Security advisories

medium2022-05-24

CVE-2020-2107-Fortify Plugin stored credentials in plain text

View chart →

jenkinsci/fortify-plugin · GHSA-xr37-pjfh-qwwc

medium2022-05-24

CVE-2020-2106-Stored XSS vulnerability in Code Coverage API Plugin

View chart →

jenkinsci/code-coverage-api-plugin · GHSA-xg77-xqhq-crpr

high2022-05-24

CVE-2020-2108-XXE vulnerability in Jenkins WebSphere Deployer Plugin

View chart →

jenkinsci/websphere-deployer-plugin · GHSA-f5wx-w2f9-82gh

low2022-05-24

CVE-2020-2105-Jenkins REST APIs vulnerable to clickjacking

View chart →

jenkinsci/jenkins · GHSA-7xp8-7wqx-5hqx

medium2022-05-24

CVE-2020-2101-Non-constant time comparison of inbound TCP agent connection secret

View chart →

jenkinsci/jenkins · GHSA-w7jr-wqw6-54xc

medium2022-05-24

CVE-2020-2104-Memory usage graphs accessible to anyone with Overall/Read

View chart →

jenkinsci/jenkins · GHSA-r78q-qgx6-64pp

high2022-05-24

CVE-2020-2099-Inbound TCP Agent Protocol/3 authentication bypass in Jenkins

View chart →

jenkinsci/jenkins · GHSA-qp4f-2w67-c8hw

medium2022-05-24

CVE-2020-2100-Jenkins vulnerable to UDP amplification reflection attack

View chart →

jenkinsci/jenkins · GHSA-gpxv-776p-7gc7

medium2022-05-24

CVE-2020-2102-Non-constant time HMAC comparison

View chart →

jenkinsci/jenkins · GHSA-fj6f-6933-839j

medium2022-05-24

CVE-2020-2103-Jenkins Diagnostic page exposed session cookies

View chart →

jenkinsci/jenkins · GHSA-4jjj-cm7q-v6hr

medium2022-05-24

CVE-2020-7934-Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet

View chart →

liferay/liferay-portal · GHSA-f99h-h678-fgg4

medium2022-05-24

CVE-2020-8091-Typo3 Cross-Site Scripting in Flash component (ELTS)

View chart →

typo3/typo3 · GHSA-qvhv-pwww-53jj

critical2022-05-24

CVE-2020-7995-Dolibarr Improper Restriction of Excessive Authentication Attempts

View chart →

dolibarr/dolibarr · GHSA-m5c3-3gvf-q8j5

medium2022-05-24

CVE-2020-7994-Dolibarr cross-site scripting (XSS) vulnerability

View chart →

dolibarr/dolibarr · GHSA-4hf3-229w-6h8r

medium2022-05-24

CVE-2015-3154-Zenario CMS vulnerable to CRLF injection

View chart →

zendframework/zendframework · GHSA-5957-5crx-79jx

high2022-05-24

CVE-2020-7596-Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov

View chart →

codecov/codecov-node · GHSA-mh2h-6j8q-x246

critical2022-05-24

CVE-2020-7941-Plone Unauthenticated Write Vulnerability

View chart →

plone/plone.app.contenttypes · GHSA-w6g9-xccc-347h

high2022-05-24

CVE-2020-7939-Plone SQL Injection Vulnerability

View chart →

plone/plone · GHSA-hhmf-7rgg-gcw5

high2022-05-24

CVE-2020-7940-Plone allows weak passwords

View chart →

plone/plone · GHSA-cw58-gpgw-hwx2

medium2022-05-24

CVE-2020-7937-Plone cross site scripting (XSS)

View chart →

plone/plone · GHSA-8mc4-2xrc-g582