GO-2026-5746 vulnerabilities

Vulnerabilities for packages: podman, docker-fips, kubedock, trivy, portieris-fips, chainloop-control-plane-fips, rancher-agent, opentelemetry-operator, nerdctl-fips, beats-fips, buildah-fips, envoy-gateway, podman-fips, nerdctl, grafana, trivy-operator-fips, aws-otel-collector, zot, skopeo-fips,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: portieris, opentelemetry-operator, rancher-machine, envoy-gateway, amazon-cloudwatch-agent-operator, nuclei, skopeo, spire-server, ko, buildah, k8sgpt, podman, docker-credential-gcr, rancher-agent, kots, trivy-operator, undock, trivy, osv-scanner, rancher, grafana,...

EUVD-2022-4126

Malicious code in bioql PyPI...

EUVD-2022-2715

Malicious code in bioql PyPI...

Fedora: Security Advisory (FEDORA-2025-c263d3ebd9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2021-43577

Jenkins OWASP Dependency-Check Plugin 5.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2018-12036

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames...

Malicious code in check-dependency-ver-consistency (npm)

--- -= Per source details. Do not edit below this line.=-...

ROS-2-1202

2.1202 Denial of Service in libX11CVE-2021-31535 1. Vulnerability Description: The vulnerability allows a local user to execute a denial of service DoS attack. The vulnerability exists due to insufficient validation of color names in the XLookupColor function. A local user can launch a specially...

Cross-site Scripting (XSS)

Jenkins OWASP Dependency-Check Plugin is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper vulnerability metadata sanitization from Dependency-Check reports. An attacker can inject malicious scripts that may be executed in the context of the user's browser session by...

Jenkins plugins Multiple Vulnerabilities (2024-03-06)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypa...

GHSA-9PP4-MX6X-XH36 Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

Cross site scripting

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin, up to version 5.4.5, is affected by a stored XSS vulnerability caused by not escaping vulnerability metadata from Dependency-Check reports. Affected component: Dependency-Check Plugin for Jenkins. Impact (as stated across sources): an XSS vulnerability that ...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...