Archive
August 2020
Vulnerabilities first published in this month (UTC), newest first.
1,173 results · Feed
-
Medium 4.3
Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
-
Medium 5.4CVE-2020-2231 Public exploit
Improper Neutralization of Input During Web Page Generation in Jenkins
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission…
-
Low 3.7
Jenkins Email Extension Plugin SMTP password transmitted and displayed in plain text
Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure.
-
High 8.0CVE-2020-2229 Public exploit
Jenkins Cross-Site Scripting vulnerability in help icons
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.
-
High 8.0
Jenkins Cross-site Scripting vulnerability in project naming strategy
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.
-
High 7.3
SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a…
-
Critical 9.0
SAP NetWeaver (Knowledge Management), versions - 7.30, 7.31, 7.40, 7.50, allows the automatic execution of script conte…
-
Medium 4.3
SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization chec…
-
Critical 9.8
vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabb…
KEV Nov 3, 2021 -
Medium 5.4
MantisBT XSS issue on the view_all_bug_page.php
An XSS issue was discovered in MantisBT before 2.24.2. Improper escaping on view_all_bug_page.php allows a remote attacker to inject arbitrary HTML into the page by saving it into a text Custom Field, leading to possible code execution in the browser of any u…
-
Unscored —
Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG d…
-
Unscored —
SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.
-
Unscored —
SugarCRM before 10.1.0 (Q3 2020) allows XSS.
-
Critical 10.0
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Softw…
-
High 8.8
Local arbitrary code execution in splitinstall in Android's Play Core
A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious attacker could create an apk which targets a specific application, and if a victim were to install t…
-
Medium 6.4
Avaya Product System Management Interface Cross-Site Request Forgery Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web ad…
-
High 7.5
django-celery-results Stores Sensitive Information In Cleartext
django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.
-
Unscored —
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, …
-
Unscored —
radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidenti…
-
High —
Cross-Site Scripting in @progress/kendo-angular-editor
Kendo UI for Angular Editor Component (npm package @progress/kendo-angular-editor) before version 1.2.3 is vulnerable to Cross-Site Scripting. When the Editor content contains potentially malicious scripts in element event handlers, they get executed. Adding …
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —
In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to…
-
Unscored —
In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosur…
-
Unscored —
In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. …
-
Unscored —
In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Unscored —
There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647…
-
Unscored —
There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236…
-
Unscored —
There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID…
-
Medium 6.8
TIBCO Silver Fabric XSS vulerability
The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via URLs. The attacker could theoretically social engineer an authenticated user into submitting the URL,…
-
Unscored —
In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to…
-
Unscored —
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. …
-
Unscored —
In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. …
-
Unscored —
In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. Thi…
-
Unscored —
In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lea…
-
Unscored —CVE-2020-0242 Public exploit
In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local es…
-
Unscored —CVE-2020-0241 Public exploit
In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This…
-
Unscored —CVE-2020-0240 Public exploit
In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could le…
-
Unscored —
In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due t…
-
Unscored —
In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race con…