Security advisories

medium2022-05-24

CVE-2021-21625-Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs

View chart →

jenkinsci/aws-credentials-plugin · GHSA-jwr9-h4jm-c9ch

medium2022-05-24

CVE-2021-21626-Missing permission checks in Jenkins Warnings Next Generation Plugin allow listing workspace contents

View chart →

jenkinsci/warnings-ng-plugin · GHSA-7j3x-xm4j-jfj7

medium2022-05-24

CVE-2021-21623-Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items

View chart →

jenkinsci/matrix-auth-plugin · GHSA-96jw-3xw4-mq9p

medium2022-05-24

CVE-2021-20282-Moodle Bypass email verification secret when confirming account registration

View chart →

moodle/moodle · GHSA-grj4-g57c-9xmv

medium2022-05-24

CVE-2021-20283-Missing permission check in Moodle

View chart →

moodle/moodle · GHSA-2m72-m5cw-3g9h

medium2022-05-24

CVE-2020-29556-Grav CMS Local File Injection

View chart →

getgrav/grav · GHSA-r3rg-jrjq-w4mr

high2022-05-24

CVE-2020-29555-Grav CMS Arbitrary File Deletion

View chart →

getgrav/grav · GHSA-gpmf-q5jh-hjx4

high2022-05-24

CVE-2020-29553-Grav CMS Cross-Site Request Forgery (CSRF)

View chart →

getgrav/grav · GHSA-fqff-vcvx-68h3

critical2022-05-24

CVE-2021-28305-Fix a use-after-free bug in diesels Sqlite backend

View chart →

diesel-rs/diesel · GHSA-j8q9-5rp9-4mv9

critical2022-05-24

CVE-2021-25915-Changeset vulnerable to prototype pollution

View chart →

eugeneware/changeset · GHSA-2gqw-q9r9-7f79

critical2022-05-24

CVE-2021-28031-move_elements can double-free objects on panic

View chart →

okready/scratchpad · GHSA-3qm2-rfqw-fmrw

critical2022-05-24

CVE-2020-24914-qcubed PHP object injection

View chart →

qcubed/qcubed · GHSA-7w3c-jgh7-cwjw

medium2022-05-24

CVE-2020-24912-qcubed reflected cross-site scripting (XSS) vulnerability

View chart →

qcubed/qcubed · GHSA-xj4v-gp4q-h6qq

critical2022-05-24

CVE-2020-24913-qcubed SQL injection vulnerability in profile.php via the strQuery parameter

View chart →

qcubed/qcubed · GHSA-8fj6-pc5r-347q

high2022-05-24

CVE-2021-25315-Saltstack Salt Unauthenticated Arbitrary Code Execution

View chart →

saltstack/salt · GHSA-pmj6-9f8c-8g2m

high2022-05-24

CVE-2020-35296-ThinkAdmin Admin Panel Access using Default Credentials

View chart →

zoujingli/thinkadmin · GHSA-cxv7-6jgf-7gwf

critical2022-05-24

CVE-2021-3144-SaltStack Salt eauth tokens can be used once after expiration

View chart →

saltstack/salt · GHSA-w2hr-3mc8-46gh

critical2022-05-24

CVE-2021-3148-SaltStack Salt command injection in the Salt-API when using the Salt-SSH client

View chart →

saltstack/salt · GHSA-ghc2-hx3w-jqmp

critical2022-05-24

CVE-2021-3197-SaltStack Salt is vulnerable to shell injection via ProxyCommand argument

View chart →

saltstack/salt · GHSA-8rp6-x3r7-5qw3

critical2022-05-24

CVE-2021-25281-SaltStack Salt Improper Authentication vulnerability

View chart →

saltstack/salt · GHSA-xxw3-765m-f37p