Open Source Vulnerabilities

io.jenkins.plugins:autonomiq

Missing permission check in Jenkins autonomiq Plugin

io.jenkins.plugins:autonomiq

CSRF vulnerability in Jenkins autonomiq plugin

org.jenkins-ci.plugins:scp

CSRF vulnerability in Jenkins SCP publisher Plugin

org.jenkins-ci.plugins:gitlab-oauth

Open redirect vulnerability in Jenkins GitLab Authentication Plugin

com.datapipe.jenkins.plugins:hashicorp-vault-plugin

Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files

com.checkmarx.jenkins:checkmarx

CSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentials

org.jenkins-ci.plugins:scp

Missing permission check in Jenkins SCP publisher Plugin

org.jenkins-ci.plugins:promoted-builds-simple

Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) Plugin

com.checkmarx.jenkins:checkmarx

Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials

by.dev.madhead.doktor:doktor

Protection Mechanism Failure in Jenkins Doktor Plugin

com.sonymobile.jenkins.plugins.teamviews:team-views

Stored Cross-site Scripting vulnerability in Jenkins Team Views Plugin

org.jenkins-ci.plugins:dbCharts

Cross-Site Request Forgery in Jenkins dbCharts Plugin

org.jenkins-ci.plugins:dbCharts

Missing Authorization in Jenkins dbCharts Plugin

org.jenkins-ci.plugins:sinatra-chef-builder

Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE

org.jenkins-ci.plugins:sinatra-chef-builder

CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE

org.jenkins-ci.plugins:sinatra-chef-builder

Improper Restriction of XML External Entity Reference in Jenkins Chef Sinatra

com.convertigo.jenkins.plugins:convertigo-mobile-platform

Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin

org.continuousassurance.swamp.jenkins:swamp

Missing permission check in Jenkins SWAMP Plugin allows capturing credentials

org.continuousassurance.swamp.jenkins:swamp

CSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentials

libplist

Heap-buffer-overflow in parse_primitive

drupal7

drupal7 - security update

zsh, zsh

zsh - security update

stdlib

Denial of service when parsing large forms in mime/multipart

Missing Authorization in snipe/snipe-it

kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

kernel-linus

Updated kernel-linus packages fix security vulnerabilities

microcode

Updated microcode packages fix security vulnerabilities

kernel-firmware-nonfree, radeon-firmware

Updated nonfree firmware packages fix security vulnerabilities

Denial of Service in Discourse

rust-crossbeam-utils, rust-crossbeam-utils, rust-crossbeam-utils

ripgrep

CVE-2022-23639 affecting package ripgrep 13.0.0-14

rust

CVE-2022-23639 affecting package rust for versions less than crossbeam_utils-0.8.7

librsvg2

CVE-2022-23639 affecting package librsvg2 for versions less than 2.58.1-1