Archive
27 July 2022
Vulnerabilities first published on this day (UTC), newest first.
115 results · Feed
-
High 8.8
Arbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin
An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfb_f and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified con…
-
Medium 4.3
Jenkins rpmsign-plugin does not perform a permission check in a method implementing form validation
Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specif…
-
Medium 4.3
Jenkins rhnpush-plugin does not perform a permission check in a method implementing form validation
Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specif…
-
Medium 4.3
Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs
A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with Item/Read permission but without Deploy Now/Deploy permission to read deployment logs.
-
Medium 4.3
Jenkins Deployer Framework Plugin vulnerable to Path Traversal
Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenki…
-
Medium 6.5
Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment
Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the applications when configuring a deployment, allowing attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller fi…
-
Medium 4.2
Jenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection tests
A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault with attacker-specified path and keys.
-
Medium 4.3
Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints
A cross-site request forgery (CSRF) vulnerability in Jenkins Job Configuration History Plugin 1155.v28a_46a_cc06a_5 and earlier allows attackers to delete entries from job, agent, and system configuration history, or restore older versions of job, agent, and …
-
Medium 4.3
External Monitor Job Type Plugin does not require POST requests for an HTTP endpoint
A cross-site request forgery (CSRF) vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job.
-
Low 3.1
Jenkins GitHub plugin uses weak webhook signature function
Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature.
-
Medium 5.3
Lack of authentication mechanism in Jenkins Git Plugin webhook
The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository.
-
Medium 6.5
Lack of authentication mechanism in Jenkins Git Plugin webhook
A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.
-
Medium 6.5
Lack of authentication mechanism in Jenkins Git Plugin webhook
A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.
-
Medium 4.8
Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.
-
Unscored —
OX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to in…
-
Unscored —
OX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API.
-
Unscored —
OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.
-
High 8.1
Privilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application(Android & iOS)
Due to misconfigured application endpoints, SAP SuccessFactors attachment APIs allow attackers with user privileges to perform activities with admin privileges over the network. These APIs were consumed in the SF Mobile application for Time Off, Time Sheet, E…
-
High 7.2
WordPress Shortcode Addons plugin <= 3.1.2 - Authenticated WordPress Options Change vulnerability
Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress.
-
Unscored —
OX App Suite through 7.10.6 allows XSS by forcing block-wise read.
-
Unscored —
OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).
-
Unscored —
Sims v1.0 was discovered to allow path traversal when downloading attachments.
-
Unscored —
Sims v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /addNotifyServlet. Thi…
-
Unscored —
Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulne…
-
Medium 5.5
WASM3 segmentation fault
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.
-
High 8.2
DLL high jacking in Trellix Agent
A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is bein…
-
Critical 10.0
Skyhigh SWG Authentication bypass vulnerability
An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User …
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Syn…
-
Unscored —
The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message.
-
Medium 5.5
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a…
-
Unscored —
Advanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the com…
-
Unscored —
A cross-site scripting (XSS) vulnerability in /index.php/?p=report of Online Fire Reporting System v1.0 allows attacker…
-
High 8.8
Feehi CMS arbitrary code execution via crafted PHP file
An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.
-
Unscored —
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerabi…
-
High 7.5CVE-2022-36946 Public exploit
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a …