Security advisories

high2022-05-24

CVE-2021-21665-CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials

View chart →

jenkinsci/xldeploy-plugin · GHSA-38pm-74xc-phcw

medium2022-05-24

CVE-2020-25817-SilverStripe XXE Vulnerability in CSSContentParser

View chart →

silverstripe/silverstripe-framework · GHSA-3vjc-5x79-m9r8

high2022-05-24

CVE-2021-20267-Openstack Neutron has Insufficient Verification of IPv6 addresses

View chart →

openstack/neutron · GHSA-w8hx-f868-pvch

medium2022-05-24

CVE-2021-31525-golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion

View chart →

golang/go · GHSA-h86h-8ppg-mxmh

high2022-05-24

CVE-2021-22118-Improper Privilege Management in Spring Framework

View chart →

spring-projects/spring-framework · GHSA-gfwj-fwqj-fp3v

medium2022-05-24

CVE-2021-21660-XSS vulnerability in Jenkins Markdown Formatter Plugin

View chart →

jenkinsci/markdown-formatter-plugin · GHSA-xqpp-26pp-2365

critical2022-05-24

CVE-2021-21658-XML external entity vulnerability in Jenkins Nuget Plugin

View chart →

jenkinsci/nuget-plugin · GHSA-p674-hh8x-rv5h

high2022-05-24

CVE-2021-23937-DNS based denial of service in Apache Wicket

View chart →

apache/wicket · GHSA-hmhg-95wh-r699

high2022-05-24

CVE-2021-21657-XXE vulnerability in Jenkins Filesystem Trigger Plugin

View chart →

jenkinsci/fstrigger-plugin · GHSA-cphv-7cxw-5hcc

high2022-05-24

CVE-2021-21659-XXE vulnerability in Jenkins URLTrigger Plugin

View chart →

jenkinsci/urltrigger-plugin · GHSA-34j5-c4cv-mmg5

critical2022-05-24

CVE-2021-25944-deep-defaults vulnerable to prototype pollution

View chart →

d5/deep-defaults · GHSA-h6xg-rg33-9mf4

medium2022-05-24

CVE-2021-3313-Plone XSS in User Fullname Property and File Upload

View chart →

plone/plone · GHSA-hprr-4vfq-fcxw

high2022-05-24

CVE-2021-3517-Nokogiri contains libxml Out-of-bounds Write vulnerability

View chart →

sparklemotion/nokogiri · GHSA-jw9f-hh49-cvp9

high2022-05-24

CVE-2021-3518-Nokogiri Implements libxml2 version vulnerable to use-after-free

View chart →

sparklemotion/nokogiri · GHSA-v4f8-2847-rwm7

medium2022-05-24

CVE-2021-29043-Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password

View chart →

liferay/liferay-portal · GHSA-xx2h-2hf5-v7vv

medium2022-05-24

CVE-2021-29044-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page

View chart →

liferay/liferay-portal · GHSA-wcr5-3q96-c2gr

medium2022-05-24

CVE-2021-29045-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page

View chart →

liferay/liferay-portal · GHSA-qcv4-gv43-498v

high2022-05-24

CVE-2021-29053-Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections

View chart →

liferay/liferay-portal · GHSA-f9wj-c5pc-g9rh

medium2022-05-24

CVE-2021-29046-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter

View chart →

liferay/liferay-portal · GHSA-9g57-m5vf-qp73

medium2022-05-24

CVE-2021-29048-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page

View chart →

liferay/liferay-portal · GHSA-4fx8-82f3-xcpc