CVEs published in June 2022
3,847 vulnerabilities, 331 critical, 3 exploited.
- jenkins easyqa, jenkins project easyqa plugin +1 moreJenkins EasyQA Plugin Missing Authorization vulnerability4.3 Medium
- jenkins easyqa, jenkins project easyqa plugin +1 moreCross-Site Request Forgery in Jenkins EasyQA Plugin8.8 High
- jenkins easyqa, jenkins project easyqa plugin +1 moreUser passwords stored in plain text by Jenkins EasyQA Plugin6.5 Medium
- jenkins convertigo mobile platform, jenkins project convertigo mobile platform plugin +1 moreMissing permission check in Jenkins Convertigo Mobile Platform Plugin6.5 Medium
- jenkins convertigo mobile platform, jenkins project convertigo mobile platform plugin +1 moreCross-Site Request Forgery in Jenkins Convertigo Mobile Platform Plugin8.8 High
- jenkins convertigo mobile platform, jenkins project convertigo mobile platform plugin +1 morePlaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin6.5 Medium
- jenkins stash branch parameter, jenkins project stash branch parameter plugin +1 moreCross-site Scripting in Jenkins Stash Branch Parameter Plugin5.4 Medium
- jenkins sauce ondemand, jenkins project sauce ondemand plugin +1 moreCross-site Scripting in Jenkins Sauce OnDemand Plugin5.4 Medium
- jenkins rest list parameter, jenkins project rest list parameter plugin +1 moreCross-site Scripting in Jenkins REST List Parameter Plugin5.4 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreCross-site Scripting in Jenkins Repository Connector Plugin5.4 Medium
- jenkins readonly parameter, jenkins project readonly parameter plugin +1 moreCross-site Scripting in Jenkins Readonly Parameter Plugin5.4 Medium
- jenkins package version, jenkins project package version plugin +1 moreCross-site Scripting in Jenkins Package Version Plugin5.4 Medium
- jenkins ontrack, jenkins project ontrack jenkins plugin +1 moreCross-site Scripting in Jenkins ontrack Jenkins Plugin5.4 Medium
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreCross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin5.4 Medium
- jenkins maven metadata, jenkins project maven metadata plugin for jenkins ci server plugin +1 moreCross-site Scripting in Jenkins Maven Metadata Plugin5.4 Medium
- jenkins image tag parameter, jenkins project image tag parameter plugin +1 moreCross-site Scripting in Jenkins Image Tag Parameter Plugin5.4 Medium
- jenkins hidden parameter, jenkins project hidden parameter plugin +1 moreCross-site Scripting in Jenkins Hidden Parameter Plugin5.4 Medium
- jenkins filesystem list parameter, jenkins project filesystem list parameter plugin +1 moreCross-site Scripting in Jenkins Filesystem List Parameter Plugin5.4 Medium
- jenkins dynamic extended choice parameter, jenkins project dynamic extended choice parameter plugin +1 moreCross-site Scripting in Jenkins Dynamic Extended Choice Parameter Plugin5.4 Medium
- jenkins date parameter, jenkins project date parameter plugin +1 moreCross-site Scripting in Jenkins Date Parameter Plugin5.4 Medium
- jenkins crx content package deployer, jenkins project crx content package deployer plugin +1 moreCross-site Scripting in Jenkins CRX Content Package Deployer Plugin5.4 Medium
- jenkins agent server parameter, jenkins project agent server parameter plugin +1 moreCross-site Scripting in Jenkins Agent Server Parameter Plugin5.4 Medium
- jenkins nested view, jenkins project nested view plugin +1 moreReflected Cross-site Scripting in Jenkins Nested View Plugin6.1 Medium
- jenkins xunit, jenkins project xunit plugin +1 moreAgent-to-controller security bypass in Jenkins xUnit Plugin9.1 Critical
- jenkins embeddable build status, jenkins project embeddable build status plugin +1 moreImproper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement7.5 High
- jenkins embeddable build status, jenkins project embeddable build status plugin +1 morePath Traversal vulnerability in Jenkins Embeddable Build Status Plugin7.5 High
- jenkins embeddable build status, jenkins project embeddable build status plugin +1 moreReflected Cross site scripting in Jenkins Embeddable Build Status Plugin6.1 Medium
- jenkinsUnauthorized view fragment access in Jenkins7.5 High
- jenkinsObservable timing discrepancy allows determining username validity in Jenkins7.5 High
- jenkinsCross-site Scripting vulnerability in Jenkins5.4 Medium
- jenkinsCross-site Scripting vulnerability in Jenkins5.4 Medium
- jenkinsCross-site Scripting vulnerability in Jenkins5.4 Medium
- jenkinsCross-site Scripting vulnerability in Jenkins5.4 Medium
- ideaco ideatmsIdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO9.8 Critical
- libdwarf project libdwarfThere is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to...8.1 High
- purestorage purity\/\/fa, purity\/\/fb +1 morePure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8,...9.8 Critical
- apache sling api, sling commons log, apache software foundation sling +2 morelog injection in Sling logging5.3 Medium
- purestorage purity\/\/fa, purity\/\/fb +1 morePure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8,...8.8 High
- purestorage purity\/\/fa, purity\/\/fb +1 morePure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8,...8.8 High
- vmware spring data mongodbSpEL Injection in Spring Data MongoDB9.8 Critical
- xi s&d inc. s&d smarthome (smartcare), xisnd s\&d smarthome +1 moreXi Smarthome wallpad authentication bypass vulnerability7.3 High
- shina system co.,ltd sihas firmware, sihas old app, shinasys sihas acm-300 firmware +2 more +4 moreSiHAS Improper Authentication vulnerability8.8 High
- maxb maxboardMaxboard Remote Code Execution8.8 High
- bosch pra-es8p2s, pra-es8p2s firmware +1 morePrivilege Escalation8.8 High
- bosch pra-es8p2s, pra-es8p2s firmware +1 moreOS Command Injection8.8 High
- bosch pra-es8p2s, pra-es8p2s firmware +1 moreWeb server runs as root4.8 Medium
- cisco adaptive security device manager, adaptive security device manager (asdm) +1 moreCisco Adaptive Security Device Manager Information Disclosure Vulnerability5.5 Medium
- algosolutions 8373 ip zone paging adapter firmwareAlgo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to...8.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at...7.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at...7.8 High
- Show moreLoading…