CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- socomec modulys gp, net vision +1 moreSOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on...5.7 Medium
commonmarkerRubyGemsSeveral quadratic complexity bugs may lead to denial of service in CommonmarkerNo score- devolutions remote desktop managerThe force offline MFA prompt setting is not respected when switching to offline mode in...3.3 Low
- baicells nova 227, nova 233, nova 243 +2 more +4 moreHard Coded Credential Crypt Vulnerability10.0 Critical
- ua-parser-js project ua-parser-jsReDoS Vulnerability in ua-parser-js version5.3 Medium
- checkmkImproper validation of LDAP user IDs6.8 Medium
buf_reduxcrates.iobuf_redux is UnmaintainedNo score- thimpress learnpress, learnpress – wordpress lms plugin +1 moreWordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection9.1 Critical
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreWordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection9.9 Critical
- thimpress learnpress, learnpress – wordpress lms plugin +1 moreWordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion9.3 Critical
- simple-git project simple-gitRemote code execution in simple-git8.1 High
- create-choo-electron project create-choo-electronCommand Injection in create-choo-electron7.4 High
- helecloud puppet-facterCommand Injection in puppet-facter7.4 High
- github cmark-gfmcmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service3.5 Low
- github cmark-gfmcmark-gfm out-of-bounds read in validate_protocol5.3 Medium
adyenPyPIAdyen has utility methods for validating notification HMAC signatures. The is_valid_hmac and is_valid_hmac_notification methods are vulnerable to a timing attack, you should compare the hash of the HM…No score- jenkins bearychat, jenkins project bearychat plugin +1 moreMissing permission check in Jenkins BearyChat Plugin6.5 Medium
- jenkins bearychat, jenkins project bearychat plugin +1 moreCross-site request forgery vulnerability in Jenkins BearyChat Plugin8.8 High
- jenkins keycloak authentication, jenkins project keycloak authentication plugin +1 moreCSRF vulnerability in Jenkins Keycloak Authentication Plugin6.5 Medium
- jenkins keycloak authentication, jenkins project keycloak authentication plugin +1 moreSession fixation vulnerability in Jenkins Keycloak Authentication Plugin9.8 Critical
- jenkins project visualexpert plugin, jenkins visual expert +1 morePath Traversal in Jenkins visualexpert Plugin4.3 Medium
- jenkins testquality updater, jenkins project testquality updater plugin +1 morePlaintext Storage of a Password in Jenkins TestQuality Updater Plugin5.5 Medium
- jenkins testquality updater, jenkins project testquality updater plugin +1 moreMissing permission check in Jenkins TestQuality Updater Plugin6.5 Medium
- jenkins testquality updater, jenkins project testquality updater plugin +1 moreCSRF vulnerability in Jenkins TestQuality Updater Plugin8.8 High
- jenkins cisco spark, jenkins project cisco spark notifier plugin +1 moreCisco Spark Notifier Jenkins Plugin contains Missing Authorization4.3 Medium
- jenkins view-cloner, jenkins project view-cloner plugin +1 morePasswords stored in plain text by Jenkins view-cloner Plugin6.5 Medium
- jenkins pwauth security realm, jenkins project pwauth security realm plugin +1 morePath traversal vulnerability in Jenkins PWauth Security Realm Plugin4.3 Medium
- jenkins rabbitmq consumer, jenkins project rabbitmq consumer plugin +1 moreMissing permission check in Jenkins RabbitMQ Consumer Plugin6.5 Medium
- jenkins rabbitmq consumer, jenkins project rabbitmq consumer plugin +1 moreCross-site request forgery vulnerability in Jenkins RabbitMQ Consumer Plugin8.8 High
- jenkins openid, jenkins project openid plugin +1 moreCross-site request forgery vulnerability in Jenkins OpenID Plugin8.8 High
- jenkins openid, jenkins project openid plugin +1 moreOpen redirect vulnerability in Jenkins OpenID Plugin6.1 Medium
- jenkins openid, jenkins project openid plugin +1 moreSession fixation vulnerability in Jenkins OpenID Plugin9.8 Critical
- jenkins testcomplete support, jenkins project testcomplete support plugin +1 moreXML Entity Expansion in Jenkins TestComplete support Plugin9.8 Critical
- jenkins github pull request coverage status, jenkins project github pull request coverage status plugin +1 morePlaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin5.5 Medium
- jenkins mstest, jenkins project mstest plugin +1 moreXML external entity vulnerability on agents in Jenkins MSTest Plugin9.8 Critical
- jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 moreCleartext Transmission of Sensitive Information in Jenkins JIRA Pipeline Steps Plugin5.5 Medium
- jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 morePlaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin5.5 Medium
- jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 moreMissing permissions check in Jenkins JIRA Pipeline Steps Plugin6.5 Medium
- jenkins jira pipeline steps, jenkins project jira pipeline steps plugin +1 moreCross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps Plugin8.8 High
- jenkins github pull request builder, jenkins project github pull request builder plugin +1 moreJenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs4.3 Medium
- jenkins github pull request builder, jenkins project github pull request builder plugin +1 moreMissing permission checks in Jenkins GitHub Pull Request Builder Plugin6.5 Medium
- jenkins github pull request builder, jenkins project github pull request builder plugin +1 moreCSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin8.8 High
- jenkins orka by macstadium, jenkins project orka by macstadium plugin +1 moreMissing permission checks in Jenkins Orka Plugin allow capturing credentials6.5 Medium
- jenkins orka by macstadium, jenkins project orka by macstadium plugin +1 moreCSRF vulnerability in Jenkins Orka Plugin allow capturing credentials8.8 High
- jenkins orka by macstadium, jenkins project orka by macstadium plugin +1 moreMissing permission checks in Jenkins Orka Plugin allow enumerating credentials IDs4.3 Medium
- jenkins semantic versioning, jenkins project semantic versioning plugin +1 moreXML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin9.8 Critical
- jenkins semantic versioning, jenkins project semantic versioning plugin +1 moreAgent-to-controller security bypass in Jenkins Semantic Versioning Plugin9.8 Critical
- jenkins bitbucket oauth, jenkins project bitbucket oauth plugin +1 moreCross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin5.7 Medium
- jenkins bitbucket oauth, jenkins project bitbucket oauth plugin +1 moreSession fixation vulnerability in Jenkins Bitbucket OAuth Plugin9.8 Critical
- jenkins azure ad, jenkins project azure ad plugin +1 moreInsufficient Session Expiration in Jenkins Azure AD Plugin8.8 High
- Show moreLoading…