CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- jenkins checkmarx, jenkins project checkmarx plugin +1 moreMissing permission checks in Jenkins Checkmarx Plugin allow capturing credentials6.5 Medium
- jenkins checkmarx, jenkins project checkmarx plugin +1 moreCSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentials8.8 High
- jenkins scp publisher, jenkins project scp publisher plugin +1 moreMissing permission check in Jenkins SCP publisher Plugin8.8 High
- jenkins scp publisher, jenkins project scp publisher plugin +1 moreCSRF vulnerability in Jenkins SCP publisher Plugin8.8 High
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreAgent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files6.5 Medium
- jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 moreOpen redirect vulnerability in Jenkins GitLab Authentication Plugin5.4 Medium
- jenkins autonomiq, jenkins project autonomiq plugin +1 moreMissing permission check in Jenkins autonomiq Plugin4.3 Medium
- jenkins autonomiq, jenkins project autonomiq plugin +1 moreCSRF vulnerability in Jenkins autonomiq plugin8.8 High
- jenkins snow commander, jenkins project snow commander plugin +1 moreJenkins Snow Commander Plugin prior to 2.0 vulnerable to Missing Authorization6.5 Medium
- jenkins snow commander, jenkins project snow commander plugin +1 moreJenkins Snow Commander Plugin 2.0 vulnerable to Cross-Site Request Forgery8.8 High
- jenkins agent server parameter, jenkins project agent server parameter plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Agent Server Parameter Plugin5.4 Medium
- jenkins conjur secrets, jenkins project conjur secrets plugin +1 moreMissing permission check in Jenkins Conjur Secrets Plugin allows enumerating credentials IDs4.3 Medium
- jenkins custom checkbox parameter, jenkins project custom checkbox parameter plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Custom Checkbox Parameter Plugin5.4 Medium
- jenkins fortify, jenkins project fortify plugin +1 morePath traversal vulnerability in Jenkins Fortify Plugin4.3 Medium
- jenkins support core, jenkins project support core plugin +1 moreJenkins Support Core Plugin stores sensitive data in plain text6.5 Medium
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreAgent-to-controller security bypass in Jenkins HashiCorp Vault Plugin6.5 Medium
- jenkins generic webhook trigger, jenkins project generic webhook trigger plugin +1 moreStored XSS vulnerability in Jenkins Generic Webhook Trigger Plugin5.4 Medium
- jenkins project pipeline: build step plugin, jenkins pipeline\ +1 morePassword parameter default values exposed by Jenkins Pipeline: Build Step Plugin6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 High
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials4.3 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin6.5 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin8.8 High
- backdropcms backdropA stored cross-site scripting (XSS) vulnerability in the Add Link function of BackdropCMS v1.21.1...5.4 Medium
- twentysix26 x26-cogsPrivilege escalation in Defender8.8 High
- pluxmlA stored cross-site scripting (XSS) vulnerability in the component core/admin/medias.php of...5.4 Medium
- flatpressFlatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the...5.4 Medium
- phpgurukul hospital management systemHospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via...7.5 High
- pluxmlA stored cross-site scripting (XSS) vulnerability in the component /core/admin/comment.php of...5.4 Medium
- hashicorp nomadNomad Spread Job Stanza May Trigger Panic in Servers6.5 Medium
- pluxmlA stored cross-site scripting (XSS) vulnerability in the component /core/admin/categories.php of...5.4 Medium
- microweber, microweber microweber/microweber +1 moreOpen Redirect in microweber/microweber4.3 Medium
- splashtop streamerSplashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure...7.8 High
- commscope arris surfboard sbg10 firmware, arris surfboard sbg6950ac2 firmware, arris surfboard sbg7400ac2 firmware +2 more +4 moreCommScope URFboard SBG6950AC2 9.1.103AA23 devices allow Command Injection.8.8 High
- keking kkfileviewkkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may...7.5 High
- helpsystems cobalt strikeCobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/",...7.5 High
- yzmcmsYzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add8.8 High
- issabel pbxMultiple cross-site scripting (XSS) vulnerabilities in the Add User module of Issabel PBX...5.4 Medium
- vicidialVicidial 2.14-783a was discovered to contain a cross-site scripting (XSS) vulnerability via the...5.4 Medium
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Stored in librenms/librenms5.4 Medium
- librenms, librenms librenms/librenms +1 moreMissing Authorization in librenms/librenms7.1 High
- librenms, librenms librenms/librenms +1 moreImproper Authorization in librenms/librenms7.1 High
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow authenticated...4.3 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to modify...6.5 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow authenticated local...7.8 High
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow authenticated...4.3 Medium
- Show moreLoading…