CVEs published April 4, 2019
99 CVEs were published on April 4, 2019: 1 critical, 0 high.
- Published
- 99
- Critical
- 1
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 95
- Now in CISA KEV
- 0
- Fix available
- 30
Most affected products
- Jenkins project Jenkins Audit to Database Plugin · org.jenk…
- 3
- Jenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- 3
- Jenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- 3
- Jenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- 3
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 3
- Cisco Small Business RV Series Router Firmware
- 2
- Jenkins project Jenkins Chef Sinatra Plugin · org.jenkins-c…
- 2
- Jenkins project Jenkins Gearman Plugin · org.jenkins-ci.plu…
- 2
- Jenkins project Jenkins jenkins-reviewbot Plugin · org.jenk…
- 2
- Jenkins project Jenkins Nomad Plugin · org.jenkins-ci.plugi…
- 2
Critical 1
Medium, low and unrated 98
- CVE-2018-19282Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Ind
- CVE-2018-18068The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write any
- CVE-2019-6553A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior.Rockwell Automation RSLinx Classic
- CVE-2019-10867An issue was discovered in Pimcore before 5.7.1.pimcore/pimcore
- CVE-2019-10863A command injection vulnerability exists in TeemIp versions before 2.4.0.
- CVE-2018-20229GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal.
- CVE-2019-10856In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc.notebook
- CVE-2018-20222XXE issue in Airsonic before 10.1.2 during parse.
- CVE-2019-10287Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where tJenkins project Jenkins youtrack-plugin Plugin · org.jenkin…
- CVE-2019-10288Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed Jenkins project Jenkins Jabber Server Plugin · de.e-nexus:j…
- CVE-2019-10289A cross-site request forgery vulnerability in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValJenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- CVE-2019-10290A missing permission check in Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older in the NCScanBuilder.DescriptorImpl#doValidateAPI form vaJenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- CVE-2019-10291Jenkins Netsparker Cloud Scan Plugin 1.1.5 and older stored credentials unencrypted in its global configuration file on the Jenkins master wJenkins project Jenkins Netsparker Cloud Scan Plugin · org.…
- CVE-2019-10292A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackJenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- CVE-2019-10293A missing permission check in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers with OverallJenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- CVE-2019-10294Jenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with ExteJenkins project Jenkins Kmap Plugin · org.jenkins-ci.plugin…
- CVE-2019-10295Jenkins crittercism-dsym Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by useJenkins project Jenkins crittercism-dsym Plugin · org.jenki…
- CVE-2019-10296Jenkins Serena SRA Deploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be vieJenkins project Jenkins Serena SRA Deploy Plugin · com.urba…
- CVE-2019-10297Jenkins Sametime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by usJenkins project Jenkins Sametime Plugin · org.jenkins-ci.pl…
- CVE-2019-10298Jenkins Koji Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users Jenkins project Jenkins Koji Plugin · org.jenkins-ci.plugin…
- CVE-2019-10299Jenkins CloudCoreo DeployTime Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can beJenkins project Jenkins CloudCoreo DeployTime Plugin · com.…
- CVE-2019-1003083A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers witJenkins project Jenkins Gearman Plugin · org.jenkins-ci.plu…
- CVE-2019-1003084A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form vaJenkins project Jenkins Zephyr Enterprise Test Management P…
- CVE-2019-1003085A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method Jenkins project Jenkins Zephyr Enterprise Test Management P…
- CVE-2019-1003086A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection foJenkins project Jenkins Chef Sinatra Plugin · org.jenkins-c…
- CVE-2019-1003087A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation meJenkins project Jenkins Chef Sinatra Plugin · org.jenkins-c…
- CVE-2019-1003088Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed bJenkins project Jenkins Fabric Beta Publisher Plugin · egor…
- CVE-2019-1003089Jenkins Upload to pgyer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by userJenkins project Jenkins Upload to pgyer Plugin · ren.hellow…
- CVE-2019-1003090A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validatiJenkins project Jenkins SOASTA CloudTest Plugin · com.soast…
- CVE-2019-1003091A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allowsJenkins project Jenkins SOASTA CloudTest Plugin · com.soast…
- CVE-2019-1003092A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method Jenkins project Jenkins Nomad Plugin · org.jenkins-ci.plugi…
- CVE-2019-1003093A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackersJenkins project Jenkins Nomad Plugin · org.jenkins-ci.plugi…
- CVE-2019-1003094Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by usJenkins project Jenkins Open STF Plugin · org.jenkins-ci.pl…
- CVE-2019-1003095Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be vieweJenkins project Jenkins Perfecto Mobile Plugin · org.jenkin…
- CVE-2019-1003096Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users withJenkins project Jenkins TestFairy Plugin · org.jenkins-ci.p…
- CVE-2019-1003097Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where theyJenkins project Jenkins Crowd Integration Plugin · com.ds.t…
- CVE-2019-1003098A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation Jenkins project Jenkins openid Plugin · org.jenkins-ci.plug…
- CVE-2019-1003099A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows atJenkins project Jenkins openid Plugin · org.jenkins-ci.plug…
- CVE-2019-10277Jenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Jenkins project Jenkins StarTeam Plugin · hudson.plugins:st…
- CVE-2019-10278A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validationJenkins project Jenkins jenkins-reviewbot Plugin · org.jenk…
- CVE-2019-10279A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows aJenkins project Jenkins jenkins-reviewbot Plugin · org.jenk…
- CVE-2019-10280Jenkins Assembla Auth Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they canJenkins project Jenkins Assembla Auth Plugin · org.jenkins-…
- CVE-2019-10281Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master Jenkins project Jenkins Relution Enterprise Appstore Publis…
- CVE-2019-10282Jenkins Klaros-Testmanagement Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed bJenkins project Jenkins Klaros-Testmanagement Plugin · huds…
- CVE-2019-10283Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with ExteJenkins project Jenkins mabl Plugin · com.mabl.integration.…
- CVE-2019-10284Jenkins Diawi Upload Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users wJenkins project Jenkins Diawi Upload Plugin · org.jenkins-c…
- CVE-2019-10285Jenkins Minio Storage Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed Jenkins project Jenkins Minio Storage Plugin · org.jenkins-…
- CVE-2019-10286Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users withJenkins project Jenkins DeployHub Plugin · com.openmake:dep…
- CVE-2019-1003056Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by uJenkins project Jenkins WebSphere Deployer Plugin · org.jen…
- CVE-2019-1003057Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be vieJenkins project Jenkins Bitbucket Approve Plugin · org.jenk…
- CVE-2019-1003058A cross-site request forgery vulnerability in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attJenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- CVE-2019-1003059A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with OverJenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- CVE-2019-1003060Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viJenkins project Jenkins Official OWASP ZAP Plugin · org.jen…
- CVE-2019-1003061Jenkins jenkins-cloudformation-plugin Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be Jenkins project Jenkins jenkins-cloudformation-plugin Plugi…
- CVE-2019-1003062Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where theJenkins project Jenkins AWS CloudWatch Logs Publisher Plugi…
- CVE-2019-1003063Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they caJenkins project Jenkins Amazon SNS Build Notifier Plugin ·…
- CVE-2019-1003064Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be vieweJenkins project Jenkins aws-device-farm Plugin · org.jenkin…
- CVE-2019-1003065Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they caJenkins project Jenkins CloudShare Docker-Machine Plugin ·…
- CVE-2019-1003066Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by usJenkins project Jenkins Bugzilla Plugin · org.jvnet.hudson.…
- CVE-2019-1003067Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by usersJenkins project Jenkins Trac Publisher Plugin · org.jenkins…
- CVE-2019-1003068Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be vieJenkins project Jenkins VMware vRealize Automation Plugin ·…
- CVE-2019-1003069Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can beJenkins project Jenkins Aqua Security Scanner Plugin · org.…
- CVE-2019-1003070Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewJenkins project Jenkins veracode-scanner Plugin · org.jenki…
- CVE-2019-1003071Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed Jenkins project Jenkins OctopusDeploy Plugin · hudson.plugi…
- CVE-2019-1003072Jenkins WildFly Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by useJenkins project Jenkins WildFly Deployer Plugin · org.jenki…
- CVE-2019-1003073Jenkins VS Team Services Continuous Deployment Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where theJenkins project Jenkins VS Team Services Continuous Deploym…
- CVE-2019-1003074Jenkins Hyper.sh Commons Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewJenkins project Jenkins Hyper.sh Commons Plugin · sh.hyper.…
- CVE-2019-1003075Jenkins Audit to Database Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be vieJenkins project Jenkins Audit to Database Plugin · org.jenk…
- CVE-2019-1003076A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection foJenkins project Jenkins Audit to Database Plugin · org.jenk…
- CVE-2019-1003077A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation meJenkins project Jenkins Audit to Database Plugin · org.jenk…
- CVE-2019-1003078A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection forJenkins project Jenkins VMware Lab Manager Slaves Plugin ·…
- CVE-2019-1003079A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation metJenkins project Jenkins VMware Lab Manager Slaves Plugin ·…
- CVE-2019-1003080A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckJenkins project Jenkins OpenShift Deployer Plugin · org.jen…
- CVE-2019-1003081A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validJenkins project Jenkins OpenShift Deployer Plugin · org.jen…
- CVE-2019-1003082A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method alloJenkins project Jenkins Gearman Plugin · org.jenkins-ci.plu…
- CVE-2019-1003051Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users wJenkins project Jenkins IRC Plugin · org.jvnet.hudson.plugi…
- CVE-2019-1003052Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where tJenkins project Jenkins AWS Elastic Beanstalk Publisher Plu…
- CVE-2019-1003053Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users withJenkins project Jenkins HockeyApp Plugin · org.jenkins-ci.p…
- CVE-2019-1003054Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by uJenkins project Jenkins Jira Issue Updater Plugin · info.bl…
- CVE-2019-1003055Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed Jenkins project Jenkins FTP publisher Plugin · org.jvnet.hu…
- CVE-2019-10273Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerat
- CVE-2019-1828Cisco Small Business RV320 and RV325 Routers Weak Credential Encryption VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2018-20449The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address inf
- CVE-2019-1827Cisco Small Business RV320 and RV325 Routers Online Help Reflected Cross-Site Scripting VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2018-10243htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an autho
- CVE-2018-11830Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics ConnectivQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-11958Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon ConsQualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…
- CVE-2018-11966Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11970TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics ConnectivitQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-11971Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2018-13918kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normaQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2018-10244Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU.
- CVE-2018-10242Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner.
- CVE-2018-19981Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito
- CVE-2014-3603The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6Shibboleth; OpenSAML Java Identity Provider · Shibboleth… +2
- CVE-2019-10844nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which nnabla
- CVE-2019-10842Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org.bootstrap-sass
- CVE-2019-3886An incorrect permissions check was discovered in libvirt 4.8.0 and above.The libvirt Project libvirt