Security advisories

medium2022-05-24

CVE-2021-21675-CSRF vulnerabilities in Jenkins requests-plugin Plugin

View chart →

jenkinsci/requests-plugin · GHSA-5frh-wx6v-8m2r

high2022-05-24

CVE-2021-21671-Session fixation vulnerability in Jenkins

View chart →

jenkinsci/jenkins · GHSA-4wr9-2xc6-jmg5

medium2022-05-24

CVE-2021-21676-Missing permission check in Jenkins requests-plugin Plugin allows sending emails

View chart →

jenkinsci/requests-plugin · GHSA-w3gm-vv58-wr55

medium2022-05-24

CVE-2021-21673-Open redirect vulnerability in Jenkins CAS Plugin

View chart →

jenkinsci/cas-plugin · GHSA-2vvr-5757-qp87

medium2022-05-24

CVE-2021-20751-EC-CUBE Cross-site scripting vulnerability

View chart →

ec-cube/ec-cube · GHSA-r6qq-qc9m-98w2

medium2022-05-24

CVE-2021-20750-EC-CUBE Cross-site scripting vulnerability

View chart →

ec-cube/ec-cube · GHSA-vrpv-26fm-7vf7

medium2022-05-24

CVE-2021-28563-Magento Unauthorized access to restricted resources

View chart →

magento/magento2 · GHSA-q9xx-4689-gvv5

high2022-05-24

CVE-2021-28583-Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats

View chart →

magento/magento2 · GHSA-7gh6-f4jh-3crq

medium2022-05-24

CVE-2021-28556-Magento DOM-based Cross-Site Scripting vulnerability on mage-messages cookies

View chart →

magento/magento2 · GHSA-39ch-rg26-gmq5

medium2022-05-24

CVE-2021-28584-Magento Path Traversal vulnerability

View chart →

magento/magento2 · GHSA-7gpv-xrjr-f5h4

critical2022-05-24

CVE-2021-21809-Moodle command execution vulnerability exists in the default legacy spellchecker plugin

View chart →

moodle/moodle · GHSA-c7jj-vfmr-j9mj

medium2022-05-24

CVE-2021-24374-JetPack Exposure of Resource to Wrong Sphere

View chart →

automattic/jetpack-production · GHSA-5hr6-r8h6-wh22

critical2022-05-24

CVE-2021-21669-XXE vulnerability in Jenkins Generic Webhook Trigger Plugin

View chart →

jenkinsci/generic-webhook-trigger-plugin · GHSA-732f-w585-gmpc

medium2022-05-24

CVE-2021-33557-MantisBT allows XSS in manage_custom_field_edit_page.php

View chart →

mantisbt/mantisbt · GHSA-52cx-vphc-jmjm

critical2022-05-24

CVE-2021-24037-Use After Free in Hermes

View chart →

facebook/hermes · GHSA-mph8-6787-r8hw

medium2022-05-24

CVE-2021-32244-Moodle Cross Site Scripting (XSS)

View chart →

moodle/moodle · GHSA-g5m5-j48g-fr24

medium2022-05-24

CVE-2020-13688-Drupal Core Cross-site scripting vulnerability

View chart →

drupal/core · GHSA-qf2g-mrrx-rr5p

high2022-05-24

CVE-2020-13663-Drupal Core Cross-Site Request Forgery (CSRF) vulnerability

View chart →

drupal/core · GHSA-m648-hpf8-qcjw

medium2022-05-24

CVE-2021-21664-Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials

View chart →

jenkinsci/xldeploy-plugin · GHSA-jm4g-8rvq-v87j

medium2022-05-24

CVE-2021-21663-Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials

View chart →

jenkinsci/xldeploy-plugin · GHSA-6mpp-cm3v-23vv