Open Source Vulnerabilities

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

Microsoft.ChakraCore

ChakraCore RCE Vulnerability

org.jvnet.hudson.plugins:favorite

Missing permission check in Jenkins Favorite Plugin

org.apache.geode:geode-core

Apache Geode vulnerable to Incorrect Authorization

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Missing Authorization in Jenkins

org.jenkins-ci.plugins:jenkins-multijob-plugin

Jenkins Multijob plugin did not check permissions in the Resume Build action

io.jenkins.blueocean:blueocean

Missing Authorization in Jenkins Blue Ocean Plugin

org.jenkins-ci.plugins:depgraph-view

Jenkins Dependency Graph Viewer plugin vulnerable to missing permission checks

org.jenkins-ci.plugins:periodicbackup

Missing permission checks in Jenkins Periodic Backup Plugin allow every user to change settings

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script

org.richfaces:richfaces-core

Richfaces vulnerable to arbitrary code execution

openexr

OpenEXR invalid write

openexr

OpenEXR invalid read

org.jenkins-ci.plugins:aws-beanstalk-publisher-plugin

Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text

org.jvnet.hudson.plugins:ircbot

Jenkins IRC Plugin stores credentials in plain text

org.jenkins-ci.plugins:hockeyapp

Jenkins HockeyApp Plugin stores credentials in plain text

org.jenkins-ci.plugins:bitbucket-approve

Jenkins Bitbucket Approve Plugin stores credentials in plain text

org.jenkins-ci.plugins:zap

Jenkins OWASP ZAP Plugin stores unencrypted credentials

org.jvnet.hudson.plugins:ftppublisher

Missing permission check in Jenkins FTP publisher Plugin

org.jenkins-ci.plugins:websphere-deployer

Jenkins WebSphere Deployer Plugin stores credentials in plain text

org.jenkins-ci.plugins:snsnotify

Jenkins Amazon SNS Build Notifier Plugin stores credentials in plain text

org.jenkins-ci.plugins:aqua-security-scanner

Jenkins Aqua Security Scanner Plugin stores credentials in plain text

org.jenkins-ci.plugins:veracode-scanner

Jenkins veracode-scanner Plugin stores credentials in plain text

org.jenkins-ci.plugins:trac-publisher-plugin

Jenkins Trac Publisher Plugin stores credentials in plain text

com.inkysea.vmware.vra:vmware-vrealize-automation-plugin

Jenkins VMware vRealize Automation Plugin Missing Encryption of Sensitive Data

org.jvnet.hudson.plugins:ftppublisher

Jenkins FTP publisher Plugin stores credentials in plain text

info.bluefloyd.jenkins:jenkins-jira-issue-updater

Jenkins Jira Issue Updater Plugin stores credentials in plain text

org.jenkins-ci.plugins:aws-device-farm

Jenkins aws-device-farm Plugin stores credentials in plain text

org.jenkins-ci.plugins:jenkins-cloudformation-plugin

Jenkins CloudFormation Plugin stores credentials in plain text

org.jenkins-ci.plugins:aws-cloudwatch-logs-publisher

Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain text

org.jvnet.hudson.plugins:bugzilla

Jenkins Bugzilla Plugin stores credentials in plain text

org.jenkins-ci.plugins:cloudshare-docker

Jenkins CloudShare Docker-Machine Plugin stores credentials in plain text

org.jenkins-ci.plugins:vsts-cd

Jenkins VS Team Services Continuous Deployment Plugin stores credentials in plain text

org.jenkins-ci.plugins:audit2db

Missing permission check in Jenkins Audit to Database Plugin

sh.hyper.plugins:hyper-commons

Jenkins hyper.sh Commons Plugin stores credentials in plain text

org.jenkins-ci.plugins:wildfly-deployer

Jenkins wildFly Deployer Plugin stores credentials in plain text

org.jenkins-ci.plugins:perfectomobile

Jenkins Perfecto Mobile Plugin stores credentials in plain text

org.jenkins-ci.plugins:open-stf

Jenkins Open STF Plugin stores credentials in plain text

hudson.plugins.octopusdeploy:octopusdeploy

Jenkins Octopus Deploy Plugin stores credentials in plain text

egor-n:fabric-beta-publisher

Jenkins Fabric-beta-publisher Plugin stores credentials in plain text

org.jenkins-ci.plugins:audit2db

Jenkins Audit to Database Plugin stores credentials in plain text

ren.helloworld:upload-pgyer

Jenkins Upload to pgyer Plugin stores credentials in plain text

node-jose

Cisco node-jose improper validation of JWT signature

org.jenkins-ci.main:jenkins-core

Incorrect Authorization in Jenkins Core

smalruby-editor, smalruby

smalruby and smalruby-editor vulnerable to OS Command Injection

mantisbt/mantisbt, mantisbt/mantisbt, mantisbt/mantisbt

MantisBT allows arbitrary password reset

org.apache.struts:struts2-core, org.apache.struts.xwork:xwork-core

Code injection in Apache Struts