Security Advisories | GitStock

medium2022-07-28

CVE-2022-36907-Missing permission check in Jenkins OpenShift Deployer Plugin

jenkinsci/openshift-deployer-plugin · GHSA-jvjh-9r4q-8q5q

medium2022-07-28

CVE-2022-36889-Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment

jenkinsci/deployer-framework-plugin · GHSA-j5qq-6rpm-qjgh

medium2022-07-28

CVE-2022-36912-Missing permission checks in Jenkins openstack-heat Plugin

jenkinsci/openstack-heat-plugin · GHSA-hm53-hrhh-gwfq

medium2022-07-28

CVE-2022-36911-CSRF vulnerability in Jenkins openstack-heat Plugin

jenkinsci/openstack-heat-plugin · GHSA-fqhm-fjjv-7q8x

high2022-07-28

CVE-2022-36921-Missing permission check in Coverity Plugin allows capturing credentials

jenkinsci/coverity-plugin · GHSA-99mq-hw5m-gwjj

high2022-07-28

CVE-2022-36905-Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin

jenkinsci/maven-metadata-plugin · GHSA-8294-mv9c-7m5h

medium2022-07-28

CVE-2022-36909-Missing permission check in Jenkins OpenShift Deployer Plugin

jenkinsci/openshift-deployer-plugin · GHSA-78fg-pvgg-6g3r

medium2022-07-28

CVE-2022-36896-Jenkins Compuware Source Code Download is missing authorization

jenkinsci/compuware-scm-downloader-plugin · GHSA-75fc-fv3p-xh82

high2022-07-28

CVE-2022-36894-Arbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin

jenkinsci/clif-performance-testing-plugin · GHSA-6xf5-c3cx-67pv

high2022-07-28

CVE-2022-36920-Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)

jenkinsci/coverity-plugin · GHSA-5x3f-7m52-9cgf

medium2022-07-28

CVE-2022-36908-CSRF vulnerability in Jenkins OpenShift Deployer Plugin

jenkinsci/openshift-deployer-plugin · GHSA-5mv2-vqq7-mq5h

medium2022-07-28

CVE-2022-36899-Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin

jenkinsci/compuware-ispw-operations-plugin · GHSA-57f2-52wj-7vj6

low2022-07-28

CVE-2022-36901-Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted

jenkinsci/http-request-plugin · GHSA-2qh6-hhvv-m2ww

medium2022-07-27

CVE-2022-31148-Shopware vulnerable to persistent cross site scripting (XSS) in customer module

shopware/shopware · GHSA-5834-xv5q-cgfw

medium2022-07-27

CVE-2022-31109-Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack

laminas/laminas-diactoros · GHSA-8274-h5jp-97vr

medium2022-07-26

CVE-2022-2514-Fava time and filter parameters vulnerable to reflected Cross-site Scripting

beancount/fava · GHSA-xrf4-39fm-j5f2

medium2022-07-26

CVE-2022-2523-Fava vulnerable to Reflected Cross-site Scripting

beancount/fava · GHSA-q8hg-3vqv-f8v3

medium2022-07-26

CVE-2022-21802-grapesjs before 0.19.5 vulnerable to Cross-site Scripting

artf/grapesjs · GHSA-589f-c66p-hxr4

critical2022-07-26

CVE-2020-28441-conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2

loge5/conf-cfg-ini · GHSA-m6mg-jvjf-w44x

critical2022-07-26

CVE-2020-28436-google-cloudstorage-commands Command Injection vulnerability

samradical/google-cloudstorage-commands · GHSA-6367-p3v8-7mgw