nodejs-object-assign vulnerabilities (Red Hat)

37 vulnerabilities.

• nodejs-object-assign Red Hat The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker... CVE-2017-15138 5.0 MediumAugust 13, 2018
• nodejs-object-assign Red Hat A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin.... CVE-2017-12195 Fix available 6.5 MediumJuly 27, 2018
• nodejs-object-assign Red Hat The OpenShift image import whitelist failed to enforce restrictions correctly when running... CVE-2017-15137 4.3 MediumJuly 16, 2018
• nodejs-object-assign Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins CVE-2018-1000169 Fix available 5.3 MediumApril 13, 2018
• nodejs-object-assign Red Hat Authorization bypass in Openshift CVE-2016-1906 Fix available 9.8 CriticalFebruary 3, 2016
• nodejs-object-assign Red Hat Access Restriction Bypass in kubernetes CVE-2016-1905 Fix available 7.7 HighFebruary 3, 2016
• nodejs-object-assign Red Hat Jenkins does not Verify Checksums for Plugin Files CVE-2015-7539 Fix available 7.5 HighFebruary 3, 2016
• nodejs-object-assign Red Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack CVE-2015-7538 Fix available 8.8 HighFebruary 3, 2016
• nodejs-object-assign Red Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack CVE-2015-7537 Fix available 8.8 HighFebruary 3, 2016
• nodejs-object-assign Red Hat Jenkins CLI Deserialization of Untrusted Data vulnerability CVE-2015-8103 Public exploitFix available EPSS 91.9% 9.8 CriticalNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins allows Cross-Site Scripting (XSS) CVE-2015-5326 Fix available 4.3 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins allows Bypass of Access Restrictions CVE-2015-5325 Fix available 7.5 HighNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins allows Unauthorized Viewing of Queue API Information CVE-2015-5324 Fix available 5.0 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins allows Administrators to Access API Tokens CVE-2015-5323 Fix available 6.5 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins has Local File Inclusion Vulnerability CVE-2015-5322 Fix available 5.0 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins has Information Disclosure via Sidepanel Widget CVE-2015-5321 Fix available 5.0 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor CVE-2015-5320 Fix available 5.0 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI CVE-2015-5319 Fix available 5.0 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack CVE-2015-5318 Fix available 6.8 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins discloses project names via fingerprints CVE-2015-5317 In KEVFix available EPSS 23.0% 5.0 MediumNovember 25, 2015
• nodejs-object-assign Red Hat Jenkins allows for Privilege Escalation by Remote Authenticated Users CVE-2015-1814 Fix available 7.5 HighOctober 16, 2015
• nodejs-object-assign Red Hat Jenkins allows Cross-Site Scripting (XSS) CVE-2015-1813 Fix available 4.3 MediumOctober 16, 2015
• nodejs-object-assign Red Hat Jenkins Cross-site Scripting vulnerability CVE-2015-1812 Fix available 4.3 MediumOctober 16, 2015
• nodejs-object-assign Red Hat Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation CVE-2015-1810 Fix available 4.6 MediumOctober 16, 2015
• nodejs-object-assign Red Hat Jenkins Vulnerable to Denial of Service (DoS) CVE-2015-1808 Fix available 3.5 LowOctober 16, 2015
• nodejs-object-assign Red Hat Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote... CVE-2015-1807 3.5 LowOctober 16, 2015
• nodejs-object-assign Red Hat Jenkins allows for Privilege Escalation by Remote Authenticated Users CVE-2015-1806 Fix available 6.5 MediumOctober 16, 2015
• nodejs-object-assign Red Hat Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3680 Fix available 4.0 MediumOctober 16, 2014
• nodejs-object-assign Red Hat Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code CVE-2014-3667 Fix available 4.0 MediumOctober 16, 2014
• nodejs-object-assign Red Hat Jenkins allows for Code Execution via Crafted Packet to the CLI CVE-2014-3666 Fix available 7.5 HighOctober 16, 2014
• nodejs-object-assign Red Hat Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs CVE-2014-3663 Fix available 6.0 MediumOctober 16, 2014
• nodejs-object-assign Red Hat Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3662 Fix available 5.0 MediumOctober 16, 2014
• nodejs-object-assign Red Hat Jenkins Denial of Service vulnerability CVE-2014-3661 Fix available 5.0 MediumOctober 16, 2014
• nodejs-object-assign Red Hat Jenkins Cross-site Scripting vulnerability CVE-2014-3681 Fix available 4.3 MediumOctober 15, 2014
• nodejs-object-assign Red Hat Jenkins Path Traversal vulnerability CVE-2014-3664 Fix available 4.0 MediumOctober 15, 2014
• nodejs-object-assign Red Hat Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before... CVE-2014-1869 4.3 MediumFebruary 8, 2014
• nodejs-object-assign Red Hat Arbitrary file write in Apache Commons Fileupload CVE-2013-2186 Public exploitFix available EPSS 12.7% 7.5 HighOctober 28, 2013