Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-4ffq-6g62-j4v4
    Fix available
    Packages

    org.jenkins-ci.plugins:claim

    Summary

    Cross-Site Request Forgery in the Jenkins Claim plugin

    Published
    16 Jun 2021
    GHSA-h6qv-f5gf-8gcf
    Fix available
    Packages

    org.jenkins-ci.plugins:p4

    Summary

    Missing Authorization in Jenkins P4 plugin

    Published
    16 Jun 2021
    GHSA-5557-j87h-cvf4
    Fix available
    Packages

    org.jenkins-ci.plugins:xray-connector

    Summary

    Missing Authorization in jenkins xray-connector

    Published
    16 Jun 2021
    GHSA-w5rh-j4g3-jr29
    Fix available
    Packages

    org.jenkins-ci.plugins:s3, org.jenkins-ci.plugins:s3

    Summary

    Missing Authorization in Jenkins S3 publisher Plugin

    Published
    16 Jun 2021
    GHSA-fvfc-8pqr-wjpv
    Fix available
    Packages

    org.jenkins-ci.plugins:s3, org.jenkins-ci.plugins:s3

    Summary

    Missing Authorization in Jenkins S3 publisher Plugin

    Published
    16 Jun 2021
    GHSA-rrvg-2c69-p9rf
    Fix available
    Packages

    org.jenkins-ci.plugins:xray-connector

    Summary

    CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials

    Published
    16 Jun 2021
    GHSA-jwhm-9cjm-4493
    Fix available
    Packages

    org.jenkins-ci.plugins:dashboard-view, org.jenkins-ci.plugins:dashboard-view

    Summary

    Cross-site Scripting in Jenkins Dashboard View Plugin

    Published
    16 Jun 2021
    GHSA-gchq-9r68-6jwv
    Fix available
    Packages

    org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials, org.jenkins-ci.plugins:credentials

    Summary

    Cross-Site Request Forgery in Jenkins Credentials Plugin

    Published
    16 Jun 2021
    GHSA-2x7v-w2mv-f3rx
    Fix available
    Packages

    com.atlassian.connect:atlassian-connect-spring-boot, com.atlassian.connect:atlassian-connect-spring-boot

    Summary

    Improper Authentication in Atlassian Connect Spring Boot

    Published
    16 Jun 2021
    GHSA-67f6-c8mx-4q2m
    Fix available
    Packages

    ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base

    Summary

    Uncontrolled Resource Consumption in JPA Server in HAPI FHIR

    Published
    16 Jun 2021
    GHSA-p2rp-cmjq-r7wm
    Fix available
    Packages

    org.apache.syncope:syncope

    Summary

    Shell command injection in Apache Syncope

    Published
    16 Jun 2021
    GHSA-vjqw-r3ww-wj2w
    Fix available
    Packages

    org.apache.syncope:syncope-core

    Summary

    Expression Language Injection in Apache Syncope

    Published
    16 Jun 2021
    GHSA-4w4p-xwrr-9crh
    Fix available
    Packages

    org.apache.syncope:syncope-core, org.apache.syncope:syncope-core

    Summary

    Injection in Apache Syncope

    Published
    16 Jun 2021
    GHSA-rm7f-mpcj-w4f6
    Fix available
    Packages

    org.apache.unomi:unomi

    Summary

    Command injection in Apache Unomi

    Published
    16 Jun 2021
    CVE-2021-29702
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-20567
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-20566
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-20488
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-20483
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-22201
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-22200
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-22199
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    GHSA-xrg9-wwrq-xmx9
    Fix available
    Packages

    org.jenkins-ci.plugins:kubernetes-cli

    Summary

    Missing Authorization in Jenkins Kubernetes CLI Plugin

    Published
    16 Jun 2021
    GHSA-8h77-3xwr-hqhh
    Fix available
    Packages

    org.jenkins-ci.plugins:kiuwanJenkinsPlugin

    Summary

    Cross-site scripting in Jenkins Kiuwan Plugin

    Published
    16 Jun 2021
    GHSA-wph3-44rj-92pr
    Fix available
    Packages

    studio-42/elfinder

    Summary

    elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE

    Published
    16 Jun 2021
    Packages

    drupal/block_content_revision_ui

    Summary

    Published
    16 Jun 2021
    CVE-2020-35762
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-35761
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-35760
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-35759
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-27339
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-24939
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-22198
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-20444
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    Packages

    drupal/linky_revision_ui

    Summary

    Published
    16 Jun 2021
    Packages

    drupal/ctools

    Summary

    Published
    16 Jun 2021
    CVE-2021-34803
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-34801
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-27610
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    USN-4989-2
    Fix available
    Packages

    bluez

    Summary

    bluez vulnerabilities

    Published
    16 Jun 2021
    CVE-2021-22914
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-21668
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2021-21667
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-8300
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    CVE-2020-8299
    No fix available
    Packages

    Summary

    Published
    16 Jun 2021
    Packages

    libjpeg-turbo, libjpeg62-turbo

    Summary

    Security update for libjpeg-turbo

    Published
    16 Jun 2021
    Packages

    libxml2, python-libxml2-python

    Summary

    Security update for libxml2

    Published
    16 Jun 2021
    Packages

    libopenmpt

    Summary

    Security update for libopenmpt

    Published
    16 Jun 2021
    Packages

    htmldoc

    Summary

    Security update for htmldoc

    Published
    16 Jun 2021
    Packages

    chromium

    Summary

    Security update for chromium

    Published
    16 Jun 2021