Security advisories

critical2022-05-13

CVE-2018-1000226-Cobbler Improper Validation of Security Tokens

View chart →

cobbler/cobbler · GHSA-f88q-22g8-frcg

high2022-05-13

CVE-2018-1000165-LightSAML Incorrect Access Control vulnerability

View chart →

lightsaml/lightsaml · GHSA-vg4f-8v9q-5c3x

medium2022-05-13

CVE-2018-1000145-Jenkins Perforce Plugin uses ineffective credentials encryption

View chart →

jenkinsci/perforce-plugin · GHSA-cwxx-gwwj-pqjq

medium2022-05-13

CVE-2018-1000152-Jenkins vSphere Plugin incorrect authorization vulnerability

View chart →

jenkinsci/vsphere-cloud-plugin · GHSA-48pq-x3vw-4pqf

high2022-05-13

CVE-2018-1000146-Liquibase Runner Plugin allows users to load arbitrary Java code into controller JVM

View chart →

jenkinsci/liquibase-runner-plugin · GHSA-3hvc-xwjp-xr8m

medium2022-05-13

CVE-2018-1000111-Jenkins Subversion Plugin Incorrect Authorization vulnerability

View chart →

jenkinsci/subversion-plugin · GHSA-w9gq-8q35-3jcc

critical2022-05-13

CVE-2018-1000134-Weak Password Requirements in UnboundID LDAP SDK

View chart →

pingidentity/ldapsdk · GHSA-qwq9-8rpf-8mp7

medium2022-05-13

CVE-2018-1000109-Jenkins Google Play Android Publisher Plugin allows attacker to obtain credential IDs

View chart →

jenkinsci/google-play-android-publisher-plugin · GHSA-rvx4-gg8w-qw24

low2022-05-13

CVE-2018-1000104-Jenkins Coverity Plugin has Insufficiently Protected Credentials

View chart →

jenkinsci/coverity-plugin · GHSA-cghg-jcv6-4v5m

medium2022-05-13

CVE-2018-1000110-Incorrect Authorization in Jenkins Git Plugin

View chart →

jenkinsci/git-plugin · GHSA-46p2-fwqg-3h6m

medium2022-05-13

CVE-2018-1000057-Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials

View chart →

jenkinsci/credentials-binding-plugin · GHSA-38xm-xhvj-q2qf

high2022-05-13

CVE-2018-1000025-Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability

View chart →

kreait/firebase-php · GHSA-4gjj-r7w8-42cq

high2022-05-13

CVE-2018-0818-ChakraCore RCE Vulnerability

View chart →

chakra-core/chakracore · GHSA-fv8m-p45w-gf38

high2022-05-13

CVE-2018-0572-baserCMS vulnerable to Access Control Bypass

View chart →

baserproject/basercms · GHSA-mjj9-33j8-pfwh

critical2022-05-13

CVE-2017-9232-Juju uses a UNIX domain socket without setting appropriate permissions

View chart →

juju/juju · GHSA-j3hp-pv6v-rgrx

medium2022-05-13

CVE-2017-8879-Dolibarr allows password changes without supplying the current password

View chart →

dolibarr/dolibarr · GHSA-5x4j-xcmv-v3q2

medium2022-05-13

CVE-2017-8383-Craft CMS Unauthorized View

View chart →

craftcms/cms · GHSA-7qq6-fgpw-xw45

medium2022-05-13

CVE-2017-8388-GeniXCMS Mailbox validation logic vulnerability

View chart →

genixcms/genixcms · GHSA-559c-w54x-8342

critical2022-05-13

CVE-2017-7893-SaltStack Salt allows compromised salt-minions to impersonate the salt-master

View chart →

saltstack/salt · GHSA-g283-88v5-rmq2

high2022-05-13

CVE-2017-7684-Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption

View chart →

apache/openmeetings · GHSA-g3vq-f35v-vhgm