Open Source Vulnerabilities

org.jenkins-ci.plugins:vboxwrapper

Cross-site Scripting in Jenkins vboxwrapper Plugin

io.jenkins.plugins:multiselect-parameter

Cross-site Scripting in Jenkins Multiselect parameter Plugin

org.jvnet.hudson.plugins:selection-tasks-plugin

Cross site scripting in Jenkins Selection tasks Plugin

org.jenkins-ci.plugins:autocomplete-parameter

Cross-site Scripting in Jenkins Autocomplete Parameter Plugin

org.jenkins-ci.plugins:rundeck

Cross-site Scripting in Jenkins Rundeck Plugin

org.jenkins-ci.plugins:gitlab-plugin

Missing permission check in Jenkins GitLab Plugin

org.jenkins-ci.plugins:ssh

Missing Authorization in Jenkins SSH plugin

org.jenkins-ci.plugins:repo, org.jenkins-ci.plugins:mercurial, org.jenkins-ci.plugins:git

Path traversal in Jenkins REPO Plugin

org.jenkins-ci.plugins:ssh

Cross Site Request Forgery in Jenkins SSH Plugin

io.jenkins.blueocean:blueocean-pipeline-scm-api

Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin

io.jenkins.blueocean:blueocean-parent

Cross Site Request Forgery in Jenkins Blue Ocean Plugin

org.jenkins-ci.plugins:windows-slaves

Missing Authorization in Jenkins WMI Windows Agents plugin

org.jenkins-ci.plugins:ssh

Missing permission check in Jenkins SSH Plugin

openexr

Heap-buffer-overflow in generic_unpack

org.jenkins-ci.plugins.workflow:workflow-cps

Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin

org.jenkins-ci.plugins:mercurial

Path traversal in Jenkins Mercurial Plugin

org.jenkins-ci.plugins:git, org.jenkins-ci.plugins:mercurial, org.jenkins-ci.plugins:repo

Path traversal in Jenkins Git Mercurial and Repo Plugins

org.jenkins-ci.plugins:script-security

CSRF vulnerability in Jenkins Script Security Plugin

org.jenkins-ci.plugins:windows-slaves

Buffer overflow in Jenkins WMI Windows Agents plugin

github.com/coreos/ignition/v2

Duplicate advisory: Configuration exposure in github.com/coreos/ignition

github.com/hashicorp/vault

HashiCorp Vault improper configuration of multi factor authentication

needrestart

needrestart - security update

elog

elog - security update

Use After Free in gpac/gpac

bind9

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-azure-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oem-5.17, linux-oem-6.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

pcs, pcs-snmp

Important: pcs security update

Uncontrolled Recursion in vim/vim

gzip

Important: gzip security update

runc, runc, runc

moby-runc

CVE-2022-29162 affecting package moby-runc for versions less than 1.1.2-2

runc

Predictable password reset token may lead to account takeover in countly-server

mapcache, mapcache, mapcache, netcdf, netcdf, netcdf, netcdf-parallel, netcdf-parallel, netcdf-parallel, scilab, scilab, scilab