Skip to content
OpenAdvisories

Vendor

Synopsys

8 known vulnerabilities.

Synopsys at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Synopsys Jenkins Coverity Plugin 3 Coverity 2 Black Duck Hub 1 Code Dx 1 Seeker 1
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 4.8
    CVE-2024-0226

    Stored Cross-Site Scripting in Synopsys Seeker

    Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload.

    Synopsys Seeker
  • Critical 9.8
    CVE-2023-2158

    Impersonation through User-Controlled Token

    Code Dx versions prior to 2023.4.2 are vulnerable to user impersonation attack where a malicious actor is able to gain access to another user's account by crafting a custom "Remember Me" token. This is possible due to the use of a hard-coded cipher which was …

    Synopsys Code Dx
  • Medium 6.5
    CVE-2023-1663

    Authenticated Resources Accessible via Forced Browsing

    Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured servlet mapping for the underlying Apache Tomcat server. As a…

    Synopsys Coverity
  • Low 3.5
    CVE-2023-23847

    CSRF vulnerability in Synopsys Jenkins Coverity Plugin

    A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing creden…

    Synopsys Synopsys Jenkins Coverity Plugin org.jenkins-ci.plugins:synopsys-coverity Web / CMS Maven
  • Medium 4.3
    CVE-2023-23848

    CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials

    Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing cr…

    Synopsys Synopsys Jenkins Coverity Plugin org.jenkins-ci.plugins:synopsys-coverity Web / CMS Maven
  • Medium 4.3
    CVE-2023-23850

    Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions

    A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

    Synopsys Synopsys Jenkins Coverity Plugin org.jenkins-ci.plugins:synopsys-coverity Web / CMS Maven
  • High 8.1
    CVE-2023-23849

    Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability…

    Synopsys Coverity
  • Unscored —
    CVE-2022-30278

    A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote att…

    Synopsys Black Duck Hub