Open Source Vulnerabilities

mysql

MySQL for Node.js Unsafe Options

bagisto/bagisto

Bagisto CSRF Vulnerability

nova, nova, nova

OpenStack Nova Server Resource Faults Leak External Exception Details

backpack/crud

Backpack\CRUD for Laravel XSS Vulnerability

org.jenkins-ci.plugins:relution-publisher

Relution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery

com.xebialabs.xlt.ci:xltestview-plugin

Cross-site request forgery vulnerability in Jenkins XL TestView Plugin

org.jenkins-ci.plugins:gcm-notification

Jenkins Google Cloud Messaging Notification Plugin stores credentials in plain text

org.jenkins-ci.plugins:build-pipeline-plugin

Jenkins Build Pipeline Plugin vulnerable to Cross-site Scripting

org.jenkins-ci.plugins:labmanager

Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

org.jenkins-ci.plugins:relution-publisher

Missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin

org.jenkins-ci.plugins:testlink

Jenkins TestLink Plugin stores credentials in plain text

com.xebialabs.xlt.ci:xltestview-plugin

Missing permission check in Jenkins XL TestView Plugin

org.jenkins-ci.plugins:simple-travis-runner

Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability

org.jenkins-ci.plugins:eggplant-plugin

Jenkins eggplant-plugin Plugin stores credentials in plain text

net.hurstfrost.jenkins:avatar

Missing permission check in Jenkins Avatar Plugin

hudson.plugins.filesystem_scm:filesystem_scm

Arbitrary file read vulnerability in Jenkins File System SCM Plugin

org.jenkins-ci.plugins:gitlab-oauth

Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation

org.jenkins-ci.plugins:jclouds-jenkins

Jenkins JClouds Plugin missing permission check

org.jenkins-ci.plugins:codefresh

Jenkins Codefresh Integration Plugin Improper Certificate Validation vulnerability

org.jenkins-ci.plugins:jclouds-jenkins

Jenkins JClouds Plugin cross-site request forgery vulnerability

org.jenkins-ci.plugins:pegdown-formatter

Jenkins PegDown Formatter Plugin has Cross-site Scripting vulnerability

org.jenkins-ci.plugins:mask-passwords

Insertion of Sensitive Information into Log File in Jenkins Mask Passwords Plugin

org.jenkins-ci.plugins:jenkinswalldisplay

Jenkins Wall Display Plugin Cross-site Scripting vulnerability

org.jenkins-ci.plugins:gitlab-oauth

Jenkins Gitlab Authentication Plugin Open Redirect vulnerability

io.jenkins:configuration-as-code

Insertion of Sensitive Information into Log File in Jenkins Configuration as Code Plugin

gree/jose

PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm

nilsteampassnet/teampass

TeamPass Cross-site Scripting (XSS)

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition Access Control Bypass

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition Information Leak

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition CSRF vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Unrestricted File Upload

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition RCE Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition, magento/magento1ce, magento/magento1ee, magento/product-community-edition, magento/product-community-edition, magento/product-community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento Reflected cross-site scripting on customer cart page

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition RCE

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition Server-Side Request Forgery vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition XSS Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento Insecure Direct Object Reference (IDOR) vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento Filter extension bypass via crafted store configuration keys

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition Cross-site Scripting Vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition Information Disclosure

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition SSRF vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition DoS vulnerability

magento/community-edition, magento/community-edition, magento/community-edition

Magento 2 Community Edition SSRF vulnerability