Security advisories

medium2022-05-24

CVE-2020-26523-Froala WYSIWYG Editor XSS Vulnerability

View chart →

froala/wysiwyg-editor · GHSA-qrhq-x7xh-2784

medium2022-05-24

CVE-2020-25781-MantisBT unauthorized users able to access private files

View chart →

mantisbt/mantisbt · GHSA-xjmx-cprh-646r

medium2022-05-24

CVE-2020-25830-MantisBT HTML Injection vulnerability

View chart →

mantisbt/mantisbt · GHSA-2pm7-q8pc-xhvq

medium2022-05-24

CVE-2020-25288-MantisBT XXS where a Custom Field with a crafted Regular Expression property is used

View chart →

mantisbt/mantisbt · GHSA-qgrr-f26j-87vf

high2022-05-24

CVE-2020-25827-OATHAuth extension in MediaWiki is not implementing rate limit

View chart →

wikimedia/mediawiki · GHSA-rqvj-fc2x-99q6

medium2022-05-24

CVE-2020-25828-MediaWiki Cross-site Scripting (XSS) vulnerability

View chart →

wikimedia/mediawiki · GHSA-h8qx-mj6v-2934

medium2022-05-24

CVE-2020-25813-MediaWiki Special:UserRights exposes the existence of hidden users

View chart →

wikimedia/mediawiki · GHSA-c4rj-wrmq-52rj

medium2022-05-24

CVE-2020-25814-MediaWiki Cross-site Scripting (XSS) vulnerability

View chart →

wikimedia/mediawiki · GHSA-4vr7-m8p8-434h

medium2022-05-24

CVE-2020-25815-MediaWiki Cross-site Scripting (XSS) vulnerability

View chart →

wikimedia/mediawiki · GHSA-2f58-vf6g-6p8x

medium2022-05-24

CVE-2020-25812-MediaWiki Cross-site Scripting (XSS) vulnerability

View chart →

wikimedia/mediawiki · GHSA-rj9p-8jxj-2ch4

medium2022-05-24

CVE-2020-15840-Liferay Portal and Liferay DXP Bypass via Double Encoded URL

View chart →

liferay/liferay-portal · GHSA-vrwx-q9pj-x488

high2022-05-24

CVE-2020-2284-XXE vulnerability in Jenkins Liquibase Runner Plugin

View chart →

jenkinsci/liquibase-runner-plugin · GHSA-xx7g-f287-f9fq

medium2022-05-24

CVE-2020-2281-CSRF vulnerability in Jenkins Lockable Resources Plugin

View chart →

jenkinsci/lockable-resources-plugin · GHSA-rvww-w62m-hch8

high2022-05-24

CVE-2020-2280-CSRF vulnerability in Jenkins warnings Plugin allows remote code execution

View chart →

jenkinsci/warnings-plugin · GHSA-q564-vvx8-9388

critical2022-05-24

CVE-2020-2279-Sandbox bypass vulnerability in Jenkins Script Security Plugin

View chart →

jenkinsci/script-security-plugin · GHSA-ccr8-4xr7-cgj3

medium2022-05-24

CVE-2020-2283-Stored XSS vulnerability in Jenkins Liquibase Runner Plugin

View chart →

jenkinsci/liquibase-runner-plugin · GHSA-9hg7-xmf8-jxf9

medium2022-05-24

CVE-2020-2282-Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin

View chart →

jenkinsci/implied-labels-plugin · GHSA-5hw2-327v-vvr6

medium2022-05-24

CVE-2020-2285-Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs

View chart →

jenkinsci/liquibase-runner-plugin · GHSA-44cm-p9q7-rr3p

low2022-05-24

CVE-2020-7734-Cabot Cross Site Scripting (XSS) vulnerability via Endpoint column

View chart →

arachnys/cabot · GHSA-mqwh-r366-4224

medium2022-05-24

CVE-2020-2278-Arbitrary file write vulnerability in Jenkins Storable Configs Plugin

View chart →

jenkinsci/storable-configs-plugin · GHSA-qv6q-4jwx-7j5c