org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.10-beta-1, <=2.12), org.jenkins-ci.plugins:backlog (>=2.0, <=2.6) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (2.7)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =2.10-beta-1, =2.0,...

SUSE CVE-2010-4251

The socket implementation in net/core/sock.c in the Linux kernel before 2.6.34 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service memory consumption by sending a large amount of network traffic, as demonstrated by netperf UDP tests...

SUSE CVE-2010-4805

The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the skaddbacklog function and the skrmemalloc...

SUSE CVE-2014-4667

The sctpassociationfree function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service socket outage via a crafted SCTP packet...

PT-2025-40201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the crypto/xts module where it incorrectly handles EBUSY errors. The module only processes the EINPROGRESS return value, leading to a use-after-free...

PT-2025-38352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the seqiv function does not correctly handle the EBUSY return value when the caller specifies MAY BACKLOG. This can lead to a use-after-free...

PT-2022-34883 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: A signed-integer-overflow bug was found in the tcp add backlog function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-35426 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.153 Description: A signed-integer-overflow bug was found in the tcp add backlog function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-35200 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: A signed-integer-overflow bug was found in the tcp add backlog function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.9 and...

PT-2025-53983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed-integer-overflow bug exists in the tcp add backlog function within the TCP implementation of the Linux kernel. The sk rcvbuf and sk sndbuf variables within the struct sock are o...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +7 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.19)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +7 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (2.19)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +7 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (2.19)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

com.marvelution.jira.plugins:hudson-apiv2-plugin (4.0.0), org.jvnet.hudson.main:ui-samples-plugin (1.391) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.391)

org.jvnet.hudson.main:hudson-core MAVEN version 1.391 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - com.marvelution.jira.plugins:hudson-apiv2-plugin 4.0.0 -...

Credentials transmitted in plain text by Backlog Plugin

Backlog Plugin stores credentials in job config.xml files as part of its configuration. While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form by Backlog Plugin 2.4 and earlier. These credentials could be viewed by users with...

GHSA-P68C-XG89-2G5R Credentials transmitted in plain text by Backlog Plugin

Backlog Plugin stores credentials in job config.xml files as part of its configuration. While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form by Backlog Plugin 2.4 and earlier. These credentials could be viewed by users with...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +7 more potentially affected by CVE-2022-30945 via org.jenkins-ci.plugins.workflow:workflow-cps (2.19)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b25), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b25) +7 more potentially affected by CVE-2022-25175 via org.jenkins-ci.plugins.workflow:workflow-multibranch (2.12)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version 2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-multibranch and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22,...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +7 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (2.19)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

CVE-2021-41801

The ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is blocked after submitting a replace job, the job is still run, even if it may be run at a later time due to the job queue backlog...