Security advisories

high2022-06-24

CVE-2022-34173-Cross-site Scripting vulnerability in Jenkins

View chart →

jenkinsci/jenkins · GHSA-6g4r-q7qg-6qx6

high2022-06-24

CVE-2022-34189-Cross-site Scripting in Jenkins Image Tag Parameter Plugin

View chart →

jenkinsci/image-tag-parameter-plugin · GHSA-6923-546p-6rrc

high2022-06-24

CVE-2022-34192-Cross-site Scripting in Jenkins ontrack Jenkins Plugin

View chart →

jenkinsci/ontrack-plugin · GHSA-6882-385p-hhhw

high2022-06-24

CVE-2022-34183-Cross-site Scripting in Jenkins Agent Server Parameter Plugin

View chart →

jenkinsci/agent-server-parameter-plugin · GHSA-65r6-w7vr-c75r

high2022-06-24

CVE-2022-34176-Cross-site Scripting in Jenkins JUnit Plugin

View chart →

jenkinsci/junit-plugin · GHSA-64mj-3p92-589v

high2022-06-24

CVE-2022-34170-Cross-site Scripting vulnerability in Jenkins

View chart →

jenkinsci/jenkins · GHSA-62wf-24c4-8r76

critical2022-06-24

CVE-2022-33127-Improper handling of double quotes in file name in Diffy in Windows environment

View chart →

samg/diffy · GHSA-5ww9-9qp2-x524

high2022-06-24

CVE-2022-34185-Cross-site Scripting in Jenkins Date Parameter Plugin

View chart →

jenkinsci/date-parameter-plugin · GHSA-5hh2-f4h9-446g

high2022-06-24

CVE-2022-34190-Cross-site Scripting in Jenkins Maven Metadata Plugin

View chart →

jenkinsci/maven-metadata-plugin · GHSA-5247-whvj-83qw

medium2022-06-24

CVE-2022-34204-Jenkins EasyQA Plugin Missing Authorization vulnerability

View chart →

jenkinsci/easyqa-plugin · GHSA-49j4-v37g-5gg2

high2022-06-24

CVE-2022-34195-Cross-site Scripting in Jenkins Repository Connector Plugin

View chart →

jenkinsci/repository-connector-plugin · GHSA-438w-rjj9-5fjf

high2022-06-24

CVE-2022-34178-Reflected Cross site scripting in Jenkins Embeddable Build Status Plugin

View chart →

jenkinsci/embeddable-build-status-plugin · GHSA-39r3-h8q6-2phq

high2022-06-24

CVE-2022-34177-Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin

View chart →

jenkinsci/pipeline-input-step-plugin · GHSA-29q6-p2cg-4v23

medium2022-06-24

CVE-2022-34181-Agent-to-controller security bypass in Jenkins xUnit Plugin

View chart →

jenkinsci/xunit-plugin · GHSA-298j-9q4w-6rm4

medium2022-06-24

CVE-2022-34200-Cross-Site Request Forgery in Jenkins Convertigo Mobile Platform Plugin

View chart →

jenkinsci/convertigo-mobile-platform-plugin · GHSA-24h8-cpqm-qmf3

medium2022-06-24

CVE-2022-29526-golang.org/x/sys/unix has Incorrect privilege reporting in syscall

View chart →

golang/go · GHSA-p782-xgp4-8hr8

high2022-06-23

CVE-2022-31103-Improper handling of CSS at-rules in lettersanitizer

View chart →

mat-sz/lettersanitizer · GHSA-7r3r-gq8p-v9jj

critical2022-06-23

CVE-2022-31098-Weave GitOps leaked cluster credentials into logs on connection errors

View chart →

weaveworks/weave-gitops · GHSA-xggc-qprg-x6mw

medium2022-06-23

CVE-2022-31110-Denial of Service (DoS) vulnerability in RSSHub

View chart →

diygod/rsshub · GHSA-jvxx-v45p-v5vf

medium2022-06-23

CVE-2022-2174-Cross-site Scripting in Microweber

View chart →

microweber/microweber · GHSA-3x96-m42v-hvh5