Archive
1 September 2020
Vulnerabilities first published on this day (UTC), newest first.
192 results · Feed
-
Medium 5.4
Missing permission checks in Jenkins Database Plugin
A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials.
-
High 8.0
XSS vulnerability in Jenkins Build Failure Analyzer Plugin
Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build…
-
High 8.8
CSRF vulnerability in Jenkins Database Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.
-
Medium 5.4
CSRF vulnerability in Jenkins Database Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.
-
High 8.0
Stored XSS vulnerability in Jenkins Git Parameter Plugin
Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
-
Low 3.3
Secret stored in plain text by Jenkins Parameterized Remote Trigger Plugin
Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
-
High 7.5
Open Redirect in Liferay Portal
The redirect module in Liferay Portal before 7.3.3 does not limit the number of URLs resulting in a 404 error that is recorded, which allows remote attackers to perform a denial of service attack by making repeated requests for pages that do not exist.
-
Medium 6.4
SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_peri…
-
Medium 6.4
SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_peri…
-
Medium 6.4
SQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3 pages. The course_peri…
-
High 7.5
Django Incorrect Default Permissions
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's standard umask rather than 0o077.
-
High 7.5
Django Incorrect Default Permissions
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was…
-
Medium 6.5
obs-service-download_files allows downloading from localhost or intranet hosts
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is…
-
High 7.7
Local privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap2
A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3…
-
Critical 9.8
Prototype Pollution
All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.
-
Critical 9.8
Prototype Pollution
All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.
-
Critical 9.8
Prototype Pollution
All versions of package gedi are vulnerable to Prototype Pollution via the set function.
-
Critical 9.8
Prototype Pollution
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.
-
Critical 9.8
Prototype Pollution
All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.
-
Critical 9.8
Prototype Pollution
All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.
-
Critical 9.8
Prototype Pollution
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.
-
Critical 9.8
Prototype Pollution
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.
-
Critical 9.8
Prototype Pollution
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
-
Critical 9.8
Prototype Pollution
All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.
-
Critical 9.8
Prototype Pollution
All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.
-
Critical 9.8
Prototype Pollution
All versions of package confucious are vulnerable to Prototype Pollution via the set function.
-
Critical 9.8
Prototype Pollution
All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
-
Critical 9.8
Prototype Pollution
All versions of package deeps are vulnerable to Prototype Pollution via the set function.
-
Critical 9.8
Prototype Pollution
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.
-
Medium 6.6
Openfind Mail2000 - Broken Access Control
Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Info…
-
Critical 9.6
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.