Security advisories

medium2022-07-01

CVE-2013-4170-Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data

View chart →

emberjs/ember.js · GHSA-5m48-c37x-f792

low2022-07-01

CVE-2022-34808-Token stored in plain text by Jenkins Cisco Spark Plugin

View chart →

jenkinsci/cisco-spark-plugin · GHSA-wppp-xqfv-6cm7

medium2022-07-01

CVE-2022-34815-Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin

View chart →

jenkinsci/rrod-plugin · GHSA-qq85-8g89-r5rc

medium2022-07-01

CVE-2022-34814-Incorrect Authorization in Jenkins Request Rename Or Delete Plugin

View chart →

jenkinsci/rrod-plugin · GHSA-qhmj-29vh-8mjm

low2022-07-01

CVE-2022-34809-Password stored in plain text by Jenkins RQM Plugin

View chart →

jenkinsci/rqm-plugin · GHSA-m59q-vgq9-75cr

medium2022-07-01

CVE-2022-34818-Jenkins Failed Job Deactivator Plugin Missing Authorization vulnerability

View chart →

jenkinsci/failedjobdeactivator-plugin · GHSA-hcjr-6jq3-392p

low2022-07-01

CVE-2022-34807-Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin

View chart →

jenkinsci/elasticsearch-query-plugin · GHSA-h5h5-m2mc-j2pv

low2022-07-01

CVE-2022-34806-Plaintext Storage of a Password in Jenkins Jigomerge Plugin

View chart →

jenkinsci/jigomerge-plugin · GHSA-h5g3-v72x-hc6f

low2022-07-01

CVE-2022-34805-Plaintext Storage of a Password in Jenkins Skype notifier Plugin

View chart →

jenkinsci/skype-im-plugin · GHSA-gvmr-mp5q-9wvw

medium2022-07-01

CVE-2022-34817-Cross-Site Request Forgery in Jenkins Failed Job Deactivator Plugin

View chart →

jenkinsci/failedjobdeactivator-plugin · GHSA-cp6q-836q-gmj3

medium2022-07-01

CVE-2022-34804-Jenkins OpsGenie Plugin vulnerable to Cleartext Transmission of Sensitive Information

View chart →

jenkinsci/opsgenie-plugin · GHSA-7r65-pjgv-h2h9

medium2022-07-01

CVE-2022-34812-Cross-Site Request Forgery in Jenkins XPath Configuration Viewer Plugin

View chart →

jenkinsci/xpath-config-viewer-plugin · GHSA-3q7f-w8fr-368v

medium2022-07-01

CVE-2022-34813-Jenkins XPath Configuration Viewer Plugin Missing Authorization vulnerability

View chart →

jenkinsci/xpath-config-viewer-plugin · GHSA-3fj7-78h2-w98x

low2022-07-01

CVE-2022-34816-Passwords stored in plain text by Jenkins hpe-network-virtualization plugin

View chart →

jenkinsci/hpe-network-virtualization-plugin · GHSA-36j8-f33j-vjwq

medium2022-07-01

CVE-2022-34803-Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability

View chart →

jenkinsci/opsgenie-plugin · GHSA-273c-fjw8-v2w8

medium2022-07-01

CVE-2022-34810-Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check

View chart →

jenkinsci/rqm-plugin · GHSA-2348-ccqj-8p27

medium2022-07-01

CVE-2022-34797-Cross-Site Request Forgery in Jenkins Deployment Dashboard Plugin

View chart →

jenkinsci/ec2-deployment-dashboard · GHSA-x4g7-5xrm-5wmq

high2022-07-01

CVE-2022-34790-Cross-site Scripting in Jenkins eXtreme Feedback Panel Plugin

View chart →

jenkinsci/xfpanel-plugin · GHSA-w257-f7qj-4vrq

low2022-07-01

CVE-2022-34800-Plaintext Storage of a Password in Jenkins Build Notifications Plugin

View chart →

jenkinsci/build-notifications-plugin · GHSA-v3r8-6vfj-pppf

high2022-07-01

CVE-2022-34793-XML External Entity Reference in Jenkins Recipe Plugin

View chart →

jenkinsci/recipe-plugin · GHSA-rm23-6mwv-8q9q