Security advisories

medium2022-05-24

CVE-2020-2185-Missing SSH host key validation in Jenkins Amazon EC2 Plugin

View chart →

jenkinsci/ec2-plugin · GHSA-q8qq-2p5p-rg44

low2022-05-24

CVE-2020-2182-Improper masking of some secrets in Jenkins Credentials Binding Plugin

View chart →

jenkinsci/credentials-binding-plugin · GHSA-7ff8-qfwx-8gx5

medium2022-05-24

CVE-2020-2184-CSRF vulnerability in Jenkins CVS Plugin

View chart →

jenkinsci/cvs-plugin · GHSA-63mw-hp3h-gc77

high2022-05-24

CVE-2020-2189-RCE vulnerability in SCM Filter Jervis Plugin

View chart →

jenkinsci/scm-filter-jervis-plugin · GHSA-4hhq-j3xw-wj89

medium2022-05-24

CVE-2020-2181-Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps

View chart →

jenkinsci/credentials-binding-plugin · GHSA-43j2-r4v3-m8jp

medium2022-05-24

CVE-2020-10686-Keycloak users may be able to remove MFA from other users' devices

View chart →

keycloak/keycloak · GHSA-9695-w6h2-jpv9

critical2022-05-24

CVE-2020-7645-chrome-launcher subject to OS Command Injection

View chart →

googlechrome/chrome-launcher · GHSA-gp2j-mg4w-2rh5

critical2022-05-24

CVE-2020-11651-SaltStack Salt Unauthenticated Remote Code Execution

View chart →

saltstack/salt · GHSA-pjhf-vpx3-33r3

high2022-05-24

CVE-2020-12478-TeamPass files are available without authentication

View chart →

nilsteampassnet/teampass · GHSA-83h6-22cp-f22w

high2022-05-24

CVE-2020-12479-TeamPass PHP arbitrary file include vulnerability

View chart →

nilsteampassnet/teampass · GHSA-6jf9-8m34-96w5

high2022-05-24

CVE-2020-11652-SaltStack Salt is vulnerable Arbitrary Directory Access

View chart →

saltstack/salt · GHSA-vp49-2g4r-m3x3

medium2022-05-24

CVE-2020-12469-Subrion CMS PHP Object Injection

View chart →

intelliants/subrion · GHSA-fmqq-hw9m-448q

high2022-05-24

CVE-2020-12468-Subrion CMS CSV injection via Export Language

View chart →

intelliants/subrion · GHSA-4f4h-jgjp-3vfg

high2022-05-24

CVE-2020-12458-Grafana information disclosure

View chart →

grafana/grafana · GHSA-3jq7-8ph8-63xm

high2022-05-24

CVE-2020-12459-Grafana world readable configuration files

View chart →

grafana/grafana · GHSA-m25m-5778-fm22

medium2022-05-24

CVE-2020-12245-Grafana XSS in header column rename

View chart →

grafana/grafana · GHSA-ccmg-w4xm-p28v

high2022-05-24

CVE-2020-2180-RCE vulnerability in Jenkins AWS SAM Plugin

View chart →

jenkinsci/aws-sam-plugin · GHSA-qrm8-cw73-r9w8

medium2022-05-24

CVE-2020-2177-Credentials stored in plain text by Jenkins Copr Plugin

View chart →

jenkinsci/copr-plugin · GHSA-4wx5-c723-xvwv

high2022-05-24

CVE-2020-2178-XXE vulnerability in Jenkins Parasoft Findings Plugin

View chart →

jenkinsci/parasoft-findings-plugin · GHSA-2rh4-xgmq-63jp

medium2022-05-24

CVE-2020-11823-Dolibarr stored Cross-site Scripting vulnerability

View chart →

dolibarr/dolibarr · GHSA-q938-82fw-wfcf