Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-g77v-m226-3f7g
    Fix available
    Packages

    froxlor/froxlor

    Summary

    Froxlor PHP Object Injection vulnerability

    Published
    13 May 2022
    GHSA-w3f7-2qfw-348x
    Fix available
    Packages

    org.jvnet.hudson.plugins:hipchat

    Summary

    Jenkins HipChat Plugin allows credential capture due to incorrect authorization

    Published
    13 May 2022
    GHSA-322x-jv5h-cvjh
    Fix available
    Packages

    org.jenkins-ci.plugins:ansible

    Summary

    Jenkins Ansible Plugin man in the middle vulnerability

    Published
    13 May 2022
    GHSA-gx69-6cp4-hxrj
    Fix available
    Packages

    rubygems-update, org.jruby:jruby-stdlib

    Summary

    RubyGems Link Following vulnerability

    Published
    13 May 2022
    GHSA-9r7f-rqhw-j8h8
    Fix available
    Packages

    org.jenkins-ci.plugins.workflow:workflow-durable-task-step

    Summary

    Incorrect permission checks in Pipeline: Nodes and Processes plugin

    Published
    13 May 2022
    GHSA-7c7v-g484-j4cf
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-c6mx-gwgr-mfm2
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-g549-jfg6-98ch
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-vh9x-fprq-2hhj
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-25vh-gq6v-hrx5
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-xmvg-c4x3-9qwp
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-5439-x5v5-2vhj
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-h5hw-qrrw-vfxg
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-wc67-4cg3-35wf
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-6c2v-xc8f-fvf7
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-6v8r-83v3-rmrf
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-phcc-frh9-q545
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-xgcc-r2f3-rq6p
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore information disclosure vulnerability

    Published
    13 May 2022
    GHSA-3j65-2jcq-w9fr
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-5q2v-52gc-4w7p
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-7724-427r-8rvm
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-h575-j3ph-hjvc
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-wc4x-9h9p-9494
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-67f9-qmg7-fmcq
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-h9h7-4jfm-3fxr
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-wc52-2xwv-h7xr
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-399v-jg88-3gx6
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-7gjv-9m33-chg8
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-9pvj-pgg9-pvqq
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-j762-mr2c-fmp9
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-q9x6-7hjh-q9fc
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-v3xp-3wpq-rvhp
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-5j48-826p-2w9r
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-h9wf-mpvf-9jqg
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-m8x8-5ch7-c5w9
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-3cwf-pwcg-57xr
    Fix available
    Packages

    Microsoft.ChakraCore

    Summary

    ChakraCore RCE Vulnerability

    Published
    13 May 2022
    GHSA-268v-2qq7-84pf
    Fix available
    Packages

    org.jvnet.hudson.plugins:favorite

    Summary

    Missing permission check in Jenkins Favorite Plugin

    Published
    13 May 2022
    GHSA-jmg4-x4vp-6c6x
    Fix available
    Packages

    org.apache.geode:geode-core

    Summary

    Apache Geode vulnerable to Incorrect Authorization

    Published
    13 May 2022
    GHSA-p8x8-p473-mmmv
    Fix available
    Packages

    org.jenkins-ci.main:jenkins-core, org.jenkins-ci.main:jenkins-core

    Summary

    Missing Authorization in Jenkins

    Published
    13 May 2022
    GHSA-p9r2-gghq-hc57
    Fix available
    Packages

    org.jenkins-ci.plugins:jenkins-multijob-plugin

    Summary

    Jenkins Multijob plugin did not check permissions in the Resume Build action

    Published
    13 May 2022
    GHSA-phf8-3qgv-rg5q
    No fix available
    Packages

    io.jenkins.blueocean:blueocean

    Summary

    Missing Authorization in Jenkins Blue Ocean Plugin

    Published
    13 May 2022
    GHSA-vhh3-mvc4-hhq6
    Fix available
    Packages

    org.jenkins-ci.plugins:depgraph-view

    Summary

    Jenkins Dependency Graph Viewer plugin vulnerable to missing permission checks

    Published
    13 May 2022
    GHSA-5293-3fgp-cr3x
    Fix available
    Packages

    org.jenkins-ci.plugins:periodicbackup

    Summary

    Missing permission checks in Jenkins Periodic Backup Plugin allow every user to change settings

    Published
    13 May 2022
    GHSA-v9xq-vh72-chr4
    Fix available
    Packages

    moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

    Summary

    Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script

    Published
    13 May 2022
    GHSA-j7mw-7crr-658v
    Fix available
    Packages

    org.richfaces:richfaces-core

    Summary

    Richfaces vulnerable to arbitrary code execution

    Published
    13 May 2022
    GHSA-qxh9-r8xw-7v99
    Fix available
    Packages

    openexr

    Summary

    OpenEXR invalid write

    Published
    13 May 2022
    GHSA-8m57-j273-2qg9
    Fix available
    Packages

    openexr

    Summary

    OpenEXR invalid read

    Published
    13 May 2022
    GHSA-vjr6-cq22-m4q5
    No fix available
    Packages

    org.jenkins-ci.plugins:aws-beanstalk-publisher-plugin

    Summary

    Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text

    Published
    13 May 2022
    GHSA-vrv9-ccj3-g284
    No fix available
    Packages

    org.jvnet.hudson.plugins:ircbot

    Summary

    Jenkins IRC Plugin stores credentials in plain text

    Published
    13 May 2022
    GHSA-45fr-w365-f7pm
    No fix available
    Packages

    org.jenkins-ci.plugins:hockeyapp

    Summary

    Jenkins HockeyApp Plugin stores credentials in plain text

    Published
    13 May 2022