CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- jenkins scm httpclient, jenkins project scm httpclient plugin +1 moreJenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery8.8 High
- jenkins bigpanda notifier, jenkins project bigpanda notifier plugin +1 moreJenkins BigPanda Notifier Plugin Missing Password Field Masking5.3 Medium
- jenkins bigpanda notifier, jenkins project bigpanda notifier plugin +1 moreJenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted4.3 Medium
- jenkins worksoft execution manager, jenkins project worksoft execution manager plugin +1 moreCSRF vulnerability and mM6.5 Medium
- jenkins worksoft execution manager, jenkins project worksoft execution manager plugin +1 moreCSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials8.8 High
- jenkins view26 test-reporting, jenkins project view26 test-reporting plugin +1 moreMissing hostname validation in Jenkins View26 Test-Reporting Plugin8.1 High
- jenkins smalltest, jenkins project smalltest plugin +1 moreJenkins SmallTest Plugin missing hostname validation8.1 High
- jenkins extreme-feedback, jenkins project extreme-feedback plugin +1 moreJenkins extreme-feedback Plugin vulnerable to Missing Authorization5.4 Medium
- jenkins rqm, jenkins project rqm plugin +1 moreJenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference9.1 Critical
- jenkins walti, jenkins project walti plugin +1 moreStored XSS vulnerability in Jenkins Walti plugin5.4 Medium
- jenkins dotci, jenkins project dotci plugin +1 moreStored XSS vulnerability in Jenkins DotCi Plugin5.4 Medium
- jenkins dotci, jenkins project dotci plugin +1 moreLack of authentication mechanism in Jenkins DotCi Plugin webhook9.8 Critical
- jenkins dotci, jenkins project dotci plugin +1 moreRCE vulnerability in Jenkins DotCi Plugin9.8 Critical
- jenkins security inspector, jenkins project security inspector plugin +1 moreCSRF vulnerability in Jenkins Security Inspector plugin8.8 High
- jenkins wildfly deployer, jenkins project wildfly deployer plugin +1 moreJenkins WildFly Deployer Plugin vulnerable to path traversal5.3 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreMissing webhook endpoint authorization in Jenkins Rundeck Plugin8.8 High
- jenkins rundeck, jenkins project rundeck plugin +1 moreJenkins Rundeck Plugin Missing Authorization vulnerability4.3 Medium
- jenkins build-publisher, jenkins project build-publisher plugin +1 moreJenkins build-publisher plugin vulnerable to cross-site request forgery8.0 High
- jenkins build-publisher, jenkins project build-publisher plugin +1 morePath traversal in Jenkins build-publisher Plugin5.7 Medium
- jenkins build-publisher, jenkins project build-publisher plugin +1 moreMissing permission check in Jenkins build-publisher Plugin4.3 Medium
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting5.4 Medium
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization8.8 High
- jenkins ns-nd integration performance publisher, jenkins project ns-nd integration performance publisher plugin +1 moreJenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery8.8 High
- jenkins compuware common configuration, jenkins project compuware common configuration plugin +1 moreJenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference9.8 Critical
- jenkins anchore container image scanner, jenkins project anchore container image scanner plugin +1 moreJenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting5.4 Medium
- jenkinsJenkins vulnerable to stored cross site scripting in the I:helpIcon component5.4 Medium
- rapid7 insightvmRapid7 InsightVM Information Disclosure after Logout3.3 Low
- craftcms craft cmsCraft CMS Cross-site Scripting vulnerability5.4 Medium
- identity and directory management system project and directory management system, çekino bilgi teknolojileri bilgi teknolojileri +1 morePath traversal in Identity and Directory Management System7.5 High
- xpdfreader xpdfXPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.7.8 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore6.8 Medium
- octoprint, octoprint octoprint/octoprint +1 moreImproper Privilege Management in octoprint/octoprint5.3 Medium
- octoprint, octoprint octoprint/octoprint +1 moreInsufficient Session Expiration in octoprint/octoprint4.4 Medium
- octoprint, octoprint octoprint/octoprint +1 moreUnrestricted Upload of File with Dangerous Type in octoprint/octoprint3.7 Low
- parantez teknoloji teknoloji, parantezteknoloji koha library automation +1 moreSQL Injection in KOHA9.4 Critical
- database software software, databank accreditation tracking\/presentation module +1 moreSQL Injection in Database Accreditation System9.4 Critical
- apache airflowOpen Redirect6.1 Medium
- apache airflowFormat String Vulnerability7.5 High
- md2roff project md2roff** DISPUTED ** md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different...9.8 Critical
fileOSS-FuzzHeap-buffer-overflow in file_zmagicNo scorefileOSS-FuzzHeap-buffer-overflow in file_magwarnNo score- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moremm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an...7.0 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free...5.5 Medium
- debian linux, fedoraproject fedora, isc bind +2 more +4 moreMemory leaks in EdDSA DNSSEC verification code7.5 High
- debian linux, fedoraproject fedora, isc bind +2 more +4 moreMemory leak in ECDSA DNSSEC verification code7.5 High
- erlang erlang\/otpIn Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client...9.8 Critical
- isc bind, fedoraproject fedora, isc bind9 +2 moreBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly7.5 High
- isc bind, bind9 +1 moreMemory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)7.5 High
- isc bind, bind9 +1 moreBuffer overread in statistics channel code5.5 Medium
- debian linux, fedoraproject fedora, isc bind +1 more +3 moreProcessing large delegations may severely degrade resolver performance5.3 Medium
- Show moreLoading…