GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
210 advisories
System command execution vulnerability in Selection tasks Jenkins Plugin
High
CVE-2020-2276
was published
for
org.jvnet.hudson.plugins:selection-tasks-plugin
(Maven)
May 24, 2022
Stored XSS vulnerability in Description Column Plugin
High
CVE-2020-2266
was published
for
org.jenkins-ci.plugins:description-column-plugin
(Maven)
May 24, 2022
OS command execution vulnerability in Perfecto Plugin
High
CVE-2020-2261
was published
for
io.jenkins.plugins:perfecto
(Maven)
May 24, 2022
Stored XSS vulnerability in Custom Job Icon Plugin
High
CVE-2020-2264
was published
for
org.jenkins-ci.plugins:custom-job-icon
(Maven)
May 24, 2022
Stored XSS vulnerability in ClearCase Release Plugin
High
CVE-2020-2270
was published
for
org.jvnet.hudson.plugins:clearcase-release
(Maven)
May 24, 2022
Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin
High
CVE-2020-2265
was published
for
org.jenkins-ci.plugins:covcomplplot
(Maven)
May 24, 2022
Stored XSS vulnerability in chosen-views-tabbar Plugin
High
CVE-2020-2269
was published
for
org.jenkins-ci.plugins:chosen-views-tabbar
(Maven)
May 24, 2022
Stored XSS vulnerability in Locked Files Report Plugin
High
CVE-2020-2271
was published
for
org.jvnet.hudson.plugins:locked-files-report
(Maven)
May 24, 2022
Stored XSS vulnerability in Radiator View Plugin
High
CVE-2020-2263
was published
for
org.jenkins-ci.plugins:radiatorviewplugin
(Maven)
May 24, 2022
Stored XSS vulnerability in android-lint Plugin
High
CVE-2020-2262
was published
for
org.jvnet.hudson.plugins:android-lint
(Maven)
May 24, 2022
Stored XSS vulnerability in computer-queue-plugin Plugin
High
CVE-2020-2259
was published
for
jenkins.ci.plugins.computerqueue:computer-queue-plugin
(Maven)
May 24, 2022
Stored XSS vulnerability in Validating String Parameter Plugin
High
CVE-2020-2257
was published
for
org.jenkins-ci.plugins:validating-string-parameter
(Maven)
May 24, 2022
Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
High
CVE-2020-2256
was published
for
org.jenkins-ci.plugins:pipeline-maven
(Maven)
May 24, 2022
Reflected XSS vulnerability in Jenkins JSGames Plugin
High
CVE-2020-2248
was published
for
org.jenkins-ci.plugins:jsgames
(Maven)
May 24, 2022
XXE vulnerability in Jenkins Klocwork Analysis Plugin
High
CVE-2020-2247
was published
for
org.jenkins-ci.plugins:klocwork
(Maven)
May 24, 2022
Stored XSS vulnerability in Jenkins Cadence vManager Plugin
High
CVE-2020-2243
was published
for
org.jenkins-ci.plugins:vmanager-plugin
(Maven)
May 24, 2022
XSS vulnerability in Jenkins Build Failure Analyzer Plugin
High
CVE-2020-2244
was published
for
com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
(Maven)
May 24, 2022
Stored XSS vulnerability in Jenkins Valgrind Plugin
High
CVE-2020-2246
was published
for
org.jenkins-ci.plugins:valgrind
(Maven)
May 24, 2022
XXE vulnerability in Jenkins Valgrind Plugin
High
CVE-2020-2245
was published
for
org.jenkins-ci.plugins:valgrind
(Maven)
May 24, 2022
CSRF vulnerability in Jenkins Database Plugin
High
CVE-2020-2240
was published
for
org.jenkins-ci.plugins:database
(Maven)
May 24, 2022
Stored XSS vulnerability in Jenkins Git Parameter Plugin
High
CVE-2020-2238
was published
for
org.jenkins-ci.tools:git-parameter
(Maven)
May 24, 2022
CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
High
CVE-2020-2235
was published
for
org.jenkins-ci.plugins:pipeline-maven
(Maven)
May 24, 2022
Jenkins Cross-Site Scripting vulnerability in help icons
High
CVE-2020-2229
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 24, 2022
Jenkins Cross-site Scripting vulnerability in project naming strategy
High
CVE-2020-2230
was published
for
org.jenkins-ci.main:jenkins-core
(Maven)
May 24, 2022
Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
High
CVE-2020-2234
was published
for
org.jenkins-ci.plugins:pipeline-maven
(Maven)
May 24, 2022
ProTip!
Advisories are also available from the
GraphQL API