Security CVEs

 View details of reported vulnerabilites


This page displayes CVEs that are discovered in code or components maintained by Perforce, not 3rd party CVEs (CVEs in components not maintained by Perforce). If you have any questions about this page, please see our Perforce Vulnerability Reporting and Coordinated Disclosure Policy here: Perforce Security & Compliance Policies or contact security@perforce.com

CVEs

CVEsAll

50+ items • Sorted by Reported Date • Filtered by All cves • Updated a few seconds ago

Item Number
SortBusiness Line
SortCVE Number
SortCVE Name
SortCVSS Rating
SortCVSS Base Score
SortReported DateSorted Ascending
SortResolution Date
Resolved In
Action
JViewsCVE-2015-8965Arbitrary Code Execution in Rogue Wave JViewsCritical9.84/6/2017Jviews 8.8 patch 21 Jviews 8.9 patch 1
GliffyCVE-2012-2928Arbitrary Code Execution in Gliffy PluginMedium6.45/22/2012Gliffy Plugin 3.7.1Gliffy Plugin 4.2
KlocworkCVE-2020-2247XML External Entity in Klocwork Jenkins PluginMedium6.59/25/2020Jenkins Klocwork Analysis Plugin 2020.3.1
RebelCVE-2018-1002201Directory Traversal in zt-zipMedium5.57/25/2018zt-zip 1.13
Helix QACCVE-2019-1003048Unencrypted Password in Helix QAC (Jenkins PRQA Plugin)High7.810/12/2020Helix QAC (Jenkins PRQA Plugin) 3.3.0Helix QAC (Jenkins PRQA Plugin) 3.3.1
Helix CoreCVE-2021-21655Cross-Site Request Forgery (CSRF) in P4 PluginHigh7.15/11/2021Jenkins P4 Plugin 1.11.5
Helix CoreCVE-2021-21654Excessive Permissions in Jenkins P4 PluginMedium4.35/11/2021Jenkins P4 Plugin 1.10.11
Helix CoreCVE-2020-2141Cross-Site Request Forgery (CSRF) in P4 PluginMedium4.33/9/2020Jenkins P4 Plugin 1.10.11
PuppetCVE-2023-5214CVE-2023-5214 Privilege Escalation in Puppet BoltMedium6.510/6/2023Puppet Bolt 3.27.4
PuppetCVE-2023-5255CVE-2023-5255 Denial of Service for Revocation of Auto Renewed CertificatesMedium4.410/3/2023Puppet Enterprise 2023.4, Puppet Server 8.2.3
PuppetCVE-2009-3564CVE-2009-3564None0.010/6/2009Resolved in Puppet 0.25.2 and 0.24.9
PuppetCVE-2009-3564CVE-2010-0156None0.03/3/2010Resolved in Puppet 0.25.2 and 0.24.9
PuppetAuth-Conf-2010-10None0.010/1/2010
PuppetCVE-2009-3564CVE-2011-3848None0.010/27/2011Resolved in Puppet 0.25.2 and 0.24.9
PuppetCVE-2011-3869CVE-2011-3869None0.010/27/2011Resolved in Puppet 2.6.11 and 2.7.5
PuppetCVE-2011-3870CVE-2011-3870None0.010/27/2011Resolved in Puppet 2.6.11 and 2.7.5
PuppetCVE-2011-3871CVE-2011-3871None0.010/27/2011Resolved in Puppet 2.6.11 and 2.7.5
PuppetCVE-2011-3872CVE-2011-3872None0.010/27/2011Resolved in Puppet 2.6.12 and 2.7.6, Resolved in Puppet Enterprise 1.2.4, Hotfixes available for Puppet Enterprise 1.0 and 1.1, Patched releases for Puppet 0.25.x and 0.24.x available from OS vendors, Hotfixes, http://puppetlabs.com/security/cve/cve-2011-3872/hotfixes, Remediation Toolkit, http://links.puppetlabs.com/cve20113872_remediation, Frequently Asked Questions, http://puppetlabs.com/security/cve/cve-2011-3872/faq
PuppetCVE-2012-1054CVE-2012-1054 HotfixesNone0.02/21/2012
PuppetCVE-2012-1053CVE-2012-1053 HotfixesNone0.02/23/2012
PuppetCVE-2012-1053Local Group Privilege EscalationNone0.02/28/2012Resolved in Puppet 2.6.14 (source), 2.7.11 (source), rpm, deb, Resolved in Puppet Enterprise 1.2.5 and 2.0.3, Hotfixes available for Puppet Enterprise 1.0, 1.1, and 1.2.x, http://puppetlabs.com/security/cve/cve-2012-1053/hotfixes/
PuppetCVE-2012-1906Arbitrary Code ExecutionNone0.04/11/2012Resolved in Puppet 2.6.15 (, source, ), 2.7.13 (, source, ),, rpm, ,, deb, ,, dmg, Resolved in Puppet Enterprise 1.2.5 and 2.5.1, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x
PuppetCVE-2012-1989CVE-2012-1989 (Arbitrary File Write Access)None0.04/11/2012Resolved in 2.7.13, rpm, ,, deb, Resolved in Puppet Enterprise 2.5.1, Hotfixes available for Puppet Enterprise 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-1989/hotfixes/
PuppetCVE-2012-1054Local User Privilege EscalationNone0.05/29/2012Resolved in Puppet 2.6.14 (source), 2.7.11 (source), rpm, deb, Resolved in Puppet Enterprise 1.2.5 and 2.0.3, Hotfixes available for Puppet Enterprise 1.0, 1.1, and 1.2.x, http://puppetlabs.com/security/cve/cve-2012-1054/hotfixes/
PuppetCVE-2012-1986Arbitrary File Read AccessNone0.05/29/2012Resolved in Puppet 2.6.15 (, source, ), 2.7.13 (, source, ),, rpm, ,, deb, Resolved in Puppet Enterprise 1.2.5 and 2.5.1, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-1986/hotfixes/
PuppetCVE-2012-1986CVE-2012-1986 HotfixesNone0.05/29/2012Resolved in Puppet 2.6.15 (, source, ), 2.7.13 (, source, ),, rpm, ,, deb, Resolved in Puppet Enterprise 1.2.5 and 2.5.1, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-1986/hotfixes/
PuppetCVE-2012-1987Denial of ServiceNone0.05/29/2012Resolved in Puppet 2.6.15 (, source, ), 2.7.13 (, source, ),, rpm, ,, deb, Resolved in Puppet Enterprise 1.2.5 and 2.5.1, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes
PuppetCVE-2012-1988CVE-2012-1988 (Arbitrary Code Execution)None0.05/29/2012Resolved in Puppet 2.6.15 (, source, ), 2.7.13 (, source, ),, rpm, ,, deb, Resolved in Puppet Enterprise 1.2.5 and 2.5.1, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-1988/hotfixes/
PuppetCVE-2012-1988CVE-2012-1988 HotfixesNone0.05/29/2012Resolved in Puppet 2.6.15 (, source, ), 2.7.13 (, source, ),, rpm, ,, deb, Resolved in Puppet Enterprise 1.2.5 and 2.5.1, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-1988/hotfixes/
PuppetCVE-2012-1989CVE-2012-1989 HotfixesNone0.06/27/2012Resolved in 2.7.13, rpm, ,, deb, Resolved in Puppet Enterprise 2.5.1, Hotfixes available for Puppet Enterprise 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-1989/hotfixes/
PuppetCVE-2012-3867CVE-2012-3867 (Insufficient input validation)None0.07/9/2012Resolved in Puppet 2.6.17 (, source, ), 2.7.18 (, source, ),, rpm, ,, deb, ,, dmg, ,, windows, Resolved in Puppet Enterprise 1.2.5 and 2.5.2, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-3867/hotfixes/
PuppetCVE-2012-3408CVE-2012-3408 (Agent Impersonation)None0.08/6/2012
PuppetCVE 2012-3408CVE 2012-3408 HotfixesNone0.08/6/2012
PuppetCVE-2012-3864CVE-2012-3864 (Arbitrary File Read)None0.08/6/2012Resolved in Puppet 2.6.17 (, source, ), 2.7.18 (, source, ),, rpm, ,, deb, ,, dmg, ,, windows, Resolved in Puppet Enterprise 1.2.5 and 2.5.2, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-3864/hotfixes/
PuppetCVE 2012-3866CVE 2012-3866 HotfixesNone0.08/6/2012
PuppetCVE 2012-3866CVE-2012-3866 (last_run_report.yaml is world readable)None0.08/6/2012Resolved in Puppet 2.7.18 (source), rpm, deb, dmg, windows, Resolved in Puppet Enterprise 2.5.2, Hotfixes available for Puppet Enterprise 2.0.x, http://puppetlabs.com/security/cve/cve-2012-3866/hotfixes/
PuppetCVE-2012-3865Overview: CVE-2012-3865 (Arbitrary file delete/D.O.S on Puppet Master)None0.08/6/2012Resolved in Puppet 2.6.17 (, source, ), 2.7.18 (, source, ),, rpm, ,, deb, ,, dmg, ,, windows, Resolved in Puppet Enterprise 1.2.5 and 2.5.2, Hotfixes available for Puppet Enterprise 1.0, 1.1, 1.2.x, and 2.0.x, Hotfixes
PuppetCVE 2012-3867CVE 2012-3867 HotfixesMedium0.08/6/2012
PuppetCVE 2012-3864CVE 2012-3864 HotfixesMedium0.08/9/2012
PuppetCVE-2012-5664CVE-2012-5664 (ActiveRecord SQL Injection Vulnerability)None0.012/26/2012Hotfixes available for Puppet Enterprise 1.2.5 and 2.7.0, Hotfixes, http://puppetlabs.com/security/cve/cve-2012-5664/hotfixes/
PuppetCVE 2012-5664CVE 2012-5664 HotfixesNone0.012/26/2012
PuppetCVE-2013-0269CVE-2013-0269 HotfixesMedium0.01/12/2013
PuppetCVE-2013-0156CVE-2013-0156 (ActionPack SQL Injection Vulnerability)None0.01/13/2013Hotfixes available for Puppet Enterprise 1.2.5 and 2.7.0, Hotfixes, http://puppetlabs.com/security/cve/cve-2013-0156/hotfixes/
PuppetCVE 2013-0156CVE 2013-0156 HotfixesNone0.01/13/2013
PuppetCVE-2013-0155CVE-2013-0155 HotfixesMedium0.01/13/2013Hotfixes available for Puppet Enterprise 1.2.5 and 2.7.0, Hotfixes, http://puppetlabs.com/security/cve/cve-2013-0155/hotfixes/
PuppetCVE-2013-0155CVE-2013-0155 (ActiveRecord Unsafe Query Generation Risk)None0.01/15/2013Hotfixes available for Puppet Enterprise 1.2.5 and 2.7.0, Hotfixes, http://puppetlabs.com/security/cve/cve-2013-0155/hotfixes/
PuppetCVE-2013-0333CVE-2013-0333 HotfixesMedium0.01/28/2013
PuppetCVE-2013-0333CVE-2013-0333 (Rails JSON Parser Vulnerability)None0.01/30/2013Hotfixes available for Puppet Enterprise 1.2.5 and 2.7.0, http://puppetlabs.com/security/cve/cve-2013-0333/hotfixes/
PuppetCVE-2013-0169CVE-2013-0169 HotfixesNone0.02/3/2013
PuppetCVE-2013-1398CVE-2013-1398 (MCO Private Key Leak)None0.02/6/2013Resolved in Puppet Enterprise 2.7.1