2019

Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticat

A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validat

A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValid

Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenki

Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be

Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master whe

Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation met

A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection for

A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form vali

A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doVa

Jenkins Upload to pgyer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they c

Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where

A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnectio

A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl

A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection for

A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTe

A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method

A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form va

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doC

A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicati

A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection

A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#

A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnectio

A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doT

A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows

A cross-site request forgery vulnerability in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginChe

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain s

Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asse

Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon A

The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 a

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dash

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted exces

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10

A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This is

A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, i

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue af

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.

A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1

A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.

This issue was addressed by removing additional entitlements. This issue affected versions prior to macOS Mojave 10.14.1

A validation issue was addressed with improved logic. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14

An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue aff

Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This iss

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10