Security advisories

high2022-05-13

CVE-2018-12642-Froxlor Incorrect Access Control

View chart →

froxlor/froxlor · GHSA-r6g8-mq9v-cgp4

medium2022-05-13

CVE-2018-12615-Phusion Passenger incorrect permission assignment

View chart →

phusion/passenger · GHSA-4284-jfhc-f854

high2022-05-13

CVE-2018-12457-express-cart allows any user to create an admin user

View chart →

mrvautin/expresscart · GHSA-hr89-w7p6-pjmq

high2022-05-13

CVE-2018-12423-Matrix Synapse Authorization Error

View chart →

matrix-org/synapse · GHSA-ch5v-fhg8-7gv9

high2022-05-13

CVE-2018-12291-Matrix Synapse Security Filtering Flaw

View chart →

matrix-org/synapse · GHSA-v8wm-g9f2-xjv4

high2022-05-13

CVE-2018-12027-Insecure Permissions in Phusion Passenger

View chart →

phusion/passenger · GHSA-whfx-877c-5p28

high2022-05-13

CVE-2018-12028-Incorrect Access Control in Phusion Passenger

View chart →

phusion/passenger · GHSA-jjhj-8gx7-x836

medium2022-05-13

CVE-2018-1136-Moodle Cross-site Scripting

View chart →

moodle/moodle · GHSA-xhfw-wjjc-4j5h

medium2022-05-13

CVE-2018-1134-Moodle Improper Privilege Management

View chart →

moodle/moodle · GHSA-xjx9-7c29-pwmm

high2022-05-13

CVE-2018-11047-Cloud Foundry UAA accepts refresh token as access token on admin endpoints

View chart →

cloudfoundry/uaa · GHSA-r4v8-9hgx-vm6m

medium2022-05-13

CVE-2018-1043-Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames

View chart →

moodle/moodle · GHSA-hpwm-84h5-vqr8

high2022-05-13

CVE-2018-10406-Yelp OSXCollector Improper Certificate Validation

View chart →

yelp/osxcollector · GHSA-g3cc-pvjj-9xq9

medium2022-05-13

CVE-2018-1000864-Loop with Unreachable Exit Condition in Jenkins

View chart →

jenkinsci/jenkins · GHSA-9cjv-93g7-c6mv

high2022-05-13

CVE-2018-1000863-Improper Limitation of a Pathname to a Restricted Directory in Jenkins

View chart →

jenkinsci/jenkins · GHSA-4jhm-5f7g-75fp

high2022-05-13

CVE-2018-1000603-CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials

View chart →

jenkinsci/openstack-cloud-plugin · GHSA-grf8-94q5-4phx

high2022-05-13

CVE-2018-1000600-CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials

View chart →

jenkinsci/github-plugin · GHSA-6cvm-v6qj-hjq9

low2022-05-13

CVE-2018-1000608-Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password

View chart →

jenkinsci/zos-connector-plugin · GHSA-5fq9-x9f4-x2r2

high2022-05-13

CVE-2018-1000403-AWS CodeDeploy Plugin stored AWS Secret Key in plain text

View chart →

jenkinsci/aws-codedeploy-plugin · GHSA-h66p-m766-33fv

medium2022-05-13

CVE-2018-1000408-Improper Authorization in Jenkins

View chart →

jenkinsci/jenkins · GHSA-4h47-h3cr-23wh

high2022-05-13

CVE-2018-1000207-MODX Revolution Incorrect Access Control vulnerability

View chart →

modxcms/revolution · GHSA-m899-6mh4-mpc5