Open Source Vulnerabilities
org.jenkins-ci.plugins:files-found-trigger
Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system
org.jenkins-ci.plugins:files-found-trigger
Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system
org.jenkins-ci.plugins:openshift-deployer
Missing permission check in Jenkins OpenShift Deployer Plugin
org.jenkins-ci.plugins:openshift-deployer
Missing permission check in Jenkins OpenShift Deployer Plugin
com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
org.jenkins-ci.plugins:google-cloud-backup
CSRF vulnerability in Jenkins Google Cloud Backup Plugin
org.jenkins-ci.plugins:google-cloud-backup
CSRF vulnerability in Jenkins Google Cloud Backup Plugin
org.jenkins-ci.plugins:lucene-search
Lucene-Search Plugin does not perform permission checks in several HTTP endpoints
org.jenkins-ci.plugins:lucene-search
Lucene-Search Plugin does not perform permission checks in several HTTP endpoints
org.jenkins-ci.plugins:openstack-heat
Jenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validation
org.jenkins-ci.plugins:openstack-heat
Jenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validation
org.jenkins-ci.plugins:rpmsign-plugin
Jenkins rpmsign-plugin does not perform a permission check in a method implementing form validation
org.jenkins-ci.plugins:rpmsign-plugin
Jenkins rpmsign-plugin does not perform a permission check in a method implementing form validation
com.compuware.jenkins:compuware-topaz-utilities
Jenkins Compuware Topaz Utilities Plugin is missing authorization
com.compuware.jenkins:compuware-topaz-utilities
Jenkins Compuware Topaz Utilities Plugin is missing authorization
org.jenkins-ci.plugins:deployer-framework
Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs
org.jenkins-ci.plugins:deployer-framework
Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs
org.jenkins-ci.plugins:android-signing
Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents
org.jenkins-ci.plugins:android-signing
Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents
org.jenkins-ci.plugins:rhnpush-plugin
Jenkins rhnpush-plugin does not perform a permission check in a method implementing form validation
org.jenkins-ci.plugins:rhnpush-plugin
Jenkins rhnpush-plugin does not perform a permission check in a method implementing form validation
org.jenkins-ci.plugins:coverity
Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs
org.jenkins-ci.plugins:coverity
Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs
lcms
Segv on unknown address in cmsNamedColorInfo
ghostscript
Stack-use-after-return in rc_free_text_enum
