CVEs published in November 2020
1,536 vulnerabilities, 172 critical, 12 exploited.
- jenkins sqlplus script runner, jenkins project sqlplus script runner plugin +1 morePassword written to the build log by Jenkins SQLPlus Script Runner Plugin6.5 Medium
- jenkins aws global configuration, jenkins project aws global configuration plugin +1 moreMissing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configuration4.3 Medium
- jenkins ansible, jenkins project ansible plugin +1 moreMissing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs4.3 Medium
- jenkins kubernetes, jenkins project kubernetes plugin +1 moreMissing authorization in Jenkins Kubernetes Plugin4.3 Medium
- jenkins kubernetes, jenkins project kubernetes plugin +1 moreMissing Authorization in Jenkins Kubernetes Plugin4.3 Medium
- jenkins kubernetes, jenkins project kubernetes plugin +1 moreExposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin4.3 Medium
- jenkins mercurial, jenkins project mercurial plugin +1 moreMissing Authorization in Jenkins Mercurial Plugin4.3 Medium
- jenkins mercurial, jenkins project mercurial plugin +1 moreXXE vulnerability in Jenkins Mercurial Plugin6.5 Medium
- jenkins subversion, jenkins project subversion plugin +1 moreXXE vulnerability in Jenkins Subversion Plugin6.5 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreCSRF vulnerability in Jenkins Active Directory Plugin4.3 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreMissing permission check in Jenkins Active Directory Plugin allows accessing domain health check page4.3 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreAuthentication cache in Active Directory Jenkins Plugin allows logging in with any password9.8 Critical
- jenkins active directory, jenkins project active directory plugin +1 moreImproper Authentication (empty password) in Jenkins Active Directory Plugin9.8 Critical
- jenkins active directory, jenkins project active directory plugin +1 moreImproper Authentication in Jenkins Active Directory Plugin9.8 Critical
- saltstack salt, debian linux +1 moreSaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi9.8 Critical
- saltstack salt, debian linux +1 moreSaltStack Salt Allows creating certificates with weak file permissions5.5 Medium
- saltstack salt, debian linux, fedoraproject fedora +1 more +3 moreSaltStack Salt Command Injection in netapi ssh client9.8 Critical
skopeoAlmaLinux,cockpit-podmanAlmaLinux,conmonAlmaLinux +12 more +14 morecontainer-tools:2.0 bug fix updateNo scorecustodiaAlmaLinux,python3-custodiaAlmaLinux,python3-jwcryptoAlmaLinux +5 more +7 moreidm:DL1 bug fix updateNo score- sddm project sddm, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that -...6.3 Medium
- tmuxtmux stack buffer overflow in function input_csi_dispatch_sgr_colon8.8 High
- bookstackapp bookstackCross-Site Scripting in BookStack7.7 High
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreA use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp...9.8 Critical
- facebook whatsapp business for ios, whatsapp, whatsapp business +1 more +3 moreImproper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior...4.6 Medium
- bookstackapp bookstackCross-Site Scripting in BookStack7.7 High
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 could allow...5.4 Medium
- ibm planning analytics local, planning analytics workspace +1 moreIBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to...4.3 Medium
- ibm maximo anywhereIBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a...3.5 Low
dwarvesAlmaLinux,libdwarves1AlmaLinux +1 moredwarves bug fix and enhancement updateNo score- fontforgeAn out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD...8.8 High
anaconda-user-helpAlmaLinuxanaconda-user-help bug fix and enhancement updateNo scoreliburingAlmaLinuxliburing bug fix and enhancement updateNo scorepython3-simplelineAlmaLinuxpython-simpleline bug fix and enhancement updateNo scoredtcAlmaLinux,libfdtAlmaLinux,libfdt-develAlmaLinux +2 moredtc bug fix and enhancement updateNo scoregreenbootAlmaLinux,greenboot-grub2AlmaLinux,greenboot-rebootAlmaLinux +1 more +3 moregreenboot bug fix and enhancement updateNo scoregcc-toolset-9-gccAlmaLinux,gcc-toolset-9-gcc-c++AlmaLinux,gcc-toolset-9-gcc-gdb-pluginAlmaLinux +11 more +13 morenew packages: gcc-toolset-10-systemtapNo scoretorqueAlmaLinux,torque-develAlmaLinux,torque-libsAlmaLinux +2 moretorque bug fix and enhancement updateNo scorecrash-ptdump-commandAlmaLinuxcrash-ptdump-command bug fix and enhancement updateNo scoregit-lfsAlmaLinuxgit-lfs bug fix and enhancement updateNo scorerpmdevtoolsAlmaLinuxrpmdevtools bug fix and enhancement updateNo scoremariadb-java-clientAlmaLinuxmariadb-java-client bug fix and enhancement updateNo scorerubygem-abrtAlmaLinux,rubygem-abrt-docAlmaLinux,rubygem-bsonAlmaLinux +7 more +9 moreruby:2.5 bug fix updateNo scorespice-server-develAlmaLinuxspice bug fix and enhancement updateNo scoreperl-DBD-PgAlmaLinuxperl:5.30 metadata for the AlmaLinux 8 module matrixNo scoreperl-String-ShellQuoteAlmaLinuxperl:5.30 metadata for the AlmaLinux 8 module matrixNo scorepython3-justbasesAlmaLinux,python3-justbytesAlmaLinux +1 morepython-justbases bug fix and enhancement updateNo scorerpmlintAlmaLinuxrpmlint bug fix and enhancement updateNo scoreompingAlmaLinuxomping bug fix and enhancement updateNo scoregoogle-noto-fonts-commonAlmaLinux,google-noto-kufi-arabic-fontsAlmaLinux,google-noto-mono-fontsAlmaLinux +117 more +119 moregoogle-noto-fonts bug fix and enhancement updateNo scorecrash-develAlmaLinuxcrash bug fix and enhancement updateNo score- Show moreLoading…