Open Source Vulnerabilities

thunderbird

Important: thunderbird security update

thunderbird

Important: thunderbird security update

aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-sdk-6.0-source-built-artifacts, dotnet-targeting-pack-6.0, dotnet-templates-6.0

Important: .NET 6.0 security, bug fix, and enhancement update

aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet-apphost-pack-6.0, dotnet-hostfxr-6.0, dotnet-runtime-6.0, dotnet-sdk-6.0, dotnet-sdk-6.0-source-built-artifacts, dotnet-targeting-pack-6.0, dotnet-templates-6.0

Important: .NET 6.0 security, bug fix, and enhancement update

aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet, dotnet-apphost-pack-7.0, dotnet-host, dotnet-hostfxr-7.0, dotnet-runtime-7.0, dotnet-sdk-7.0, dotnet-sdk-7.0-source-built-artifacts, dotnet-targeting-pack-7.0, dotnet-templates-7.0, netstandard-targeting-pack-2.1

Important: .NET 7.0 security, bug fix, and enhancement update

aspnetcore-runtime-7.0, aspnetcore-targeting-pack-7.0, dotnet-apphost-pack-7.0, dotnet-host, dotnet-hostfxr-7.0, dotnet-runtime-7.0, dotnet-sdk-7.0, dotnet-sdk-7.0-source-built-artifacts, dotnet-targeting-pack-7.0, dotnet-templates-7.0, netstandard-targeting-pack-2.1

Important: .NET 7.0 security, bug fix, and enhancement update

,

com.squareup.okio:okio, com.squareup.okio:okio, com.squareup.okio:okio-jvm

Okio Signed to Unsigned Conversion Error vulnerability

linux-azure-fde

linux-azure-fde vulnerabilities

okio, okio, okio, okio, okio, okio

linux-xilinx-zynqmp

linux-xilinx-zynqmp vulnerabilities

Okio GzipSource unhandled exception Denial of Service

io.jenkins.plugins:benchmark-evaluator

Jenkins Benchmark Evaluator Plugin missing permission check

org.jenkins-ci.plugins:elasticbox

Jenkins ElasticBox CI Plugin vulnerable to cross-site request forgery

org.jenkins-ci.plugins:sumologic-publisher

Jenkins Sumologic Publisher Plugin vulnerable to cross-site request forgery

org.jenkins-ci.plugins:elasticbox

Jenkins ElasticBox CI Plugin missing permission check

org.jenkins-ci.plugins:sumologic-publisher

Jenkins Sumologic Publisher Plugin missing permission check

org.jenkins-ci.plugins:assembla-auth

Jenkins Assembla Auth Plugin vulnerable to cross-site request forgery

com.mathworks.polyspace.jenkins:mathworks-polyspace

Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read

io.jenkins.plugins:benchmark-evaluator

Jenkins Benchmark Evaluator Plugin vulnerable to cross-site request forgery

com.mabl.integration.jenkins:mabl-integration

Jenkins mabl Plugin missing permission check

org.openshift.jenkins:openshift-login

Jenkins OpenShift Login Plugin vulnerable to Open Redirect

com.mabl.integration.jenkins:mabl-integration

Jenkins mabl Plugin vulnerable to exposure of system-scooped credentials

io.jenkins.plugins:macstadium-orka

Jenkins Orka by MacStadium Plugin missing permission check

com.sonyericsson.hudson.plugins.rebuild:rebuild

Jenkins Rebuilder Plugin vulnerable to Cross Site Request Forgery

org.jenkins-ci.plugins:test-results-aggregator

Jenkins Test Results Aggregator Plugin vulnerable to Cross Site Request Forgery

org.jenkins-ci.plugins:external-monitor-job

Jenkins External Monitor Job Type Plugin XML external entity vulnerability

org.jenkins-ci.plugins:active-directory

Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure

org.jenkins-ci.plugins:test-results-aggregator

Jenkins Test Results Aggregator Plugin missing permission check

io.jenkins.plugins:pipeline-restful-api

Jenkins Pipeline restFul API Plugin vulnerable to Cross Site Request Forgery

org.jenkins-ci.plugins:oracle-cloud-infrastructure-compute

Jenkins Oracle Cloud Infrastructure Compute Plugin missing SSH host key validation

com.mabl.integration.jenkins:mabl-integration

Jenkins mabl Plugin missing permission check

io.jenkins.plugins:miniorange-saml-sp

Jenkins SAML Single Sign On(SSO) Plugin missing permission check

org.openshift.jenkins:openshift-login

Jenkins OpenShift Login Plugin session fixation vulnerability

org.datadog.jenkins.plugins:datadog

Jenkins Datadog Plugin does not perform a permission check in an HTTP endpoint.

com.mabl.integration.jenkins:mabl-integration

Jenkins mabl Plugin vulnerable to cross-site request forgery

drupal/tfa

github.com/malfunkt/iprange

iprange may panic when parsing ranges with invalid masks

pimcore/admin-ui-classic-bundle

Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

khodakhah NodCMS POST Request blog-comment-4 cross site scripting