Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-h47x-2j37-fw5m
    Fix available
    Packages

    org.infinispan:infinispan-core, org.infinispan:infinispan-core

    Summary

    Use of Externally-Controlled Input to Select Classes or Code in Infinispan

    Published
    24 May 2022
    GHSA-9pf7-f47q-mwpq
    Fix available
    Packages

    rabbit_common, rabbit_common

    Summary

    Cross-site Scripting in RabbitMQ

    Published
    24 May 2022
    GHSA-hrfh-7j5f-8ccr
    Fix available
    Packages

    RabbitMQ, RabbitMQ, RabbitMQ, RabbitMQ

    Summary

    Pivotal RabbitMQ is vulnerable to a denial of service attack

    Published
    24 May 2022
    GHSA-692x-89xv-64jx
    No fix available
    Packages

    pagekit/pagekit

    Summary

    Pagekit File Upload vulnerability

    Published
    24 May 2022
    GHSA-c33m-22cr-j9x4
    No fix available
    Packages

    designate

    Summary

    Designate does not enforce the DNS protocol limit concerning record set sizes

    Published
    24 May 2022
    GHSA-cqmr-rcpr-cxh3
    Fix available
    Packages

    ansible, ansible, ansible

    Summary

    Ansible password prompts could expose passwords

    Published
    24 May 2022
    GHSA-2cxg-448h-4wxj
    Fix available
    Packages

    org.jenkins-ci.plugins:support-core

    Summary

    Jenkins Support Core Plugin allowed users with Overall/Read permission to delete arbitrary files

    Published
    24 May 2022
    GHSA-345p-pw5q-g98v
    Fix available
    Packages

    org.jenkins-ci.plugins:google-compute-engine

    Summary

    Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin

    Published
    24 May 2022
    GHSA-793w-q2h5-8h5j
    Fix available
    Packages

    org.jenkins-ci.plugins:qmetry-for-jira-test-management

    Summary

    Jenkins QMetry for JIRA Plugin shows plain text password in configuration form

    Published
    24 May 2022
    GHSA-8mjp-8c2x-3g7w
    Fix available
    Packages

    org.jenkins-ci.plugins:qmetry-for-jira-test-management

    Summary

    Jenkins QMetry for JIRA Plugin stored credentials in plain text

    Published
    24 May 2022
    GHSA-pwg7-4hxv-v4cw
    Fix available
    Packages

    com.inflectra.spiratest.plugins:inflectra-spira-integration

    Summary

    Plaintext Storage in Jenkins Spira Importer Plugin

    Published
    24 May 2022
    GHSA-v98h-rv7j-hf6j
    Fix available
    Packages

    org.jenkins-ci.plugins:google-compute-engine

    Summary

    Jenkins Google Compute Engine Plugin Missing Authorization vulnerability

    Published
    24 May 2022
    GHSA-x24m-wr2f-p3vc
    Fix available
    Packages

    org.jenkins-ci.plugins:google-compute-engine

    Summary

    Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability

    Published
    24 May 2022
    GHSA-62pm-mgrh-7p69
    Fix available
    Packages

    org.jenkins-ci.plugins:script-security

    Summary

    Incorrect Authorization in Jenkins Script Security Plugin

    Published
    24 May 2022
    GHSA-98m4-m2c3-qxgq
    Fix available
    Packages

    org.jenkins-ci.plugins:jira

    Summary

    Jenkins JIRA Plugin allows users to select and use credentials with System scope

    Published
    24 May 2022
    GHSA-j52r-pmqv-wm38
    Fix available
    Packages

    org.jenkins-ci.plugins:support-core

    Summary

    Missing permission check in Jenkins Support Core Plugin

    Published
    24 May 2022
    GHSA-jg29-c2qj-wpm3
    Fix available
    Packages

    org.jenkins-ci.plugins:anchore-container-scanner

    Summary

    Jenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected Credentials

    Published
    24 May 2022
    GHSA-8889-9g3f-73rj
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Pimcore Discloses Usernames In Use

    Published
    24 May 2022
    GHSA-hf62-5vxh-jpwj
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Pimcore 2FA Vulnerable to Brute Forcing

    Published
    24 May 2022
    GHSA-jhcf-j4hg-v64r
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Pimcore Access Control Issues

    Published
    24 May 2022
    GHSA-m4x3-xmjv-r778
    Fix available
    Packages

    pimcore/pimcore

    Summary

    Pimcore Cross-site Scripting (XSS) vulnerability

    Published
    24 May 2022
    GHSA-8cw2-jv5c-c825
    Fix available
    Packages

    pyarrow, red-arrow

    Summary

    Missing Initialization of Resource in Apache Arrow

    Published
    24 May 2022
    GHSA-cjw4-2w9r-r8mv
    Fix available
    Packages

    pyarrow, red-arrow

    Summary

    Missing Initialization of Resource in Apache Arrow

    Published
    24 May 2022
    GHSA-6vc8-3xf2-qrxx
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-qpc8-m2xm-9w75
    Fix available
    Packages

    magento/core

    Summary

    Magento Remote code execution through catalog attribute sets

    Published
    24 May 2022
    GHSA-w8vh-5v64-j3vr
    Fix available
    Packages

    magento/community-edition

    Summary

    Withdrawn Advisory: Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-988g-wfwf-5666
    Fix available
    Packages

    magento/community-edition

    Summary

    Withdrawn Advisory: Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-47h6-hfpv-7phj
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-775w-gx3f-4j4f
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition SSRF vulnerability

    Published
    24 May 2022
    GHSA-8p5c-f836-m4h7
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XML Injection

    Published
    24 May 2022
    GHSA-f73h-224c-62qr
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Server-Side Request Forgery (SSRF)

    Published
    24 May 2022
    GHSA-j49x-jjmj-9fqj
    Fix available
    Packages

    magento/core

    Summary

    Magento XSS Vulnerability

    Published
    24 May 2022
    GHSA-p783-gj6m-9r88
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-qp43-2vhf-cj8g
    Fix available
    Packages

    magento/core

    Summary

    Magento Remote code execution through support/output path modification

    Published
    24 May 2022
    GHSA-vrw4-34p5-pjg5
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Cross-Site Scripting via admin panel

    Published
    24 May 2022
    GHSA-273r-v888-vgc6
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Cross-site Scripting (XSS)

    Published
    24 May 2022
    GHSA-6m27-3r8q-c7f7
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-86pc-6mm8-542r
    Fix available
    Packages

    magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-94q8-gx29-6mqv
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Injection vulnerability via email templates

    Published
    24 May 2022
    GHSA-jjmg-xmq2-g6ff
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-v8fg-p27h-mxjp
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-vpg9-gq7j-mxqg
    Fix available
    Packages

    magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-298q-wv2h-v5vw
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-45gj-78hc-4mvc
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento SQL injection via marketing account with access to email templates variables

    Published
    24 May 2022
    GHSA-7pr3-34rg-g53m
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento Unrestricted file upload vulnerability

    Published
    24 May 2022
    GHSA-85xw-3hp5-6fmc
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-9wr9-fw9v-8fgr
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-gjjm-4x3g-3h33
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition XSS Vulnerability

    Published
    24 May 2022
    GHSA-jrjx-8gmw-jj2q
    Fix available
    Packages

    magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022
    GHSA-5v5p-x8c2-mqxp
    Fix available
    Packages

    magento/community-edition, magento/community-edition, magento/community-edition

    Summary

    Magento 2 Community Edition RCE Vulnerability

    Published
    24 May 2022