Security Advisories

medium2022-05-14

CVE-2018-1000142-Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials

View chart

jenkinsci/ghprb-plugin · GHSA-hr74-2j5v-ghfv

high2022-05-14

CVE-2018-1000153-Jenkins vSphere Plugin Cross-Site Request Forgery vulnerability

View chart

jenkinsci/vsphere-cloud-plugin · GHSA-2g32-2j8w-2qgf

high2022-05-14

CVE-2017-18260-Dolibarr SQL injection vulnerability

View chart

dolibarr/dolibarr · GHSA-9986-6m4g-25f6

high2022-05-14

CVE-2017-9839-Dolibarr SQL injection via type parameter in product/stats/card.php

View chart

dolibarr/dolibarr · GHSA-84gh-4m36-cgqx

medium2022-05-14

CVE-2017-9838-Dolibarr Cross-Site Scripting (XSS) vulnerability

View chart

dolibarr/dolibarr · GHSA-726g-cgcq-4xw8

medium2022-05-14

CVE-2017-18259-Dolibarr ERP and CRM contain XSS Vulnerability

View chart

dolibarr/dolibarr · GHSA-4323-cfj5-98mh

critical2022-05-14

CVE-2018-10225-thinkphp SQL Injection via the index.php s parameter

View chart

top-think/framework · GHSA-xvhr-7q4q-qjgp

medium2022-05-14

CVE-2017-7298-Moodle Cross-site Scripting in the Course summary filter of the Add a new course

View chart

moodle/moodle · GHSA-4m6v-x9fj-847j

high2022-05-14

CVE-2018-10188-phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution

View chart

phpmyadmin/composer · GHSA-v6fp-h79x-9rqc

high2022-05-14

CVE-2018-1000167-OISF suricata-update unsafely deserializes YAML data

View chart

oisf/suricata-update · GHSA-7c4h-w765-6pwg

high2022-05-14

CVE-2014-6633-Tryton vulnerable to arbitrary command execution

View chart

tryton/trytond · GHSA-m9jj-5qvj-5fhx

medium2022-05-14

CVE-2018-10366-User Plugin for October CSS Allows XSS

View chart

rainlab/user-plugin · GHSA-x5jc-34xf-c24q

medium2022-05-14

CVE-2017-14740-GeniXCMS Cross-site scripting (XSS) vulnerability

View chart

genixcms/genixcms · GHSA-478j-mcrr-3877

medium2022-05-14

CVE-2018-10095-Dolibarr Cross-site scripting (XSS) vulnerability

View chart

dolibarr/dolibarr · GHSA-p2fm-8rhj-58fr

high2022-05-14

CVE-2018-10657-Matrix Synapse DoS

View chart

matrix-org/synapse · GHSA-vmcc-4p4x-x7wg

medium2022-05-14

CVE-2018-1000173-Jenkins Google Login Plugin Session Fixation vulnerability

View chart

jenkinsci/google-login-plugin · GHSA-rp82-xvg3-727c

medium2022-05-14

CVE-2018-1000174-Jenkins Google Login Plugin Open Redirect vulnerability

View chart

jenkinsci/google-login-plugin · GHSA-j279-cx9m-jv3w

medium2022-05-14

CVE-2018-1000175-Jenkins HTML Publisher Plugin path traversal vulnerability

View chart

jenkinsci/htmlpublisher-plugin · GHSA-4x63-3p7q-xmh7

medium2022-05-14

CVE-2018-11326-Joomla! XSS Vulnerability

View chart

joomla/joomla-cms · GHSA-g3m5-vvj7-xrwv

medium2022-05-14

CVE-2018-1135-Moodle Portfolio forum caller class allows a user to download any file

View chart

moodle/moodle · GHSA-vxmv-74rf-vqgp