2020

Jenkins Applatix Plugin 1.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master wher

Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on th

Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master

Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenki

Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenk

Jenkins ECX Copy Data Management Plugin 1.9 and earlier stores a password unencrypted in job config.xml files on the Jen

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configura

Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins mast

Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files

Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resu

Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins c

A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allow

A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier allows attackers with Overall

Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored

Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a store

Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field

The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before No

Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung

Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities

The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are af

The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulner

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulne

The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a den

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attack

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsCon

An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force ser

An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific mal

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, a

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objec

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'W

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Informati

An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests,

An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly

A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security

An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memor

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of U

A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correc

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulner

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper

An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to proper