PT-2022-18858 · Jenkins · Jenkins Tests Selector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Tests Selector Plugin versions 1.3.3 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the Properties File Path option for Choosing Tests parameters is not properly...

Jenkins Tests Selector Plugin Cross-Site Scripting Vulnerability

Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A cross-site scripting vulnerability exists in Jenkins Tests Selector Plugin 1.3.3 and earlier versions, which stems from an unescaped...

Jenkins Tests Selector Plugin has a vulnerability related to information leakage

Jenkins and Jenkins Plugin are both open source products from Jenkins.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Tests Selector Plugin 1.3.3 a...

CVE-2022-28159: Improper Neutralization of Input During Web Page Generation

Jenkins Tests Selector Plugin 1.3.3 and earlier does not escape the Properties File Path option for Choosing Tests parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-28160: Exposure of Resource to Wrong Sphere

Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller...

PT-2022-16875 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions 2.8.2 and prior in the stable branch Discourse versions 2.9.0.beta3 and prior in the beta branch Discourse versions 2.9.0.beta3 and prior in the tests-passed branch Description: Discourse is an open source discussion...

Discourse Information Leakage Vulnerability

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse is vulnerable to an information disclosure vulnerability that originates in the "stable" branch of version 2.8.2 and earlier, the "beta" branch of version 2.9.0.bet...

Security update for bitcoin (moderate)

openSUSE Security Update: Security update for bitcoin Announcement ID: openSUSE-SU-2022:0072-1 Rating: moderate References: Cross-References: CVE-2021-3195 CVSS scores: CVE-2021-3195 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP3 An update...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24948 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24948 Source advisory: OSV:GHSA-9953-FMRW-V4VM...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.1) +5 more potentially affected by CVE-2022-24947 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.1 Source cves: CVE-2022-24947 Source advisory: OSV:GHSA-4284-X26R-4HHC...

MariaDB -- Multiple vulnerabilities

MariaDB reports: MariaDB reports 5 vulnerabilities in supported versions resulting from fuzzing tests...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.keycloak:keycloak-account-freemarker (1.0-alpha-4), org.keycloak:keycloak-login-freemarker (1.0-alpha-4) +1 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (1.0-alpha-4)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-4 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150521), org.keycloak:keycloak-login-freemarker (1.0-beta-1-20150521) +1 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (1.0-beta-1-20150521)

org.keycloak:keycloak-services MAVEN version 1.0-beta-1-20150521 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-1-20150521 -...

org.keycloak:keycloak-account-freemarker (1.0-alpha-3), org.keycloak:keycloak-login-freemarker (1.0-alpha-3) +1 more potentially affected by CVE-2020-10776 via org.keycloak:keycloak-services (1.0-alpha-3)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-3 - org.keycloak:keycloak-login-freemarker...

pathologytestsexplained.org.au Cross Site Scripting vulnerability OBB-2356457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2021-0042)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0327)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

com.google.code.maven-play-plugin.com.sienaproject.siena:siena (1.0.0-b6-20111107), ma.glasnost.orika:orika-tests (>=1.4.0, <=1.5.2) +5 more potentially affected by CVE-2022-23221 via com.h2database:h2 (1.3.154)

com.h2database:h2 MAVEN version 1.3.154 is affected by a known vulnerability. The following packages have a transitive dependency on com.h2database:h2 and may be impacted: - com.google.code.maven-play-plugin.com.sienaproject.siena:siena 1.0.0-b6-20111107 - ma.glasnost.orika:orika-tests =1.4.0,...

org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150523), org.keycloak:keycloak-login-freemarker (1.0-beta-1-20150523) +1 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (1.0-beta-1-20150523)

org.keycloak:keycloak-services MAVEN version 1.0-beta-1-20150523 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-1-20150523 -...