Skip to content
OpenAdvisories

Archive

20 September 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-43494 Public exploit

    Jenkins does not exclude sensitive build variables from search

    Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to …

  • Medium 5.3
    CVE-2023-26144 Public exploit

    graphql Uncontrolled Resource Consumption vulnerability

    Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade sys…

  • Medium 4.2
    CVE-2023-31014 Public exploit

    NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application o…