CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin allows attackers with Overall/Read permission to enumerate credentials IDs4.3 Medium
- jenkins dynamic extended choice parameter, jenkins project dynamic extended choice parameter plugin +1 moreStored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin5.4 Medium
- jenkins http request, jenkins project http request plugin +1 moreJenkins HTTP Request Plugin stores HTTP Request passwords unencrypted6.5 Medium
- jenkins compuware zadviser api, jenkins project compuware zadviser api plugin +1 moreJenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure8.2 High
- jenkins compuware ispw operations, jenkins project compuware ispw operations plugin +1 moreAgent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin8.2 High
- jenkins compuware ispw operations, jenkins project compuware ispw operations plugin +1 moreJenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints4.3 Medium
- jenkins compuware xpediter code coverage, jenkins project compuware xpediter code coverage plugin +1 moreJenkins Compuware Xpediter Code Coverage Plugin Missing Authorization4.3 Medium
- jenkins project compuware source code download for endevor, pds, and ispw plugin, jenkins compuware source code download for endevor\, pds\, and ispw +1 moreJenkins Compuware Source Code Download is missing authorization6.5 Medium
- jenkins compuware topaz utilities, jenkins project compuware topaz utilities plugin +1 moreJenkins Compuware Topaz Utilities Plugin is missing authorization4.3 Medium
- jenkins clif performance testing, jenkins project clif performance testing plugin +1 moreArbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin6.5 Medium
- jenkins rpmsign-plugin, jenkins project rpmsign-plugin plugin +1 moreJenkins rpmsign-plugin does not perform a permission check in a method implementing form validation4.3 Medium
- jenkins rhnpush-plugin, jenkins project rhnpush-plugin plugin +1 moreJenkins rhnpush-plugin does not perform a permission check in a method implementing form validation4.3 Medium
- jenkins deployer framework, jenkins project deployer framework plugin +1 moreJenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs4.3 Medium
- jenkins deployer framework, jenkins project deployer framework plugin +1 moreJenkins Deployer Framework Plugin vulnerable to Path Traversal4.3 Medium
- jenkins deployer framework, jenkins project deployer framework plugin +1 moreJenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment8.8 High
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreJenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection tests6.5 Medium
- jenkins job configuration history, jenkins project job configuration history plugin +1 moreJenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints4.3 Medium
- jenkins external monitor job type, jenkins project external monitor job type plugin +1 moreExternal Monitor Job Type Plugin does not require POST requests for an HTTP endpoint4.3 Medium
- jenkins github, jenkins project github plugin +1 moreJenkins GitHub plugin uses weak webhook signature function5.3 Medium
- jenkins git, jenkins project git plugin +1 moreLack of authentication mechanism in Jenkins Git Plugin webhook5.3 Medium
- jenkins git, jenkins project git plugin +1 moreLack of authentication mechanism in Jenkins Git Plugin webhook7.5 High
- jenkins git, jenkins project git plugin +1 moreLack of authentication mechanism in Jenkins Git Plugin webhook8.8 High
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client plugin 3.11.0 does not perform SSH host key verification8.1 High
- open-xchange ox app suiteOX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable,...6.5 Medium
- open-xchange ox app suiteOX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the...9.8 Critical
- open-xchange ox app suiteOX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.6.1 Medium
- sap successfactors mobile, sap successfactors mobile application for android & ios devices +1 morePrivilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application(Android & iOS)8.1 High
- oxilab shortcode addons, biplob018 shortcode addons (wordpress plugin) +1 moreWordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability7.2 High
- open-xchange app suiteOX App Suite through 7.10.6 allows XSS by forcing block-wise read.5.4 Medium
- open-xchange ox app suiteOX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an...9.8 Critical
- sims project simsSims v1.0 was discovered to allow path traversal when downloading attachments.6.5 Medium
- student information management system project information management systemSims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component ...5.4 Medium
- sims project simsSims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component ...8.8 High
- wasm3 project wasm3WASM3 segmentation fault5.5 Medium
- mcafee agent, trellix agent (ta) +1 moreDLL high jacking in Trellix Agent8.2 High
- skyhigh security secure web gateway (swg), skyhighsecurity secure web gateway +1 moreSkyhigh SWG Authentication bypass vulnerability10.0 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...6.5 Medium
- webmin usermin, webmin +1 moreThe Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e...6.1 Medium
- debian linux, linux kernel, netapp a700s firmware +22 more +24 moreAn issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm...5.5 Medium
- advanced school management system project school management systemAdvanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- online fire reporting system project fire reporting systemA cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting...5.4 Medium
- feehi cmsFeehi CMS arbitrary code execution via crafted PHP file8.8 High
lcmsOSS-FuzzHeap-buffer-overflow in _cmsWriteXYZNumberNo scorelcmsOSS-FuzzUse-of-uninitialized-value in ComputeConversionNo scoremrubyOSS-FuzzSegv on unknown address in mrb_bint_cmpNo scoreclamavOSS-FuzzUNKNOWN READ in fp_cmp_magNo scorelcmsOSS-FuzzUNKNOWN READ in EvalSegmentedFnNo score- debian linux, linux kernel, netapp active iq unified manager +6 more +8 morenfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote...7.5 High
- mozilla firefoxMozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreWhen combining CSS properties for overflow and transform, the mouse cursor could interact with...7.5 High
- Show moreLoading…