Security advisories

medium2022-05-24

CVE-2020-7936-Plone Open Redirect Vulnerability

View chart →

plone/plone · GHSA-82j9-wfcf-9v2h

medium2022-05-24

CVE-2020-7210-Umbraco CMS vulnerable to CSRF

View chart →

umbraco/umbraco-cms · GHSA-gqqf-8cx6-9r7h

critical2022-05-24

CVE-2015-2784-papercrop does not properly handle crop input

View chart →

rsantamaria/papercrop · GHSA-m44r-gv6q-9j9r

critical2022-05-24

CVE-2019-17361-SaltStack Salt is vulnerable to command injection

View chart →

saltstack/salt · GHSA-q53j-p6r2-g2v4

medium2022-05-24

CVE-2020-5501-phpBB Cross-Site Request Forgery (CSRF)

View chart →

phpbb/phpbb-app · GHSA-cpqc-g4r8-6hxg

medium2022-05-24

CVE-2020-5502-phpBB allows CSRF

View chart →

phpbb/phpbb · GHSA-69q7-hww4-8pjq

high2022-05-24

CVE-2020-2098-CSRF vulnerability in Jenkins Sounds Plugin allow OS command execution

View chart →

jenkinsci/sounds-plugin · GHSA-x37x-3fw2-5qw2

medium2022-05-24

CVE-2020-2095-Redgate SQL Change Automation Plugin stored credentials in plain text

View chart →

jenkinsci/redgate-sql-ci-plugin · GHSA-x23m-8c2h-6wg7

high2022-05-24

CVE-2020-2092-XXE vulnerability in Jenkins Robot Framework Plugin

View chart →

jenkinsci/robot-plugin · GHSA-m53p-f25q-q6fg

medium2022-05-24

CVE-2020-2094-Missing permission checks in Health Advisor by CloudBees Plugin

View chart →

jenkinsci/cloudbees-jenkins-advisor-plugin · GHSA-h72v-652w-xv64

medium2022-05-24

CVE-2020-2096-Reflected XSS vulnerability in Jenkins gitlab-hook Plugin

View chart →

jenkinsci/gitlab-hook-plugin · GHSA-8696-836p-c8qp

medium2022-05-24

CVE-2020-2093-CSRF vulnerability in Health Advisor by CloudBees Plugin

View chart →

jenkinsci/cloudbees-jenkins-advisor-plugin · GHSA-fc92-8r77-9297

low2022-05-24

CVE-2020-2090-CSRF vulnerability in Jenkins Amazon EC2 Plugin

View chart →

jenkinsci/ec2-plugin · GHSA-9hvf-pfq3-7pp6

medium2022-05-24

CVE-2020-2091-Missing permission checks in Jenkins Amazon EC2 Plugin

View chart →

jenkinsci/ec2-plugin · GHSA-6hmm-77r2-h6hr

high2022-05-24

CVE-2015-8549-PyAMF vulnerable to XML external entity (XXE)

View chart →

hydralabs/pyamf · GHSA-m7m4-4vm8-55wg

high2022-05-24

CVE-2015-6497-Magento arbitrary PHP code execution via the productData parameter

View chart →

magento/magento2 · GHSA-j4fq-3fm7-wh5v

medium2022-05-24

CVE-2018-1002104-Kubernetes ingress exposes sensitive information

View chart →

kubernetes/ingress-nginx · GHSA-p3x5-5xpx-9phm

critical2022-05-24

CVE-2020-6948-HashBrown CMS RCE

View chart →

hashbrowncms/hashbrown-cms · GHSA-4gjv-5jjp-rcgh

high2022-05-24

CVE-2020-5504-phpMyAdmin SQL injection in user accounts page

View chart →

phpmyadmin/composer · GHSA-fgj8-93xx-f6g6

critical2022-05-24

CVE-2019-14837-keycloak vulnerable to unauthorized login via mail server setup

View chart →

keycloak/keycloak · GHSA-cf8f-w2c5-p5jr