Security Advisories

medium2022-05-17

CVE-2017-1000085-Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability

jenkinsci/subversion-plugin · GHSA-hrwc-pqfm-g6qf

medium2022-05-17

CVE-2017-1000087-Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs

View chart

jenkinsci/github-branch-source-plugin · GHSA-6jp2-hggx-8j7p

medium2022-05-17

CVE-2014-8088-Zend Access Restriction Bypass

View chart

zendframework/zendframework · GHSA-f6rc-rh43-h8gr

critical2022-05-17

CVE-2016-9013-Django user with hardcoded password created when running tests on Oracle

View chart

django/django · GHSA-mv8g-fhh6-6267

critical2022-05-17

CVE-2016-9014-Django DNS Rebinding Vulnerability

View chart

django/django · GHSA-3f2c-jm6v-cr35

medium2022-05-17

CVE-2015-6918-salt leaks git usernames and passwords to the log

View chart

saltstack/salt · GHSA-q2x6-8gfj-hjxw

high2022-05-17

CVE-2015-7503-Zend Framework Information Disclosure

View chart

zendframework/zendframework · GHSA-pm9m-w23q-5967

medium2022-05-17

CVE-2010-3659-TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms

View chart

typo3-cms/backend · GHSA-jr79-65xr-q7cx

medium2022-05-17

CVE-2017-15612-Cross-site Scripting in Mistune

View chart

lepture/mistune · GHSA-hpv5-v8g5-c864

high2022-05-17

CVE-2017-12628-Apache James Privilege Escalation

View chart

apache/james-project · GHSA-xj7q-q94c-6wr3

critical2022-05-17

CVE-2017-14695-SaltStack Salt Directory traversal vulnerability in minion id validation

View chart

saltstack/salt · GHSA-j6gj-pg62-x8j6

medium2022-05-17

CVE-2014-0095-Denial of service in Apache Tomcat

View chart

apache/tomcat · GHSA-wf5v-jhxj-q632

high2022-05-17

CVE-2017-14696-SaltStack Salt Denial of Service via a crafted authentication request

View chart

saltstack/salt · GHSA-657p-cj5r-mjrh

medium2022-05-17

CVE-2013-6044-Django cross-site scripting (XSS) vulnerability via is_safe_url function

View chart

django/django · GHSA-9cwg-mhxf-hh59

medium2022-05-17

CVE-2012-5181-Concrete5 Vulnerable to Cross-Site Scripting (XSS)

View chart

concretecms/concrete5-legacy · GHSA-x4x9-4c65-73w8

medium2022-05-17

CVE-2017-14992-tar-split memory exhaustion

View chart

vbatts/tar-split · GHSA-hqwh-8xv9-42hw

low2022-05-17

CVE-2017-1000242-Insecure temporary file usage in Jenkins Git Client Plugin

View chart

jenkinsci/git-client-plugin · GHSA-fcxw-hhxq-48wx

medium2022-05-17

CVE-2017-16539-Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)

View chart

moby/moby · GHSA-vfjc-2qcw-j95j

critical2022-05-17

CVE-2015-3933-MetalGenix GeniXCMS vulnerable to SQL Injection

View chart

genixcms/genixcms · GHSA-q4hw-62mx-q37w

high2022-05-17

CVE-2017-11862-Chakra Core vulnerable to privilege escalation due to type confusion

View chart

chakra-core/chakracore · GHSA-pcr8-75v3-w9pf