CVEs published in July 2023
2,375 vulnerabilities, 275 critical, 16 exploited.
- jenkins benchmark evaluator, jenkins project benchmark evaluator plugin +1 moreJenkins Benchmark Evaluator Plugin vulnerable to cross-site request forgery8.8 High
- jenkins assembla, jenkins project assembla auth plugin +1 moreJenkins Assembla Auth Plugin vulnerable to cross-site request forgery8.8 High
- jenkins mathworks polyspace, jenkins project mathworks polyspace plugin +1 moreJenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read6.5 Medium
- jenkins sumologic publisher, jenkins project sumologic publisher plugin +1 moreJenkins Sumologic Publisher Plugin missing permission check6.5 Medium
- jenkins sumologic publisher, jenkins project sumologic publisher plugin +1 moreJenkins Sumologic Publisher Plugin vulnerable to cross-site request forgery8.8 High
- jenkins pipeline restful api, jenkins project pipeline restful api plugin +1 moreJenkins Pipeline restFul API Plugin vulnerable to Cross Site Request Forgery8.8 High
- jenkins test results aggregator, jenkins project test results aggregator plugin +1 moreJenkins Test Results Aggregator Plugin missing permission check6.5 Medium
- jenkins test results aggregator, jenkins project test results aggregator plugin +1 moreJenkins Test Results Aggregator Plugin vulnerable to Cross Site Request Forgery6.5 Medium
- jenkins rebuilder, jenkins project rebuilder plugin +1 moreJenkins Rebuilder Plugin vulnerable to Cross Site Request Forgery4.3 Medium
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin missing permission check6.5 Medium
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin vulnerable to cross-site request forgery6.5 Medium
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin vulnerable to exposure of system-scooped credentials6.5 Medium
- jenkins mabl, jenkins project mabl plugin +1 moreJenkins mabl Plugin missing permission check4.3 Medium
- jenkins orka by macstadium, jenkins project orka by macstadium plugin +1 moreJenkins Orka by MacStadium Plugin missing permission check7.1 High
- jenkins cloud infrastructure compute, jenkins project oracle cloud infrastructure compute plugin +1 moreJenkins Oracle Cloud Infrastructure Compute Plugin missing SSH host key validation3.7 Low
- jenkins openshift login, jenkins project openshift login plugin +1 moreJenkins OpenShift Login Plugin vulnerable to Open Redirect6.1 Medium
- jenkins openshift login, jenkins project openshift login plugin +1 moreJenkins OpenShift Login Plugin session fixation vulnerability8.8 High
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin missing permission check4.3 Medium
- jenkins datadog, jenkins project datadog plugin +1 moreJenkins Datadog Plugin does not perform a permission check in an HTTP endpoint.6.5 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin vulnerable to Active Directory credential disclosure5.9 Medium
- jenkins external monitor job type, jenkins project external monitor job type plugin +1 moreJenkins External Monitor Job Type Plugin XML external entity vulnerability6.5 Medium
- adobe coldfusionAdobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution9.8 Critical
- adobe coldfusionAdobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass7.5 High
- adobe coldfusionAdobe ColdFusion Improper Access Control Security feature bypass7.5 High
- libtiff, debian linux, fedora +5 more +7 moreSegmentation fault in fax3encode in libtiff/tif_fax3.c6.5 Medium
openscOSS-FuzzStack-buffer-overflow in sc_pkcs15_get_lastupdateNo score- cisco broadworks, broadworks application delivery platform firmware, broadworks application server firmware +14 more +16 moreA vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate...6.0 Medium
- cisco duo authentication proxy, duo authentication proxy +1 moreA vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an...4.9 Medium
- cisco nx-os system software in aci mode, nx-os +1 moreA vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000...7.4 High
- mozilla firefox, firefox for ios +1 moreThe session restore helper crashed whenever there was no parameter sent to the message handler....6.5 Medium
- mozilla firefox, firefox for ios +1 moreThe permission request prompt from the site in the background tab was overlaid on top of the site...5.4 Medium
skopeoopenSUSESecurity update for skopeoNo scoregeoipupdateopenSUSESecurity update for geoipupdateNo score- rockwell automation 1756-en4tr series a, 1756-en4trk series a, 1756-en4trxt series a +6 more +8 moreRockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service7.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases3.3 Low
- jetbrains youtrackIn JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written...4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during...4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be...4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI...4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible4.6 Medium
- rockwell auotmation 1756-en2tpxt series a, rockwell automation 1756-en2f series a, b, 1756-en2f series c +31 more +33 moreRockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution9.8 Critical
- adobe preludeAdobe Prelude JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe media encoderAdobe Media Encoder 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe media encoderAdobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe media encoderAdobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe media encoderAdobe Media Encoder MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- apache ambariApache Ambari: Allows authenticated metrics consumers to perform RCE8.0 High
- Show moreLoading…