Archive
July 2023
Vulnerabilities first published in this month (UTC), newest first.
797 results · Clear filters · Feed
-
Medium 5.5
[FG-VD-23-007] Adobe InDesign 2023 Out-of-Bound Read Vulnerability V Notification
Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex…
-
Medium 4.3
Jenkins ElasticBox CI Plugin missing permission check
A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials …
-
Medium 5.4
Jenkins Benchmark Evaluator Plugin missing permission check
A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and to check for the existence of directories, `.csv`, and `.ycsb` files on the Jenkins co…
-
Medium 6.5
Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read
Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.
-
Medium 6.5
Jenkins Sumologic Publisher Plugin missing permission check
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
-
Medium 6.5
Jenkins Test Results Aggregator Plugin missing permission check
A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
-
Medium 6.5
Jenkins Test Results Aggregator Plugin vulnerable to Cross Site Request Forgery
A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
-
Medium 4.3
Jenkins Rebuilder Plugin vulnerable to Cross Site Request Forgery
A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows attackers to rebuild a previous build.
-
Medium 6.5
Jenkins mabl Plugin missing permission check
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored i…
-
Medium 6.5
Jenkins mabl Plugin vulnerable to cross-site request forgery
A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenk…
-
Medium 6.5
Jenkins mabl Plugin vulnerable to exposure of system-scooped credentials
Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
-
Medium 5.4
Jenkins Orka by MacStadium Plugin missing permission check
A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credenti…
-
Medium 4.3
Jenkins mabl Plugin missing permission check
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
-
Medium 4.8
Jenkins Oracle Cloud Infrastructure Compute Plugin missing SSH host key validation
Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle attacks.
-
Medium 4.3
Jenkins OpenShift Login Plugin vulnerable to Open Redirect
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
-
Medium 4.3
Jenkins SAML Single Sign On(SSO) Plugin missing permission check
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.
-
Medium 6.5
Jenkins Datadog Plugin does not perform a permission check in an HTTP endpoint.
A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored…
-
Medium 5.9
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs the connection test to Active directory unencrypted, allowing attackers able to capture network traffic between the Jenkins controller and Ac…
-
Medium 6.5
Jenkins External Monitor Job Type Plugin XML external entity vulnerability
Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
Medium 6.5
Segmentation fault in fax3encode in libtiff/tif_fax3.c
A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
-
Medium 6.0
A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user…
-
Medium 4.9
A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacke…
-
Medium 6.5
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite …
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible
-
Medium 6.5
Apache Airflow: Scheduler remote DoS
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is…
-
Medium 6.5
Apache Airflow: ReDoS via dags function
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected
-
Medium 6.5
Apache Airflow: Security vulnerability on AirFlow Connections
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection r…
-
Medium 6.5
Apache Airflow path traversal by authenticated user
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requ…
-
Medium 6.5
Apache Airflow: Access to DAGs without relevant permission
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected
-
Medium 4.4
In iwnpi server, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial…
-
Medium 6.6
Kernel: netlink socket crash (null pointer deref) in netlink_dump function
A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service …
-
Medium 4.3
Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass
The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptn_export_tables() function. This makes it possible for unauthenticated attacke…
-
Medium 4.3
Absolute Reviews <= 1.0.8 - Cross-Site Request Forgery Bypass
The Absolute Reviews plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.8. This is due to missing or incorrect nonce validation on the metabox_review_save() function. This makes it possible for unauthenticat…
-
Medium 4.3
Vuukle Comments, Reactions, Share Bar, Revenue <= 3.4.31 - Cross-Site Request Forgery Bypass
The Vuukle Comments, Reactions, Share Bar, Revenue plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.31. This is due to missing or incorrect nonce validation in the /admin/partials/free-comments-for-wordpre…