2019

Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they

Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins

Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master whe

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins

Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenk

Jenkins jenkins-cloudformation-plugin Plugin stores credentials unencrypted in job config.xml files on the Jenkins maste

Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master

A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows

A cross-site request forgery vulnerability in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginChe

Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master w

Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where the

Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where

Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where the

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be

Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Je

Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can

The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain s

XXE issue in Airsonic before 10.1.2 during parse.

Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code

htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer ov

Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retr

kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent opera

Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asse

TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Ele

Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon

Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon A

Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer E

Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing c

The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 a

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environm

Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dash

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.

AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and ea

Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a spe

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted exces

Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HT

A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected vers

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1,

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iO

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojav

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1

A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS High

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojav

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojav

A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1

This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.1.1.

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This is