Open Source Vulnerabilities

github.com/zalando/skipper

Query predicate bypass in Zalando Skipper

org.jenkins-ci.plugins:threadfix

Cross-Site Request Forgery in Jenkins ThreadFix Plugin

org.jenkins-ci.plugins:beaker-builder

Cross-Site Request Forgery in Jenkins Beaker builder Plugin

org.jenkins-ci.plugins:beaker-builder

Jenkins Beaker builder Plugin Missing Authorization vulnerability

com.jfinal:jfinal

Cross-site Scripting in Jfinal CMS

com.convertigo.jenkins.plugins:convertigo-mobile-platform

Cross-Site Request Forgery in Jenkins Convertigo Mobile Platform Plugin

org.jenkins-ci.plugins:xunit

Agent-to-controller security bypass in Jenkins xUnit Plugin

org.jenkins-ci.plugins:pipeline-input-step

Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin

org.jenkins-ci.plugins:embeddable-build-status

Reflected Cross site scripting in Jenkins Embeddable Build Status Plugin

org.jenkins-ci.plugins:repository-connector

Cross-site Scripting in Jenkins Repository Connector Plugin

com.geteasyqa:easyqa

Jenkins EasyQA Plugin Missing Authorization vulnerability

eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin

Cross-site Scripting in Jenkins Maven Metadata Plugin

me.leejay.jenkins:date-parameter

Cross-site Scripting in Jenkins Date Parameter Plugin

diffy

Improper handling of double quotes in file name in Diffy in Windows environment

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-site Scripting vulnerability in Jenkins

org.jenkins-ci.plugins:junit

Cross-site Scripting in Jenkins JUnit Plugin

io.jenkins.plugins:agent-server-parameter

Cross-site Scripting in Jenkins Agent Server Parameter Plugin

org.jenkins-ci.plugins:ontrack

Cross-site Scripting in Jenkins ontrack Jenkins Plugin

org.jenkins-ci.plugins:image-tag-parameter

Cross-site Scripting in Jenkins Image Tag Parameter Plugin

org.jenkins-ci.main:jenkins-core

Cross-site Scripting vulnerability in Jenkins

com.convertigo.jenkins.plugins:convertigo-mobile-platform

Missing permission check in Jenkins Convertigo Mobile Platform Plugin

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter

Cross-site Scripting in Jenkins Dynamic Extended Choice Parameter Plugin

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-site Scripting vulnerability in Jenkins

org.jenkins-ci.plugins:embeddable-build-status

Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Observable timing discrepancy allows determining username validity in Jenkins

com.convertigo.jenkins.plugins:convertigo-mobile-platform

Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin

org.jenkins-ci.plugins:sauce-ondemand

Cross-site Scripting in Jenkins Sauce OnDemand Plugin

org.jenkins-ci.plugins:readonly-parameters

Cross-site Scripting in Jenkins Readonly Parameter Plugin

com.geteasyqa:easyqa

Cross-Site Request Forgery in Jenkins EasyQA Plugin

org.lilicurroad.jenkins:packageversion

Cross-site Scripting in Jenkins Package Version Plugin

org.jenkins-ci.plugins:nested-view

Reflected Cross-site Scripting in Jenkins Nested View Plugin

org.jenkins-ci.plugins:crx-content-package-deployer

Cross-site Scripting in Jenkins CRX Content Package Deployer Plugin

org.jenkins-ci.plugins:hidden-parameter

Cross-site Scripting in Jenkins Hidden Parameter Plugin

org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

Cross-site Scripting vulnerability in Jenkins

org.jenkins-ci.main:jenkins-core

Unauthorized view fragment access in Jenkins

io.jenkins.plugins:rest-list-parameter

Cross-site Scripting in Jenkins REST List Parameter Plugin

io.jenkins.plugins:cavisson-ns-nd-integration

Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin

aiohttp

Withdrawn: Denial of Service in aiohttp

org.jenkins-ci.plugins:jianliao

Jenkins Jianliao Notification Plugin Missing Authorization vulnerability

aendter.jenkins.plugins:filesystem-list-parameter-plugin

Cross-site Scripting in Jenkins Filesystem List Parameter Plugin

com.geteasyqa:easyqa

User passwords stored in plain text by Jenkins EasyQA Plugin

org.jenkins-ci.plugins:embeddable-build-status

Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement

golang.org/x/sys

golang.org/x/sys/unix has Incorrect privilege reporting in syscall

org.springframework.data:spring-data-mongodb, org.springframework.data:spring-data-mongodb

SpEL Injection in Spring Data MongoDB

apache2, apache2, apache2

apache2 regression

vim, vim, vim

vim

CVE-2022-2183 affecting package vim for versions less than 8.2.5172-1