Skip to content
OpenAdvisories

Archive

9 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /9 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.3
    CVE-2018-1000055

    XXE vulnerability in Jenkins Android Lint Plugin

    Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, o…

    org.jvnet.hudson.plugins:android-lint Maven
  • High 8.3
    CVE-2018-1000054

    Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference

    Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-…

    org.jvnet.hudson.plugins:ccm Maven
  • High 8.1
    CVE-2018-1000025

    Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability

    Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could …

    kreait/firebase-php Packagist
  • High 8.8
    CVE-2018-1000058

    Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin

    Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, a…

    org.jenkins-ci.plugins.workflow:workflow-support Maven
  • High 8.3
    CVE-2018-1000056

    Improper Restriction of XML External Entity Reference in Jenkins JUnit Plugin

    Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or deni…

    org.jenkins-ci.plugins:junit Maven
  • High 8.1
    CVE-2018-1307

    Apache juddi-client vulnerable to XML External Entity (XXE)

    In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD t…

    Apache Software Foundation Apache jUDDI org.apache.juddi:juddi-client Maven