Open Source Vulnerabilities

drbd

Security update for drbd

drbd, drbd, drbd

Security update for drbd

grok

UNKNOWN WRITE in grk::TileLengthMarkers::seek

org.jenkins-ci.plugins:vmware-vrealize-orchestrator

Missing permission check in Jenkins vRealize Orchestrator Plugin

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Cross-site Scripting in Apache Tomcat

org.jenkins-ci.plugins:threadfix

Missing permission check in Jenkins ThreadFix Plugin

org.jenkins-ci.plugins:StashBranchParameter

Cross-site Scripting in Jenkins Stash Branch Parameter Plugin

org.jenkins-ci.plugins:squashtm-publisher

Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text

org.jenkins-ci.plugins:vmware-vrealize-orchestrator

Cross-Site Request Forgery in Jenkins vRealize Orchestrator Plugin

org.openidentityplatform.openam:openam-core

NT auth module vulnerability in OpenAM

org.jenkins-ci.plugins:jianliao

Cross-Site Request Forgery in Jenkins Jianliao Notification Plugin

github.com/zalando/skipper

Query predicate bypass in Zalando Skipper

org.jenkins-ci.plugins:threadfix

Cross-Site Request Forgery in Jenkins ThreadFix Plugin

org.jenkins-ci.plugins:beaker-builder

Cross-Site Request Forgery in Jenkins Beaker builder Plugin

org.jenkins-ci.plugins:beaker-builder

Jenkins Beaker builder Plugin Missing Authorization vulnerability

com.jfinal:jfinal

Cross-site Scripting in Jfinal CMS