Security advisories

medium2022-05-24

CVE-2020-2111-Subversion Plugin stored XSS vulnerability

View chart →

jenkinsci/subversion-plugin · GHSA-x3pr-fcgm-wjgc

low2022-05-24

CVE-2020-2119-Client secret transmitted in plain text by Azure AD Plugin

View chart →

jenkinsci/azure-ad-plugin · GHSA-vvg2-hg3c-mqj3

high2022-05-24

CVE-2020-2116-CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials

View chart →

jenkinsci/pipeline-githubnotify-step-plugin · GHSA-qhxf-m7jm-jc57

medium2022-05-24

CVE-2020-2112-Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)

View chart →

jenkinsci/git-parameter-plugin · GHSA-hw26-fw67-qxm9

medium2022-05-24

CVE-2020-2113-Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)

View chart →

jenkinsci/git-parameter-plugin · GHSA-fgxc-mxvw-55mv

low2022-05-24

CVE-2020-2114-Jenkins S3 Publisher Plugin transmits credentials in plain text during configuration

View chart →

jenkinsci/s3-plugin · GHSA-ffr6-8cv5-j637

medium2022-05-24

CVE-2020-2118-Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin

View chart →

jenkinsci/pipeline-githubnotify-step-plugin · GHSA-8p4m-62gp-33j4

medium2022-05-24

CVE-2020-1726-Podman has Files or Directories Accessible to External Parties

View chart →

containers/podman · GHSA-vmhj-p9hw-vgrf

high2022-05-24

CVE-2020-0767-ChakraCore RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-fhc8-h6hr-h9mq

high2022-05-24

CVE-2020-0712-ChakraCore RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-w6qf-35f2-j6h7

high2022-05-24

CVE-2020-0713-ChakraCore RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-g6mc-8679-ghx9

high2022-05-24

CVE-2020-0710-ChakraCore RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-67xp-4726-4978

high2022-05-24

CVE-2020-0711-ChakraCore RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-63fw-7jgf-5hwv

critical2022-05-24

CVE-2019-17268-omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party

View chart →

beenhero/omniauth-weibo-oauth2 · GHSA-vr22-43gj-rx3f

critical2022-05-24

CVE-2020-3718-Magento security bypass vulnerability

View chart →

magento/magento2 · GHSA-x9p7-vgp2-9pq2

high2022-05-24

CVE-2020-3719-Magento sql injection vulnerability

View chart →

magento/magento2 · GHSA-rr59-pjwj-6grj

medium2022-05-24

CVE-2020-3758-Magento stored cross-site scripting vulnerability

View chart →

magento/magento2 · GHSA-p5q3-xg47-653m

medium2022-05-24

CVE-2020-3715-Magento stored cross-site scripting vulnerability

View chart →

magento/magento2 · GHSA-mgg3-v948-2vgr

critical2022-05-24

CVE-2020-3716-Magento deserialization vulnerability

View chart →

magento/magento2 · GHSA-9wc9-498w-h8xv

medium2022-05-24

CVE-2020-3717-Magento Path Traversal

View chart →

magento/magento2 · GHSA-874g-pxqp-frqp