Security advisories

high2022-05-24

CVE-2020-8819-CardGate Payments plugin for WooCommerce does not validate request origin

View chart →

cardgate/woocommerce · GHSA-5pq5-9phv-q5j3

medium2022-05-24

CVE-2020-5188-DNN File Upload Vulnerability

View chart →

dnnsoftware/dnn.platform · GHSA-vjcm-j85r-7p68

high2022-05-24

CVE-2019-12437-Silverstripe CSRF Protection Bypass via GraphQL

View chart →

silverstripe/silverstripe-graphql · GHSA-fx37-56v6-85q6

medium2022-05-24

CVE-2019-12246-SilverStripe Denial of Service on flush and development URL tools

View chart →

silverstripe/silverstripe-framework · GHSA-5fr8-xhqq-4p3q

medium2022-05-24

CVE-2019-10794-component-flatten vulnerable to Prototype Pollution

View chart →

componentjs/flatten.js · GHSA-g6r3-hhg9-qf58

medium2022-05-24

CVE-2020-2131-Passwords stored in plain text by Harvest SCM Plugin

View chart →

jenkinsci/harvest-plugin · GHSA-qj7p-9hgf-x8j7

medium2022-05-24

CVE-2020-2130-Passwords stored in plain text by Harvest SCM Plugin

View chart →

jenkinsci/harvest-plugin · GHSA-jmp9-f42q-4g85

medium2022-05-24

CVE-2020-2133-Password stored in plain text by Applatix Plugin

View chart →

jenkinsci/applatix-plugin · GHSA-54m9-h7qp-fwvg

high2022-05-24

CVE-2020-2121-RCE vulnerability in Google Kubernetes Engine Plugin

View chart →

jenkinsci/google-kubernetes-engine-plugin · GHSA-wf76-qgqq-gcfj

medium2022-05-24

CVE-2020-2124-Password stored in plain text by Dynamic Extended Choice Parameter Plugin

View chart →

jenkinsci/dynamic-extended-choice-parameter-plugin · GHSA-h6pp-v4j6-w76c

medium2022-05-24

CVE-2020-2132-Password stored in plain text by Parasoft Environment Manager Plugin

View chart →

jenkinsci/environment-manager-tools-plugin · GHSA-gmg2-3w6v-945p

high2022-05-24

CVE-2020-2120-XXE vulnerability in FitNesse Plugin

View chart →

jenkinsci/fitnesse-plugin · GHSA-c3cg-mv5w-cvw8

low2022-05-24

CVE-2020-2126-Token stored in plain text by DigitalOcean Plugin

View chart →

jenkinsci/digitalocean-plugin · GHSA-8g6v-g8qc-5w7j

medium2022-05-24

CVE-2020-2122-Stored XSS vulnerability in Jenkins brakeman Plugin

View chart →

jenkinsci/brakeman-plugin · GHSA-7q9r-vhg2-789w

high2022-05-24

CVE-2020-2123-RCE vulnerability in RadarGun Plugin

View chart →

jenkinsci/radargun-plugin · GHSA-723p-9rcj-xv8j

medium2022-05-24

CVE-2020-2128-Password stored in plain text by ECX Copy Data Management Plugin

View chart →

jenkinsci/catalogic-ecx-plugin · GHSA-6793-gmp9-2535

low2022-05-24

CVE-2020-2125-Credentials stored in plain text by debian-package-builder Plugin

View chart →

jenkinsci/debian-package-builder-plugin · GHSA-64jr-ggw8-h9jc

low2022-05-24

CVE-2020-2127-Credential stored in plain text by BMC Release Package and Deployment Plugin

View chart →

jenkinsci/bmc-rpd-plugin · GHSA-2j3r-x6xc-qqqj

high2022-05-24

CVE-2020-2115-XXE vulnerability in NUnit Plugin

View chart →

jenkinsci/nunit-plugin · GHSA-xvhf-q744-5xm8

high2022-05-24

CVE-2020-2117-Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials

View chart →

jenkinsci/pipeline-githubnotify-step-plugin · GHSA-x7rc-5mjg-5pvr