SUSE CVE-2013-2912

Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepperinprocessrouter.cc in the Pepper Plug-in API PPAPI in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

CVE-2022-41255

Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

USN-5182-1 roundcube vulnerabilities

It was discovered that Roundcube Webmail allowed JavaScript code to be present in the CDATA of an HTML message. A remote attacker could possibly use this issue to execute a cross-site scripting XSS attack. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu 20.04 ESM...

com.gerritforge:events-broker (>=3.0.0, <=3.0.5), com.gerritforge:global-refdb (>=0.1.1, <=3.0.2) potentially affected by CVE-2020-8920 via com.google.gerrit:gerrit-plugin-api (3.0.2)

com.google.gerrit:gerrit-plugin-api MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.gerrit:gerrit-plugin-api and may be impacted: - com.gerritforge:events-broker =3.0.0, =0.1.1, =3.0.2 Source cves: CVE-2020-8920 Source...

com.gerritforge:global-refdb (3.2.3) potentially affected by CVE-2020-8920 via com.google.gerrit:gerrit-plugin-api (3.2.3)

com.google.gerrit:gerrit-plugin-api MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.gerrit:gerrit-plugin-api and may be impacted: - com.gerritforge:global-refdb 3.2.3 Source cves: CVE-2020-8920 Source advisory:...

com.bluetrainsoftware.gerrit:slack-notifier (1.1) potentially affected by CVE-2020-8920 via com.google.gerrit:gerrit-plugin-api (2.9.1)

com.google.gerrit:gerrit-plugin-api MAVEN version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.gerrit:gerrit-plugin-api and may be impacted: - com.bluetrainsoftware.gerrit:slack-notifier 1.1 Source cves: CVE-2020-8920 Source advisor...

com.gerritforge:events-broker (>=3.0.0, <=3.0.5), com.gerritforge:global-refdb (>=0.1.1, <=3.0.2) potentially affected by CVE-2020-8920 via com.google.gerrit:gerrit-plugin-api (3.0.2)

com.google.gerrit:gerrit-plugin-api MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.gerrit:gerrit-plugin-api and may be impacted: - com.gerritforge:events-broker =3.0.0, =0.1.1, =3.0.2 Source cves: CVE-2020-8920 Source...

com.gerritforge:global-refdb (3.2.3) potentially affected by CVE-2020-8920 via com.google.gerrit:gerrit-plugin-api (3.2.3)

com.google.gerrit:gerrit-plugin-api MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.gerrit:gerrit-plugin-api and may be impacted: - com.gerritforge:global-refdb 3.2.3 Source cves: CVE-2020-8920 Source advisory:...

com.bluetrainsoftware.gerrit:slack-notifier (1.1) potentially affected by CVE-2020-8920 via com.google.gerrit:gerrit-plugin-api (2.9.1)

com.google.gerrit:gerrit-plugin-api MAVEN version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.gerrit:gerrit-plugin-api and may be impacted: - com.bluetrainsoftware.gerrit:slack-notifier 1.1 Source cves: CVE-2020-8920 Source advisor...

com.github.sbaudoin:sonar-ansible-api (2.0.0), com.github.sbaudoin:sonar-ansible-plugin (2.0.0) +19 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.6)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - com.github.sbaudoin:sonar-ansible-api 2.0.0 -...

org.sonarsource.auth.bitbucket:sonar-auth-bitbucket-plugin (1.0), org.sonarsource.auth.github:sonar-auth-github-plugin (1.1.1) +9 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.4)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.auth.bitbucket:sonar-auth-bitbucket-plugin 1.0 -...

org.sonarsource.sonarqube:sonar-ce (6.5-rc2), org.sonarsource.sonarqube:sonar-ce-api (6.5-rc2) +10 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.5-rc2)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.5-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-ce 6.5-rc2 -...

com.devonfw.tools:sonar-devon-plugin (3.0.0), com.devonfw.tools:sonar-devon4j-plugin (3.2.0) +27 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.4)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - com.devonfw.tools:sonar-devon-plugin 3.0.0 -...

org.sonarsource.sonarqube:sonar-ce (6.4-rc1), org.sonarsource.sonarqube:sonar-ce-api (6.4-rc1) +10 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.4-rc1)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.4-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-ce 6.4-rc1 -...

com.github.sbaudoin:sonar-shellcheck-plugin (>=2.3.0, <=2.5.0), org.sonarsource.analyzer-commons:sonar-analyzer-commons (>=1.8.0.295, <=1.10.3.509) +43 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (>=7.0-rc1, <=7.4)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version =7.0-rc1, =2.3.0, =1.8.0.295, =1.10.0.416, =7.4.0.6452, =7.4.0.6452, =7.7.0.7192, =5.6.1.15064, =5.6.1.15064, =5.6.1.15064, =5.6.1.15064, =5.6.1.15064, =5.6.1.15064, =5.6.1.15064, =5.6.1.15064, =5.14.0.18788 and more Source cves:...

org.sonarsource.sonarqube:sonar-batch (5.2-rc2), org.sonarsource.sonarqube:sonar-batch-maven-plugin (5.2-rc2) +4 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.2-rc2)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.2-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-batch 5.2-rc2 -...

org.sonarsource.owasp:sonar-zap-plugin (>=1.1.0, <=1.1.2), org.sonarsource.sonarqube:sonar-application (6.7.5) +11 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.7.5)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.owasp:sonar-zap-plugin =1.1.0, =1.1.2 -...

jp.skypencil.findbugs.slf4j:sonar-findbugs-slf4j-plugin (>=1.3.0, <=1.4.2), jp.skypencil.guava:guava-helper-sonarqube-plugin (>=1.0.2, <=1.0.4) +8 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.6.6)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - jp.skypencil.findbugs.slf4j:sonar-findbugs-slf4j-plugin =1.3.0, =1.0.2,...

org.sonarsource.sonarqube:sonar-ce (5.5-rc1), org.sonarsource.sonarqube:sonar-core (5.5-rc1) +6 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (5.5-rc1)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 5.5-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - org.sonarsource.sonarqube:sonar-ce 5.5-rc1 -...

com.github.spotbugs:sonar-findbugs-plugin (>=3.7.0, <=3.9.4), io.github.sfeir-open-source:sonar-clover-plugin (4.1) +12 more potentially affected by CVE-2018-19413 via org.sonarsource.sonarqube:sonar-plugin-api (6.7.1)

org.sonarsource.sonarqube:sonar-plugin-api MAVEN version 6.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonarsource.sonarqube:sonar-plugin-api and may be impacted: - com.github.spotbugs:sonar-findbugs-plugin =3.7.0, =3.9.4 -...