Archive
30 June 2021
Vulnerabilities first published on this day (UTC), newest first.
14 results · Clear filters · Feed
-
Medium 4.3
Missing permission check in Jenkins requests-plugin Plugin allows sending emails
Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to send test emails to an attacker-specified email address.
-
Medium 6.5
CSRF vulnerabilities in Jenkins requests-plugin Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers to create requests and/or have administrators apply pending requests.
-
Medium 4.3
Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requests
A missing permission check in Jenkins requests-plugin Plugin 2.2.6 and earlier allows attackers with Overall/Read permission to view the list of pending requests.
-
Medium 6.1
Open redirect vulnerability in Jenkins CAS Plugin
Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
-
Medium 4.3CVE-2021-21672 EPSS 43%
XXE vulnerability in Jenkins Selenium HTML report Plugin
Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
Medium 4.3
Improper permission checks allow canceling queue items and aborting builds in Jenkins
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.
-
Medium 4.3
IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configur…
-
Medium 6.1
Craft CMS Cross-site Scripting Vulnerability
An issue was discovered in Craft CMS before 3.6.0. In some circumstances, a potential XSS vulnerability existed in connection with front-end forms that accepted user uploads.
-
Medium 6.3
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length c…
-
Medium 6.3
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which …
-
Medium 6.4
Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or es…
-
Medium 6.7
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on …
-
Medium 6.7
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of…
-
Medium 6.1
Plone has stored XSS in folder contents
In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.