Security advisories

high2022-09-22

CVE-2022-40604-Apache Airflow vulnerable to Use of Externally-Controlled Format String

View chart →

apache/airflow · GHSA-5rp4-749p-vx26

medium2022-09-22

CVE-2022-40754-Apache Airflow contains open redirect

View chart →

apache/airflow · GHSA-4fg5-j4mm-wfpg

low2022-09-22

CVE-2022-2872-OctoPrint vulnerable to Unrestricted Upload of File with Dangerous Type

View chart →

octoprint/octoprint · GHSA-49wm-4fp6-h59c

medium2022-09-22

CVE-2022-2888-OctoPrint vulnerable to Insufficient Session Expiration.

View chart →

octoprint/octoprint · GHSA-937f-qh3w-6g87

high2022-09-22

CVE-2022-3068-OctoPrint Improper Privilege Management vulnerability

View chart →

octoprint/octoprint · GHSA-2p75-q37p-f852

medium2022-09-22

CVE-2022-3255-Pimcore vulnerable to cross site scripting

View chart →

pimcore/pimcore · GHSA-wqr6-57qm-hhr5

medium2022-09-22

CVE-2022-41244-Missing hostname validation in Jenkins View26 Test-Reporting Plugin

View chart →

jenkinsci/view26-plugin · GHSA-pxp5-g66h-wpv2

low2022-09-22

CVE-2022-41247-Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted

View chart →

jenkinsci/bigpanda-plugin · GHSA-j7xv-fc46-hgpg

high2022-09-22

CVE-2022-41224-Jenkins vulnerable to stored cross site scripting in the I:helpIcon component

View chart →

jenkinsci/jenkins · GHSA-xpvp-h73c-m9rq

high2022-09-22

CVE-2022-41237-RCE vulnerability in Jenkins DotCi Plugin

View chart →

jenkinsci/dotci · GHSA-x3jj-rgw9-7r5g

medium2022-09-22

CVE-2022-41234-Missing webhook endpoint authorization in Jenkins Rundeck Plugin

View chart →

jenkinsci/rundeck-plugin · GHSA-qgv4-7jhx-c72q

high2022-09-22

CVE-2022-41239-Stored XSS vulnerability in Jenkins DotCi Plugin

View chart →

jenkinsci/dotci · GHSA-q9g4-9fx4-v533

medium2022-09-22

CVE-2022-41246-CSRF vulnerability and mM

View chart →

jenkinsci/ws-execution-manager-plugin · GHSA-p5hr-rf6w-3vvh

medium2022-09-22

CVE-2022-41242-Jenkins extreme-feedback Plugin vulnerable to Missing Authorization

View chart →

jenkinsci/extreme-feedback-plugin · GHSA-mrf6-4gw6-65v3

medium2022-09-22

CVE-2022-41227-Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery

View chart →

jenkinsci/cavisson-ns-nd-integration-plugin · GHSA-jjch-7g85-4m72

medium2022-09-22

CVE-2022-41241-Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference

View chart →

jenkinsci/rqm-plugin · GHSA-j8xr-2279-88qj

medium2022-09-22

CVE-2022-41228-Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization

View chart →

jenkinsci/cavisson-ns-nd-integration-plugin · GHSA-j2mj-g8jp-gjfm

medium2022-09-22

CVE-2022-41245-CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials

View chart →

jenkinsci/ws-execution-manager-plugin · GHSA-ghq7-85hp-fh76

high2022-09-22

CVE-2022-41226-Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference

View chart →

jenkinsci/compuware-common-configuration-plugin · GHSA-g43x-pcc9-f472

high2022-09-22

CVE-2022-41229-Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting

View chart →

jenkinsci/cavisson-ns-nd-integration-plugin · GHSA-fq2h-r2h9-pj8r