Security advisories

medium2022-05-24

CVE-2021-32561-OctoPrint API Error Messages vulnerable to XSS

View chart →

octoprint/octoprint · GHSA-vcx4-fpmp-mvv6

medium2022-05-24

CVE-2021-20717-EC-CUBE Cross-site scripting vulnerability

View chart →

ec-cube/ec-cube · GHSA-c8mx-43cq-993w

high2022-05-24

CVE-2021-32074-Vault GitHub Action did not correctly mask multi-line secrets in output

View chart →

hashicorp/vault-action · GHSA-4mgv-m5cm-f9h7

high2022-05-24

CVE-2020-13664-Drupal Core Arbitrary PHP code execution vulnerability

View chart →

drupal/core · GHSA-x72f-ggjw-v5xh

critical2022-05-24

CVE-2020-13665-Drupal Core Access bypass vulnerability

View chart →

drupal/core · GHSA-wxqp-jwc9-g39x

medium2022-05-24

CVE-2020-13662-Drupal Core Open Redirect vulnerability

View chart →

drupal/core · GHSA-gjqg-9rhv-qj67

medium2022-05-24

CVE-2020-13666-Drupal Core Cross-site scripting vulnerability

View chart →

drupal/core · GHSA-8jj2-x2gc-ggm7

high2022-05-24

CVE-2020-7385-Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module

View chart →

rapid7/metasploit-framework · GHSA-xgww-h98f-24qf

high2022-05-24

CVE-2021-21642-XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin

View chart →

jenkinsci/config-file-provider-plugin · GHSA-q7xg-hh3q-hc68

high2022-05-24

CVE-2021-21646-Remote code execution vulnerability in Jenkins Templating Engine Plugin

View chart →

jenkinsci/templating-engine-plugin · GHSA-p6qc-37hq-wqr6

medium2022-05-24

CVE-2021-21647-Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds

View chart →

jenkinsci/electricflow-plugin · GHSA-7rx6-4vwv-432g

medium2022-05-24

CVE-2021-21643-Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs

View chart →

jenkinsci/config-file-provider-plugin · GHSA-3m3f-2323-64m7

medium2022-05-24

CVE-2021-21645-Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs

View chart →

jenkinsci/config-file-provider-plugin · GHSA-2959-fj73-hm8p

medium2022-05-24

CVE-2021-21644-CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files

View chart →

jenkinsci/config-file-provider-plugin · GHSA-998m-f2x3-jjq4

medium2022-05-24

CVE-2020-25864-HashiCorp Consul Cross-site Scripting vulnerability

View chart →

hashicorp/consul · GHSA-8xmx-h8rq-h94j

high2022-05-24

CVE-2021-28458-Improper Privilege Management in Azure ms-rest-nodeauth

View chart →

azure/ms-rest-nodeauth · GHSA-qpfw-4m9x-rxx8

medium2022-05-24

CVE-2020-7924-MongoDB Tools Improper Certificate Validation vulnerability

View chart →

mongodb/mongo-tools · GHSA-6cwm-wm82-hgrw

medium2022-05-24

CVE-2021-30458-Wikimedia Parsoid vulnerable to Cross-site Scripting (XSS)

View chart →

wikimedia/mediawiki-services-parsoid · GHSA-5pqx-77vf-85rw

medium2022-05-24

CVE-2021-22511-SSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools Plugin

View chart →

jenkinsci/hpe-application-automation-tools-plugin · GHSA-q296-9j5x-fxf4

medium2022-05-24

CVE-2021-22512-CSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin

View chart →

jenkinsci/hpe-application-automation-tools-plugin · GHSA-mwg2-3xpv-5v28