Skip to content
OpenAdvisories

Archive

16 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /16 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-1000068

    Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

    An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins …

    org.jenkins-ci.main:jenkins-core Maven
  • Medium 5.3
    CVE-2018-1000067

    Server-Side Request Forgery in Jenkins

    An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.

    org.jenkins-ci.main:jenkins-core Maven