Security advisories

low2022-08-24

CVE-2022-38665-RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin

View chart →

jenkinsci/collabnet-plugin · GHSA-qh87-2qvh-5jf8

medium2022-08-24

CVE-2022-38663-Improper masking of credentials Jenkins in Git Plugin

View chart →

jenkinsci/git-plugin · GHSA-jxmw-3gxf-fprh

medium2022-08-24

CVE-2022-38664-Cross-site Scripting in Jenkins Job Configuration History Plugin

View chart →

jenkinsci/job-config-history-plugin · GHSA-28w4-h56g-grg7

medium2022-08-23

CVE-2022-1340-Cross site scripting in yetiforce/yetiforce-crm

View chart →

yetiforcecompany/yetiforcecrm · GHSA-w83m-rghh-frxj

high2022-08-23

CVE-2022-2927-Missing password strength check in notrinos/notrinos-erp

View chart →

notrinos/notrinoserp · GHSA-qhm8-69qh-g76j

medium2022-08-23

CVE-2022-2930-Unverified Password Change in OctoPrint

View chart →

octoprint/octoprint · GHSA-39gf-864w-pxw4

high2022-08-23

CVE-2021-3513-Incorrect implementation of lockout feature in Keycloak

View chart →

keycloak/keycloak · GHSA-xv7h-95r7-595j

medium2022-08-23

CVE-2022-2890-Cross site scripting in yetiforce/yetiforce-crm

View chart →

yetiforcecompany/yetiforcecrm · GHSA-jhxh-68jj-68c7

medium2022-08-23

CVE-2022-2932-Cross site scripting in mobiledoc-kit

View chart →

bustle/mobiledoc-kit · GHSA-hw2p-xqhq-3mjf

medium2022-08-23

CVE-2022-1930-Regular expression denial of service in eth-account

View chart →

ethereum/eth-account · GHSA-v65g-f3cj-fjp4

high2022-08-22

CVE-2022-2921-Exposure of password hashes in notrinos/notrinos-erp

View chart →

notrinos/notrinoserp · GHSA-44w5-q257-8428

medium2022-08-22

CVE-2022-2885-Cross site scripting in yetiforce/yetiforce-crm

View chart →

yetiforcecompany/yetiforcecrm · GHSA-rjvc-mf7r-ch7r

critical2022-08-22

CVE-2022-34916-Remote code execution in Apache Flume

View chart →

apache/flume · GHSA-h9mh-mgpv-gqmv

high2022-08-20

CVE-2022-35909-Incorrect Access Control and Cross Site Scripting in Jellyfin

View chart →

jellyfin/jellyfin · GHSA-qwp3-5fw3-5wgv

high2022-08-20

CVE-2022-36157-Improper Privilege Management in com.xuxueli:xxl-job

View chart →

xuxueli/xxl-job · GHSA-7qq9-9g2w-56f9

high2022-08-19

CVE-2022-35204-Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service

View chart →

vitejs/vite · GHSA-mv48-hcvh-8jj8

medium2022-08-19

CVE-2022-35174-Cross site scripting in getkirby/starterkit

View chart →

getkirby/starterkit · GHSA-4m2g-668v-jwjx

critical2022-08-19

CVE-2020-36599-OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value

View chart →

omniauth/omniauth · GHSA-pm55-qfxr-h247

critical2022-08-19

CVE-2022-35540-Use of Hard-coded Credentials in AgileConfig.Client

View chart →

dotnetcore/agileconfig · GHSA-mj5w-w588-j6xg

high2022-08-18

PocketMine-MP invalid skin geometry JSON data leading to server crash

View chart →

pmmp/pocketmine-mp · GHSA-8cwq-4cmf-px73