İçeriğe atla
Noroxi

SonarSource kayıtları

sonarsource üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%30
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

10 kayıt
  • CVE-2020-35193
    40Planlayın

    The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user.

    KritikCVSS 9,8İstismar yokEPSS %2

    sonarsource · sonarqube docker image15 Ara 2020

  • CVE-2020-27986
    35İzleyin

    SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI.

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    sonarsource · sonarqube28 Eki 2020

  • CVE-2018-1000425
    31İzleyin

    An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java t

    YüksekCVSS 7,8İstismar yokEPSS %0

    sonarsource · sonarqube scanner9 Oca 2019

  • CVE-2024-47910
    28İzleyin

    An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5.

    YüksekCVSS 7,2İstismar yokEPSS %0

    4 Eki 2024

  • CVE-2024-47911
    28İzleyin

    In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint

    YüksekCVSS 7,2İstismar yokEPSS %0

    sonarsource · sonarqube4 Eki 2024

  • CVE-2024-38460
    26İzleyin

    In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartex

    OrtaCVSS 6,5İstismar yokEPSS %0

    sonarsource · sonarqube16 Haz 2024

  • CVE-2019-17579
    24İzleyin

    SonarSource SonarQube before 7.8 has XSS in project links on account/projects.

    OrtaCVSS 6,1İstismar yokEPSS %1

    sonarsource · sonarqube14 Eki 2019

  • CVE-2020-28002
    21İzleyin

    In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner.

    OrtaCVSS 5,3İstismar yokEPSS %1

    sonarsource · sonarqube2 Kas 2020

  • CVE-2013-5676
    17İzleyin

    The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by

    OrtaCVSS 4,0Kavram kanıtıEPSS %5

    sonarsource · jenkins plugin13 Ara 2013

  • CVE-2018-19413
    17İzleyin

    A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as v

    OrtaCVSS 4,3İstismar yokEPSS %1

    sonarsource · sonarqube14 Ara 2018