Security Advisories | GitStock

high2022-05-24

CVE-2019-10453-Jenkins Delphix Plugin vulnerable to Cleartext credential storage

jenkinsci/delphix-plugin · GHSA-4p59-p85x-f3wx

medium2022-05-24

CVE-2019-10445-Missing permission checks in Google Kubernetes Engine Jenkins Plugin

jenkinsci/google-kubernetes-engine-plugin · GHSA-wwr4-79jv-297r

medium2022-05-24

CVE-2019-10441-Jenkins iceScrum Plugin vulnerable to Cross-site Request Forgery

jenkinsci/icescrum-plugin · GHSA-rxvx-9wg5-qpww

medium2022-05-24

CVE-2019-10442-Jenkins iceScrum Plugin vulnerable to Missing Authorization

jenkinsci/icescrum-plugin · GHSA-h5cx-w235-58hm

high2022-05-24

CVE-2019-10440-Jenkins NeoLoad Plugin stores credentials in cleartext

jenkinsci/neoload-plugin · GHSA-98p6-6428-77v7

medium2022-05-24

CVE-2019-10436-Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin

jenkinsci/google-oauth-plugin · GHSA-8qh4-fghr-6fxg

high2022-05-24

CVE-2019-10446-Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification

jenkinsci/vmanager-plugin · GHSA-5j9f-5wmp-7f8h

medium2022-05-24

CVE-2019-10439-Jenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing Authorization

jenkinsci/crx-content-package-deployer-plugin · GHSA-4cmq-88f8-53r5

high2022-05-24

CVE-2019-10443-Jenkins iceScrum Plugin stores credentials in Cleartext

jenkinsci/icescrum-plugin · GHSA-362p-56c9-q273

medium2022-05-24

CVE-2019-10438-Jenkins CRX Content Package Deployer Plugin subject to Missing Authorization

jenkinsci/crx-content-package-deployer-plugin · GHSA-jww4-2793-9gmg

high2022-05-24

CVE-2019-10437-Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery

jenkinsci/crx-content-package-deployer-plugin · GHSA-62fp-j75q-mqhc

medium2022-05-24

CVE-2019-14858-Ansible leaks sensitive information to logs when told not to

ansible/ansible · GHSA-h653-95qw-h2mp

medium2022-05-24

CVE-2019-14838-Wildfly Authorization Misconfiguration

wildfly/wildfly-core · GHSA-82v2-f875-73g9

medium2022-05-24

CVE-2019-17496-Craft CMS XSS Vulnerability

craftcms/cms · GHSA-f3xr-q258-h7m9

high2022-05-24

CVE-2019-17109-koji hub allows arbitrary upload destinations

koji-project/koji · GHSA-7498-c9fm-g64p

high2022-05-24

CVE-2019-15715-MantisBT Remote Code Execution

mantisbt/mantisbt · GHSA-v23g-wjvq-2fpf

critical2022-05-24

CVE-2019-17134-OpenStack Octavia Amphora-Agent not requiring Client-Certificate

openstack/octavia · GHSA-r4v4-3jj7-jc29

medium2022-05-24

CVE-2019-17106-Centreon Sensitive Data Exposure

centreon/centreon-archived · GHSA-rx4j-x3fh-9qwg

high2022-05-24

CVE-2019-17104-Centreon Does Not Set HTTPOnly Flag

centreon/centreon-archived · GHSA-j224-7qr4-8646

high2022-05-24

CVE-2019-14846-Ansible Uses Plugins That Disclose Credentials

ansible/ansible · GHSA-pm48-cvv2-29q5