Security advisories

medium2022-03-16

CVE-2022-27196-Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin

View chart →

jenkinsci/favorite-plugin · GHSA-874r-46c6-7p4r

medium2022-03-16

CVE-2022-27197-Stored Cross-site Scripting vulnerability in Jenkins Dashboard View Plugin

View chart →

jenkinsci/dashboard-view-plugin · GHSA-6fg4-36v7-xv32

low2022-03-16

CVE-2022-27195-Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin

View chart →

jenkinsci/parameterized-trigger-plugin · GHSA-5mpf-hw8f-86w9

high2022-03-16

CVE-2022-27198-CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin

View chart →

jenkinsci/aws-credentials-plugin · GHSA-pv4m-7c68-f4c5

high2022-03-16

CVE-2022-27202-Stored Cross-site Scripting vulnerability in Jenkins Extended Choice Parameter Plugin

View chart →

jenkinsci/extended-choice-parameter-plugin · GHSA-h2v5-3hpc-85j5

medium2022-03-16

CVE-2022-27204-CSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF

View chart →

jenkinsci/extended-choice-parameter-plugin · GHSA-fqpx-xfjr-2qr9

medium2022-03-16

CVE-2022-27205-CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF

View chart →

jenkinsci/extended-choice-parameter-plugin · GHSA-x95c-qrqr-2v27

medium2022-03-16

CVE-2022-27216-Passwords stored in plain text by Jenkins dbCharts Plugin

View chart →

jenkinsci/dbcharts-plugin · GHSA-x75r-g63m-82wj

medium2022-03-16

CVE-2022-27207-Stored Cross-site Scripting vulnerability in Jenkins global-build-stats Plugin

View chart →

jenkinsci/global-build-stats-plugin · GHSA-wj78-8xrx-phr7

high2022-03-16

CVE-2022-27210-CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials

View chart →

jenkinsci/kubernetes-cd-plugin · GHSA-vq6c-fvxw-p45v

medium2022-03-16

CVE-2022-27214-CSRF vulnerability in Jenkins Release Helper Plugin

View chart →

jenkinsci/release-helper-plugin · GHSA-m4x7-44c8-jg2x

low2022-03-16

CVE-2022-27206-Client Secret stored in plain text by Jenkins GitLab Authentication Plugin

View chart →

jenkinsci/gitlab-oauth-plugin · GHSA-hx3r-qwxv-5jw9

medium2022-03-16

CVE-2022-27217-Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin

View chart →

jenkinsci/vmware-vrealize-codestream-plugin · GHSA-9wvr-x83m-84v4

medium2022-03-16

CVE-2022-27212-Stored Cross-site Scripting vulnerability in Jenkins List Git Branches Parameter Plugin

View chart →

jenkinsci/list-git-branches-parameter-plugin · GHSA-7756-56hr-2vcp

medium2022-03-16

CVE-2022-27209-Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs

View chart →

jenkinsci/kubernetes-cd-plugin · GHSA-23x5-j68g-6jpw

medium2022-03-16

CVE-2022-27215-Missing permission checks in Jenkins Release Helper Plugin

View chart →

jenkinsci/release-helper-plugin · GHSA-p9gq-76fj-4p4p

medium2022-03-16

CVE-2022-27218-Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin

View chart →

jenkinsci/incapptic-connect-uploader-plugin · GHSA-8g9w-5jv6-7m4x

high2022-03-16

CVE-2022-27211-CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials

View chart →

jenkinsci/kubernetes-cd-plugin · GHSA-794j-hx96-4w3m

high2022-03-16

CVE-2021-45848-Nicotine+ DoS on Null Character in Download Request

View chart →

nicotine-plus/nicotine-plus · GHSA-p4v2-r99v-wjc2

medium2022-03-16

CVE-2021-29134-Path Traversal in Gitea

View chart →

go-gitea/gitea · GHSA-h3q4-vmw4-cpr5