Open Source Vulnerabilities

trillium-http, trillium-client

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client

Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip

trillium-http and trillium-client vulnerable to HTTP Request/Response Splitting

opera

Security update for opera

org.jenkins-ci.plugins:matrix-project

Path traversal vulnerability in Jenkins Matrix Project Plugin

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-site WebSocket hijacking vulnerability in the Jenkins CLI

io.jenkins.plugins:gitlab-branch-source

CSRF vulnerability in Jenkins GitLab Branch Source Plugin

io.jenkins.plugins:gitlab-branch-source

Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin

io.jenkins.plugins:gitlab-branch-source

Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin

org.jenkins-ci.plugins:log-command

Arbitrary file read vulnerability in Jenkins Log Command Plugin

org.jenkins-ci.plugins:git-server

Arbitrary file read vulnerability in Git server Plugin can lead to RCE

io.jenkins.plugins:redhat-dependency-analytics

Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin

kanboard

mathtex

mathtex

mathtex

mathtex, mathtex, mathtex, mathtex, mathtex

mathtex, mathtex, mathtex, mathtex, mathtex

mathtex, mathtex, mathtex, mathtex, mathtex

Any authenticated user may obtain private message details from other users on the same instance

Pimcore Admin Classic Bundle host header injection in the password reset

mathtex

mathtex

mathtex