Security advisories

high2022-05-24

CVE-2019-10460-Jenkins Bitbucket OAuth Plugin contains Insufficiently Protected Credentials

View chart →

jenkinsci/bitbucket-oauth-plugin · GHSA-84h6-jf8x-ff2j

medium2022-05-24

CVE-2019-10470-Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration

View chart →

jenkinsci/kubernetes-ci-plugin · GHSA-7jf5-p556-75pr

medium2022-05-24

CVE-2019-10467-Jenkins Sonar Gerrit Plugin stores credentials unencrypted

View chart →

jenkinsci/sonar-gerrit-plugin · GHSA-6fv3-w7j6-5xfc

medium2022-05-24

CVE-2019-10459-Jenkins Mattermost Notification Plugin contains unencrypted storage of secret token

View chart →

jenkinsci/mattermost-plugin · GHSA-xcj6-4355-2823

medium2022-05-24

CVE-2019-10469-Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization

View chart →

jenkinsci/kubernetes-ci-plugin · GHSA-hch9-6qrj-5f49

high2022-05-24

CVE-2019-10466-Jenkins 360 FireLine Plugin vulnerable to XML External Entity Reference

View chart →

jenkinsci/fireline-plugin · GHSA-346g-jrx9-jgf4

critical2022-05-24

CVE-2018-7269-Yii SQL injection vulnerability

View chart →

yiisoft/yii2 · GHSA-hhg2-g6h6-c266

high2022-05-24

CVE-2019-18197-Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability

View chart →

sparklemotion/nokogiri · GHSA-242x-7cm6-4w8j

medium2022-05-24

CVE-2019-17576-Dolibarr Cross-site Scripting via outgoing email setup feature

View chart →

dolibarr/dolibarr · GHSA-rr5g-rc28-wxwj

medium2022-05-24

CVE-2019-17577-Dolibarr Cross-site Scripting via outgoing email setup feature

View chart →

dolibarr/dolibarr · GHSA-r4gf-ggp5-25g5

medium2022-05-24

CVE-2019-17578-Dolibarr Cross-site Scripting vulnerability

View chart →

dolibarr/dolibarr · GHSA-9p7q-v9gp-frq4

critical2022-05-24

CVE-2019-17625-Rambox RCE Vulnerability

View chart →

ramboxapp/community-edition · GHSA-2gc6-2h2g-ph48

critical2022-05-24

CVE-2019-16699-sr_freecap for Typo3 RCE Vulnerability

View chart →

mavolkmer/sr-freecap · GHSA-598p-rv6p-g7qc

medium2022-05-24

CVE-2019-17223-Dolibarr ERP and CRM HTML Injection

View chart →

dolibarr/dolibarr · GHSA-3264-65pg-5xm4

medium2022-05-24

CVE-2019-16698-direct_mail for Typo3 sensitive data exposure

View chart →

kartolo/direct_mail · GHSA-j2w4-45qm-r674

high2022-05-24

CVE-2019-16682-url_redirect for Typo3 SQLi Vulnerability

View chart →

froemken/url_redirect · GHSA-hcpv-xh8q-f3vq

critical2022-05-24

CVE-2019-13116-Mulesoft Mule Unsafe Deserialization

View chart →

mulesoft/mule · GHSA-cvcf-w75c-gw5r

critical2022-05-24

CVE-2019-10458-Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin

View chart →

jenkinsci/puppet-enterprise-pipeline-plugin · GHSA-mj9c-vjp9-pggh

medium2022-05-24

CVE-2019-10455-Missing permission check in Jenkins Rundeck Plugin

View chart →

jenkinsci/rundeck-plugin · GHSA-p4f7-7c33-9675

medium2022-05-24

CVE-2019-10449-Jenkins Fortify on Demand Plugin stores credentials in plain text

View chart →

jenkinsci/fortify-on-demand-uploader-plugin · GHSA-hhhh-69qp-5p2v