CVEs published April 4, 2019
99 CVEs were published on April 4, 2019: 1 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 99
- Critical
- 1
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 95
- Now in CISA KEV
- 0
- Fix available
- 30
Most affected products
- Jenkins project Jenkins Audit to Database Plugin · org.jenk…
- 3
- Jenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- 3
- Jenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- 3
- Jenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- 3
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 3
- Cisco Small Business RV Series Router Firmware
- 2
- Jenkins project Jenkins Chef Sinatra Plugin · org.jenkins-c…
- 2
- Jenkins project Jenkins Gearman Plugin · org.jenkins-ci.plu…
- 2
- Jenkins project Jenkins jenkins-reviewbot Plugin · org.jenk…
- 2
- Jenkins project Jenkins Nomad Plugin · org.jenkins-ci.plugi…
- 2
Critical 1
Medium, low and unrated 98
- CVE-2018-19282Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common…
- CVE-2018-18068The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write…
- CVE-2019-6553A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior.Rockwell Automation RSLinx Classic
- CVE-2019-10867An issue was discovered in Pimcore before 5.7.1.pimcore/pimcore
- CVE-2019-10863A command injection vulnerability exists in TeemIp versions before 2.4.0.
- CVE-2018-20229GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
- CVE-2019-10856In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc.notebook
- CVE-2018-20222XXE issue in Airsonic before 10.1.2 during parse.
- CVE-2019-10287Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where…Jenkins project Jenkins youtrack-plugin Plugin · org.jenkin…
- CVE-2019-10288Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Jabber Server Plugin · de.e-nexus:j…
- CVE-2019-10289A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the…Jenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- CVE-2019-10290A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form…Jenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- CVE-2019-10291Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older stored credentials unencrypted in its global configuration file on the Jenkins master…Jenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- CVE-2019-10292A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows…Jenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- CVE-2019-10293A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with…Jenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- CVE-2019-10294Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with…Jenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- CVE-2019-10295Jenkins crittercism-dsym Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by…Jenkins project Jenkins crittercism-dsym Plugin · org.jenki…
- CVE-2019-10296Jenkins Serena SRA Deploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Serena SRA Deploy Plugin · com.urba…
- CVE-2019-10297Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by…Jenkins project Jenkins Sametime Plugin · org.jenkins-ci.pl…
- CVE-2019-10298Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by…Jenkins project Jenkins Koji Plugin · org.jenkins-ci.plugin…
- CVE-2019-10299Jenkins CloudCoreo DeployTime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can…Jenkins project Jenkins CloudCoreo DeployTime Plugin · com.…
- CVE-2019-1003083A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers…Jenkins project Jenkins Gearman Plugin · org.jenkins-ci.plu…
- CVE-2019-1003084A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form…Jenkins project Jenkins Zephyr Enterprise Test Management P…
- CVE-2019-1003085A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation…Jenkins project Jenkins Zephyr Enterprise Test Management P…
- CVE-2019-1003086A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection…Jenkins project Jenkins Chef Sinatra Plugin · org.jenkins-c…
Show all 98 entriesShow fewer entries
- CVE-2019-1003087A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation…Jenkins project Jenkins Chef Sinatra Plugin · org.jenkins-c…
- CVE-2019-1003088Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed…Jenkins project Jenkins Fabric Beta Publisher Plugin · egor…
- CVE-2019-1003089Jenkins Upload to pgyer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by…Jenkins project Jenkins Upload to pgyer Plugin · ren.hellow…
- CVE-2019-1003090A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form…Jenkins project Jenkins SOASTA CloudTest Plugin · com.soast…
- CVE-2019-1003091A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method…Jenkins project Jenkins SOASTA CloudTest Plugin · com.soast…
- CVE-2019-1003092A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation…Jenkins project Jenkins Nomad Plugin · org.jenkins-ci.plugi…
- CVE-2019-1003093A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows…Jenkins project Jenkins Nomad Plugin · org.jenkins-ci.plugi…
- CVE-2019-1003094Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by…Jenkins project Jenkins Open STF Plugin · org.jenkins-ci.pl…
- CVE-2019-1003095Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Perfecto Mobile Plugin · org.jenkin…
- CVE-2019-1003096Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users…Jenkins project Jenkins TestFairy Plugin · org.jenkins-ci.p…
- CVE-2019-1003097Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where…Jenkins project Jenkins Crowd Integration Plugin · com.ds.t…
- CVE-2019-1003098A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form…Jenkins project Jenkins openid Plugin · org.jenkins-ci.plug…
- CVE-2019-1003099A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows…Jenkins project Jenkins openid Plugin · org.jenkins-ci.plug…
- CVE-2019-10277Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users…Jenkins project Jenkins StarTeam Plugin · hudson.plugins:st…
- CVE-2019-10278A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form…Jenkins project Jenkins jenkins-reviewbot Plugin · org.jenk…
- CVE-2019-10279A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows…Jenkins project Jenkins jenkins-reviewbot Plugin · org.jenk…
- CVE-2019-10280Jenkins Assembla Auth Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they…Jenkins project Jenkins Assembla Auth Plugin · org.jenkins-…
- CVE-2019-10281Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins…Jenkins project Jenkins Relution Enterprise Appstore Publis…
- CVE-2019-10282Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed…Jenkins project Jenkins Klaros-Testmanagement Plugin · huds…
- CVE-2019-10283Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with…Jenkins project Jenkins mabl Plugin · com.mabl.integration.…
- CVE-2019-10284Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users…Jenkins project Jenkins Diawi Upload Plugin · org.jenkins-c…
- CVE-2019-10285Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Minio Storage Plugin · org.jenkins-…
- CVE-2019-10286Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users…Jenkins project Jenkins DeployHub Plugin · com.openmake:dep…
- CVE-2019-1003056Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by…Jenkins project Jenkins WebSphere Deployer Plugin · org.jen…
- CVE-2019-1003057Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Bitbucket Approve Plugin · org.jenk…
- CVE-2019-1003058A cross-site request forgery vulnerability in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows…Jenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- CVE-2019-1003059A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with…Jenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- CVE-2019-1003060Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Official OWASP ZAP Plugin · org.jen…
- CVE-2019-1003061Jenkins jenkins-cloudformation-plugin Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can…Jenkins project Jenkins jenkins-cloudformation-plugin Plugi…
- CVE-2019-1003062Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where…Jenkins project Jenkins AWS CloudWatch Logs Publisher Plugi…
- CVE-2019-1003063Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they…Jenkins project Jenkins Amazon SNS Build Notifier Plugin ·…
- CVE-2019-1003064Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins aws-device-farm Plugin · org.jenkin…
- CVE-2019-1003065Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they…Jenkins project Jenkins CloudShare Docker-Machine Plugin ·…
- CVE-2019-1003066Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by…Jenkins project Jenkins Bugzilla Plugin · org.jvnet.hudson.…
- CVE-2019-1003067Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by…Jenkins project Jenkins Trac Publisher Plugin · org.jenkins…
- CVE-2019-1003068Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be…Jenkins project Jenkins VMware vRealize Automation Plugin ·…
- CVE-2019-1003069Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can…Jenkins project Jenkins Aqua Security Scanner Plugin · org.…
- CVE-2019-1003070Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins veracode-scanner Plugin · org.jenki…
- CVE-2019-1003071Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins OctopusDeploy Plugin · hudson.plugi…
- CVE-2019-1003072Jenkins WildFly Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by…Jenkins project Jenkins WildFly Deployer Plugin · org.jenki…
- CVE-2019-1003073Jenkins VS Team Services Continuous Deployment Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where…Jenkins project Jenkins VS Team Services Continuous Deploym…
- CVE-2019-1003074Jenkins Hyper.sh Commons Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Hyper.sh Commons Plugin · sh.hyper.…
- CVE-2019-1003075Jenkins Audit to Database Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins Audit to Database Plugin · org.jenk…
- CVE-2019-1003076A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection…Jenkins project Jenkins Audit to Database Plugin · org.jenk…
- CVE-2019-1003077A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation…Jenkins project Jenkins Audit to Database Plugin · org.jenk…
- CVE-2019-1003078A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection…Jenkins project Jenkins VMware Lab Manager Slaves Plugin ·…
- CVE-2019-1003079A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation…Jenkins project Jenkins VMware Lab Manager Slaves Plugin ·…
- CVE-2019-1003080A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the…Jenkins project Jenkins OpenShift Deployer Plugin · org.jen…
- CVE-2019-1003081A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form…Jenkins project Jenkins OpenShift Deployer Plugin · org.jen…
- CVE-2019-1003082A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method…Jenkins project Jenkins Gearman Plugin · org.jenkins-ci.plu…
- CVE-2019-1003051Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users…Jenkins project Jenkins IRC Plugin · org.jvnet.hudson.plugi…
- CVE-2019-1003052Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where…Jenkins project Jenkins AWS Elastic Beanstalk Publisher Plu…
- CVE-2019-1003053Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users…Jenkins project Jenkins HockeyApp Plugin · org.jenkins-ci.p…
- CVE-2019-1003054Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by…Jenkins project Jenkins Jira Issue Updater Plugin · info.bl…
- CVE-2019-1003055Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…Jenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- CVE-2019-10273Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to…
- CVE-2019-1828Cisco Small Business RV320 and RV325 Routers Weak Credential Encryption VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2018-20449The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address…
- CVE-2019-1827Cisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2018-10243htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an…
- CVE-2018-11830Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics…Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-11958Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-11966Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11970TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11971Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13918kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-10244Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU.
- CVE-2018-10242Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner.
- CVE-2018-19981Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS…
- CVE-2014-3603The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java…Shibboleth; OpenSAML Java Identity Provider · Shibboleth… +2
- CVE-2019-10844nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable…nnabla
- CVE-2019-10842Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org.bootstrap-sass
- CVE-2019-3886An incorrect permissions check was discovered in libvirt 4.8.0 and above.The libvirt Project libvirt