GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
335 advisories
Missing SSH host key validation in Mac Plugin
Moderate
CVE-2020-2146
was published
for
fr.edf.jenkins.plugins:mac
(Maven)
May 24, 2022
Jenkins Subversion Release Manager Plugin vulnerable to cross-site scripting (XSS)
Moderate
CVE-2020-2152
was published
for
org.jvnet.hudson.plugins:svn-release-mgr
(Maven)
May 24, 2022
CSRF vulnerability in Jenkins P4 Plugin
Moderate
CVE-2020-2141
was published
for
org.jenkins-ci.plugins:p4
(Maven)
May 24, 2022
Missing permission checks in Jenkins P4 Plugin
Moderate
CVE-2020-2142
was published
for
org.jenkins-ci.plugins:p4
(Maven)
May 24, 2022
CSRF vulnerability in Mac Plugin
Moderate
CVE-2020-2147
was published
for
fr.edf.jenkins.plugins:mac
(Maven)
May 24, 2022
Arbitrary file write vulnerability in Jenkins Cobertura Plugin
Moderate
CVE-2020-2139
was published
for
org.jenkins-ci.plugins:cobertura
(Maven)
May 24, 2022
XSS vulnerability in Jenkins Audit Trail Plugin
Moderate
CVE-2020-2140
was published
for
org.jenkins-ci.plugins:audit-trail
(Maven)
May 24, 2022
Stored XSS vulnerability in Jenkins Timestamper Plugin
Moderate
CVE-2020-2137
was published
for
org.jenkins-ci.plugins:timestamper
(Maven)
May 24, 2022
Passwords stored in plain text by Harvest SCM Plugin
Moderate
CVE-2020-2130
was published
for
org.jenkins-ci.plugins:harvest
(Maven)
May 24, 2022
Passwords stored in plain text by Harvest SCM Plugin
Moderate
CVE-2020-2131
was published
for
org.jenkins-ci.plugins:harvest
(Maven)
May 24, 2022
Password stored in plain text by Applatix Plugin
Moderate
CVE-2020-2133
was published
for
com.applatix.jenkins:applatix
(Maven)
May 24, 2022
Password stored in plain text by Parasoft Environment Manager Plugin
Moderate
CVE-2020-2132
was published
for
com.parasoft:environment-manager
(Maven)
May 24, 2022
Stored XSS vulnerability in Jenkins brakeman Plugin
Moderate
CVE-2020-2122
was published
for
org.jenkins-ci.plugins:brakeman
(Maven)
May 24, 2022
Password stored in plain text by Dynamic Extended Choice Parameter Plugin
Moderate
CVE-2020-2124
was published
for
com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter
(Maven)
May 24, 2022
Password stored in plain text by ECX Copy Data Management Plugin
Moderate
CVE-2020-2128
was published
for
com.catalogic.ecxjenkins:catalogic-ecx
(Maven)
May 24, 2022
Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)
Moderate
CVE-2020-2113
was published
for
org.jenkins-ci.tools:git-parameter
(Maven)
May 24, 2022
Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
Moderate
CVE-2020-2112
was published
for
org.jenkins-ci.tools:git-parameter
(Maven)
May 24, 2022
Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin
Moderate
CVE-2020-2118
was published
for
org.jenkins-ci.plugins:pipeline-build-step
(Maven)
May 24, 2022
Stored XSS vulnerability in Code Coverage API Plugin
Moderate
CVE-2020-2106
was published
for
io.jenkins.plugins:code-coverage-api
(Maven)
May 24, 2022
Fortify Plugin stored credentials in plain text
Moderate
CVE-2020-2107
was published
for
org.jenkins-ci.plugins:fortify
(Maven)
May 24, 2022
Non-constant time HMAC comparison
Moderate
CVE-2020-2102
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 24, 2022
Jenkins vulnerable to UDP amplification reflection attack
Moderate
CVE-2020-2100
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 24, 2022
Non-constant time comparison of inbound TCP agent connection secret
Moderate
CVE-2020-2101
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 24, 2022
Memory usage graphs accessible to anyone with Overall/Read
Moderate
CVE-2020-2104
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 24, 2022
Jenkins Diagnostic page exposed session cookies
Moderate
CVE-2020-2103
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API