Jenkins Plugin NeuVector Vulnerability Scanner Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Important: Red Hat Enhancement Advisory: nginx:1.22 bug fix and enhancement update

An update for the nginx:1.22 module is now available for Red Hat Enterprise Linux 9. For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section...

GHSA-MQ26-G339-26XF vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool...

CVE-2023-5752 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool...

Moderate: Red Hat Security Advisory: nginx:1.22 security update

An update for the nginx:1.22 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 9 : nginx:1.22 (RHSA-2023:6120)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6120 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: py3-pipenv, kubeflow-katib, jwt-tool, py3-tensorflow-serving-api, request-1276, py3.13-scanner-test-libraries, k8s-sidecar, kubeflow-volumes-web-app, nvidia-nsight-compute-13.1, py3-cassandra-medusa, nvidia-nsight-compute-13.2, kubeflow-jupyter-web-app, az...

CVE-2023-45803 vulnerabilities

Vulnerabilities for packages: py3-pipenv, kubeflow-katib, jwt-tool, py3-tensorflow-serving-api, request-1276, py3.13-scanner-test-libraries, k8s-sidecar, kubeflow-volumes-web-app, nvidia-nsight-compute-13.1, py3-cassandra-medusa, nvidia-nsight-compute-13.2, kubeflow-jupyter-web-app, az...

Oracle Linux 8 : nginx:1.22 (ELSA-2023-5713)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5713 advisory. 1:1.22.1-1.0.1.1 - Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: dive, kube-state-metrics, kubeflow-katib, prometheus-blackbox-exporter, kubernetes-dashboard-metrics-scraper, prometheus-pushgateway, prometheus-mysqld-exporter, kube-logging-operator, frp, slsa-verifier, nodetaint, bank-vaults-fips, pulumi-language-yaml, hey,...

GHSA-CGWF-W82Q-5JRR Apache Commons Compress denial of service vulnerability

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

Apache Commons Compress 1.22 < 1.24.0 DoS Vulnerability

The Apache Commons Compress library is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-39156

A cross-site request forgery CSRF vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags...

PT-2023-26813 · Jenkins · Jenkins Bazaar Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Bazaar Plugin versions 1.22 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to delete previously created Bazaar SCM tags. This issue arises because the plugin does not require POST requests fo...

GHSA-J8R2-6X86-Q33Q vulnerabilities

Vulnerabilities for packages: k8s-sidecar...

WordPress reCAPTCHA for all Plugin <= 1.22 is vulnerable to Broken Access Control

Software reCAPTCHA for all Type Plugin Vulnerable versions = 1.22 Fixed in 1.23 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32599 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 97d938ca1868 Credits Jonas Höbenreich Required...

SR-7100VN vulnerable to privilege escalation

Overview SR-7100VN provided by ICOM INCORPORATED contains a privilege escalation vulnerability CWE-268. HAMANO Kiyoto of SOUM Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A user with an...

CVE-2023-1153

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Pacsrapor: before 1.22...

CVE-2023-1154

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pacsrapor allows Reflected XSS.This issue affects Pacsrapor: before 1.22...

CVE-2023-1154 XSS in Pacsrapor

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pacsrapor allows Reflected XSS. This issue affects Pacsrapor: before 1.22...