Open Source Vulnerabilities

org.jenkins-ci.plugins:subversion

CSRF vulnerability in Jenkins Subversion Plugin

org.jenkins-ci.plugins:nodelabelparameter

Stored Cross-site Scripting in Jenkins Node and Label parameter Plugin

org.jenkins-ci.plugins:promoted-builds, org.jenkins-ci.plugins:promoted-builds

Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds Plugin

org.jenkins-ci.plugins:google-compute-engine

Private key stored in plain text by Jenkins Google Compute Engine Plugin

chromium

chromium - security update

subversion, subversion

subversion - security update

lrzip

lrzip - security update

mailcap shell command injection

go.etcd.io/etcd/v3, go.etcd.io/etcd/v3, go.etcd.io/etcd

go.etcd.io/etcd Authentication Bypass

github.com/kubernetes/kubernetes

Information Exposure in Kubernetes

kernel-livepatch-SLE15-SP1_Update_27, kernel-livepatch-SLE15-SP1_Update_28, kernel-livepatch-SLE15-SP1_Update_29, kernel-livepatch-SLE15-SP1_Update_27, kernel-livepatch-SLE15-SP1_Update_28, kernel-livepatch-SLE15-SP1_Update_29, kernel-livepatch-SLE15-SP1_Update_27, kernel-livepatch-SLE15-SP1_Update_28, kernel-livepatch-SLE15-SP1_Update_29

Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1)

sweet_xml

Inline DTD allows XML bomb attack

pow_assent

Denial of service

pow

Session fixation

plug, plug, plug, plug

Header Injection

plug, plug, plug, plug

Arbitrary Code Execution in Cookie Serialization

plug, plug, plug, plug

Null Byte Injection in Plug.Static

xain

Cross-site Scripting in xain

phoenix, phoenix, phoenix

Phoenix Arbitrary URL Redirect

grunt, grunt, grunt

js-jquery

CVE-2022-0436 affecting package js-jquery 3.5.0-4

grunt, grunt, grunt

privatebin/privatebin

Persistent Cross-site Scripting vulnerability in PrivateBin

stored xss due to unsantized anchor url in alvarotrigo/fullpage.js

phoenix_html

XSS in HEEx class attributes

rtl-433, rtl-433, rtl-433

tcpreplay, tcpreplay, tcpreplay

tcpreplay, tcpreplay, tcpreplay

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

mariadb-10.5

mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb, mariadb

mariadb-10.5