2019

Jenkins Git Changelog Plugin 2.17 and earlier stored credentials unencrypted in job config.xml files on the Jenkins mast

Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global configuration

Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on t

Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they c

Jenkins Google Calendar Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they c

The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php.

In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Laye

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-download

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.

The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?a

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?

The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=mult

The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=

The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-

The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page

The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page

The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/opt

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration paramet

The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type

The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynw

The monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=monetize-zones-ne

The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify

The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_pl

The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/optio

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id

IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit

phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote A

IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2

Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/for

A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and

The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user

WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even whe

A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affe

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible information disclosure due to uninitialized data. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos

In libxaac, there is a possible out of bounds read due to a missing bounds check. This could lead to information disclos