org.jenkins-ci.plugins:mypeople (>=0.3, <=0.3.0.3), org.jenkins-ci.plugins:skype-notifier (>=1.0, <=1.1.0) +2 more potentially affected by CVE-2022-28135 via org.jvnet.hudson.plugins:instant-messaging (>=1.0, <=1.38)

org.jvnet.hudson.plugins:instant-messaging MAVEN version =1.0, =0.3, =1.0, =2.0, =unspecified, =1.41 Source cves: CVE-2022-28135 Source advisory: MEND:CVE-2022-28135...

CVE-2022-28139: Missing Authorization

A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

PT-2025-8026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential crash issue in the Linux kernel has been resolved. The vmbus driver, which can be built as a module, relies on the panic notifier infrastructure to perform certain operations...

PT-2022-18837 · Jenkins · Jenkins Rocketchat Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RocketChat Notifier Plugin versions 1.4.10 and earlier Description: A missing permission check in the Jenkins RocketChat Notifier Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using...

PT-2022-18836 · Jenkins · Jenkins Rocketchat Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RocketChat Notifier Plugin versions 1.4.10 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials. This issue arises becau...

CVE-2022-28138: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...

org.jenkins-ci.plugins:build-pipeline-plugin (>=1.3.4.1, <=1.5.8), org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) +8 more potentially affected by CVE-2022-27195 via org.jenkins-ci.plugins:parameterized-trigger (>=2.12, <=2.33)

org.jenkins-ci.plugins:parameterized-trigger MAVEN version =2.12, =1.3.4.1, =1.3.1, =1.0, =1.9, =1.02, =1.0, =0.8.0, =0.16, =1.1, =0.6.6, =1.1.1 Source cves: CVE-2022-27195 Source advisory: GHSA-5MPF-HW8F-86W9...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), org.jenkins-ci.main:jenkins-test-harness (1.625.2) +6 more potentially affected by CVE-2021-43859 +1 more via org.jenkins-ci.main:jenkins-core (1.625.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0.1, =1.0.2 Source cves:...

com.blazemeter.plugins:blazemeterjenkinsplugin (>=2.0, <=2.6), jenkins.plugins.elanceodesk:workplace-notifier (>=1.14, <=1.16) +7 more potentially affected by CVE-2021-43859 +1 more via org.jenkins-ci.main:jenkins-core (1.576)

org.jenkins-ci.main:jenkins-core MAVEN version 1.576 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =2.0, =1.14, =1.14, =1.5, =1.6 Source cves:...

PT-2024-10521

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to errors in reading beyond the allocated buffer memory in the ice component of the Linux kernel. This can cause a denial of service. The problem occurs because the...

PT-2025-7950

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the KVM Kernel-based Virtual Machine component. The issue arises when unmapping a GFN Guest Frame Number range in...

NVIDIA Shield TV Memory Management Driver Heap Buffer Overflow DoS

The vulnerability of the NVGPUIOCTLCHANNELSETERRORNOTIFIER implementation in the NVMAP graphics processor driver of the NVIDIA Shield TV Experience software device involves access control deficiencies. Exploiting this vulnerability could allow an attacker to trigger a service failure or execute...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), org.jenkins-ci.main:jenkins-test-harness (1.625.2) +6 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.625.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0.1, =1.0.2 Source cves:...

com.tikalk.hudson.plugins:notification (>=1.6, <=1.9), jenkins.plugins.elanceodesk:workplace-notifier (1.13) +6 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.566)

org.jenkins-ci.main:jenkins-core MAVEN version 1.566 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification =1.6, =1.11, =1.2, =1.4.1 - org.jenkins-ci.plugins:plugi...

CVE-2021-34401

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPUIOCTLCHANNELSETERRORNOTIFIER, where improper access control may lead to code execution, compromised integrity, or denial of service...

CVE-2021-34401

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPUIOCTLCHANNELSETERRORNOTIFIER, where improper access control may lead to code execution, compromised integrity, or denial of service...

CVE-2022-0215: Cross-Site Request Forgery (CSRF)

The Login/Signup Popup, Waitlist Woocommerce Back in stock notifier , and Side Cart Woocommerce Ajax WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the savesettings function found in the /includes/xoo-framework/admin/class-xoo-admin-settings.php file which makes it...

PT-2022-13041

Name of the Vulnerable Software and Affected Versions Login/Signup Popup versions = 2.2 Waitlist Woocommerce Back in stock notifier versions = 2.5.1 Side Cart Woocommerce Ajax versions = 2.0 Description The issue affects WordPress plugins, allowing attackers to update arbitrary options on a site,...

PT-2025-8061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the drm/amdkfd component. The problem occurs when the svm range restore work is flushed during process exit,...

PT-2024-11297

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a leak in kvm arch vcpu ioctl vcpu load due to vcpu put not being called if the user copy fails. This can result in preempt notifier corruption and crashes, among...