CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- jenkins compuware strobe measurement, jenkins project compuware strobe measurement plugin +1 moreJenkins Compuware Strobe Measurement Plugin Missing Authorization vulnerability4.3 Medium
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreXXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin7.5 High
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreJenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure7.5 High
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreAgent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin5.3 Medium
- jenkins compuware topaz for total test, jenkins project compuware topaz for total test plugin +1 moreJenkins Compuware Topaz for Total Test Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins4.3 Medium
- jenkins s3 explorer, jenkins project s3 explorer plugin +1 moreAWS secrets displayed without masking by Jenkins S3 Explorer Plugin5.3 Medium
- jenkins custom checkbox parameter, jenkins project custom checkbox parameter plugin +1 moreStored XSS vulnerability in Jenkins Custom Checkbox Parameter Plugin5.4 Medium
- jenkins compuware xpediter code coverage, jenkins project compuware xpediter code coverage plugin +1 moreAgent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin5.3 Medium
- jenkins project compuware source code download for endevor, pds, and ispw plugin, jenkins compuware source code download for endevor\, pds\, and ispw +1 moreAgent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin5.3 Medium
- jenkins compuware topaz utilities, jenkins project compuware topaz utilities plugin +1 moreAgent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin5.3 Medium
- jenkins tuleap git branch source, jenkins project tuleap git branch source plugin +1 moreJenkins Tuleap Git Branch Source Plugin allows unauthenticated attackers to trigger Tuleap projects whose configured repo matches attacker-specified value5.3 Medium
- jenkins contrast continuous application security, jenkins project contrast continuous application security plugin +1 moreStored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin5.4 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreAPI keys stored in plain text by Jenkins Katalon Plugin6.5 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreCSRF vulnerability in Jenkins Katalon Plugin allows capturing credentials4.3 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreMissing permission checks in Jenkins Katalon Plugin allow capturing credentials4.3 Medium
- jenkins katalon, jenkins project katalon plugin +1 moreJenkins Katalon Plugin vulnerable to Protection Mechanism Failure8.8 High
- jenkins repo, jenkins project repo plugin +1 moreXXE vulnerability in Jenkins REPO Plugin7.5 High
- jenkins nunit, jenkins project nunit plugin +1 moreJenkins NUnit Plugin vulnerable to Protection Mechanism Failure5.3 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins4.3 Medium
- jenkins generic webhook trigger, jenkins project generic webhook trigger plugin +1 moreNon-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin5.3 Medium
- jenkins gitlab, jenkins project gitlab plugin +1 moreNon-constant time webhook token comparison in Jenkins GitLab Plugin5.3 Medium
- jenkins mercurial, jenkins project mercurial plugin +1 moreWebhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin5.3 Medium
- jenkins project pipeline: supporting apis plugin, jenkins pipeline\ +1 moreStored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin5.4 Medium
- jenkins project pipeline: stage view plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins6.5 Medium
- jenkins project pipeline: input step plugin, jenkins pipeline\ +1 moreCSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin8.8 High
- jenkins groovy libraries, jenkins project pipeline: deprecated groovy libraries plugin +1 moreSandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin9.9 Critical
- jenkins groovy libraries, jenkins project pipeline: groovy libraries plugin +1 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin sandbox bypass vulnerability9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution9.9 Critical
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 Critical
- rukovoditelA stored cross-site scripting (XSS) vulnerability in the Configuration/Holidays module of...5.4 Medium
- dlink dir-878 firmwareD-Link DIR878 1.30B08 Hotfix_04 was discovered to contain a command injection vulnerability via...9.8 Critical
- gpacGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the...5.5 Medium
- gpacGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the...5.5 Medium
- gpacGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the...5.5 Medium
- gpacGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the...7.8 High
- gpacGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the...7.8 High
- gpacGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the...5.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadCache()...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4_File:...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4_Dec3Atom:...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4_HdlrAtom::...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4_DescriptorFactory:...6.5 Medium
- tenda tx3 firmwareTenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via...9.8 Critical
- tenda tx3 firmwareTenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via...9.8 Critical
- tenda tx3 firmwareTenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via...9.8 Critical
- tenda tx3 firmwareTenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via...9.8 Critical
- tenda tx3 firmwareTenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via...9.8 Critical
- Show moreLoading…