Open Source Vulnerabilities

edk2

RSA implementation bug in AVX512IFMA instructions

curl, curl

curl vulnerabilities

spirv-tools

Heap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators

ghostscript

Heap-buffer-overflow in Ins_JROF

deep.assign

Prototype Pollution in deep.assign

ember-source, ember-source, ember-source, ember-source, ember-source, ember-source

Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data

net.praqma:rqm-plugin

Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check

org.jenkins-ci.plugins:opsgenie

Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability

org.jenkins-ci.plugins:hpe-network-virtualization

Passwords stored in plain text by Jenkins hpe-network-virtualization plugin

org.jenkins-ci.plugins:xpath-config-viewer

Jenkins XPath Configuration Viewer Plugin Missing Authorization vulnerability

org.jenkins-ci.plugins:xpath-config-viewer

Cross-Site Request Forgery in Jenkins XPath Configuration Viewer Plugin

org.jenkins-ci.plugins:opsgenie

Jenkins OpsGenie Plugin vulnerable to Cleartext Transmission of Sensitive Information

de.einsundeins.jenkins.plugins.failedjobdeactivator:failedJobDeactivator

Cross-Site Request Forgery in Jenkins Failed Job Deactivator Plugin

org.jenkins-ci.plugins:skype-notifier

Plaintext Storage of a Password in Jenkins Skype notifier Plugin

org.jenkins-ci.plugins:jigomerge

Plaintext Storage of a Password in Jenkins Jigomerge Plugin

org.jenkins-ci.plugins:elasticsearch-query

Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin

de.einsundeins.jenkins.plugins.failedjobdeactivator:failedJobDeactivator

Jenkins Failed Job Deactivator Plugin Missing Authorization vulnerability

net.praqma:rqm-plugin

Password stored in plain text by Jenkins RQM Plugin

org.jenkins-ci.plugins:rrod

Incorrect Authorization in Jenkins Request Rename Or Delete Plugin

org.jenkins-ci.plugins:xpath-config-viewer

Missing Authorization in Jenkins XPath Configuration Viewer Plugin

org.jenkins-ci.plugins:rrod

Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin

org.jenkins-ci.plugins:cisco-spark

Token stored in plain text by Jenkins Cisco Spark Plugin

net.praqma:matrix-reloaded

Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS

com.xebialabs.ci:xlrelease-plugin

Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials

org.jenkins-ci.plugins:rich-text-publisher-plugin

Cross-site Scripting in Jenkins Rich Text Publisher Plugin

hudson.plugins:project-inheritance

Jenkins Project Inheritance Plugin vulnerable to cross site scripting

net.praqma:matrix-reloaded

Jenkins Matrix Reloaded Plugin vulnerable to CSRF

org.jenkins-ci.plugins:ec2-deployment-dashboard

Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin

org.jenkins-ci.plugins:ec2-deployment-dashboard

Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials

org.jenkins-ci.plugins:requests

Incorrect Authorization in Jenkins requests-plugin

tools.devnull:build-notifications

Cleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin

com.xebialabs.ci:xlrelease-plugin

Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDs

org.jenkins-ci.plugins:ec2-deployment-dashboard

Cross-site Scripting in Jenkins Deployment Dashboard Plugin

org.jenkins-ci.plugins:testng-plugin

Cross-site Scripting in Jenkins TestNG Results Plugin

org.jenkins-ci.plugins:gitlab-plugin

Cross-site Scripting in Jenkins GitLab Plugin

com.xebialabs.ci:xlrelease-plugin

CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials

org.jenkins-ci.plugins:plot

Cross-site Scripting in Jenkins Plot Plugin

io.jenkins.plugins:validating-email-parameter

Cross-site Scripting in Jenkins Validating Email Parameter Plugin

org.jenkins-ci.plugins:recipe

Cross-Site Request Forgery in Jenkins Recipe Plugin

org.jenkins-ci.plugins:build-metrics

Cross site scripting in Jenkins build-metrics Plugin

org.jenkins-ci.plugins:recipe

Missing Authorization in Jenkins Recipe Plugin

org.jenkins-ci.plugins:rocketchatnotifier

Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin

org.jenkins-ci.plugins:ec2-deployment-dashboard

Missing Authorization in Jenkins Deployment Dashboard Plugin

org.jenkins-ci.plugins:build-metrics

Jenkins build-metrics Plugin Missing Authorization vulnerability

org.jenkins-ci.plugins:recipe

XML External Entity Reference in Jenkins Recipe Plugin