyfaq · GHSA-6rj8-9cm9-6gff

high2022-10-19

CVE-2022-43428-Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin

View chart →

jenkinsci/compuware-topaz-for-total-test-plugin · GHSA-xp3r-9wx8-q2mm

high2022-10-19

CVE-2022-43425-Stored XSS vulnerability in Jenkins Custom Checkbox Parameter Plugin

View chart →

jenkinsci/custom-checkbox-parameter-plugin · GHSA-vf5v-6wjm-vr7v

high2022-10-19

CVE-2022-43432-Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin

View chart →

jenkinsci/xframium-plugin · GHSA-px4x-hjm5-w8x3

medium2022-10-19

CVE-2022-43424-Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin

View chart →

jenkinsci/compuware-xpediter-code-coverage-plugin · GHSA-mfcw-83qg-4vw3

high2022-10-19

CVE-2022-43407-CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin

View chart →

jenkinsci/pipeline-input-step-plugin · GHSA-g66m-fqxf-3w35

low2022-10-19

CVE-2022-43411-Non-constant time webhook token comparison in Jenkins GitLab Plugin

View chart →

jenkinsci/gitlab-plugin · GHSA-f9f9-4r63-4qcc

high2022-10-19

CVE-2022-43433-Content-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin

View chart →

jenkinsci/screenrecorder-plugin · GHSA-cvxj-4745-843x

medium2022-10-19

CVE-2022-43423-Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin

View chart →

jenkinsci/compuware-scm-downloader-plugin · GHSA-682j-2p53-xp5f