Synopsys
8 CVEs across 9 Synopsys products. Browse Synopsys vulnerabilities, severities, and proof-of-concept exploits.
Synopsys products with known CVEs
Synopsys CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-0226 | Medium | 4.8 | 2024-01-09 | Synopsys Seeker versions prior to 2023.12.0 are vulnerable to a stored cross-site scripting vulnerability through a specially crafted payload. |
CVE-2023-2158 | Critical | 9.8 | 2023-04-27 | Code Dx versions prior to 2023.4.2 are vulnerable to user impersonation attack where a malicious actor is able to gain access to another user's account by craf… |
CVE-2023-1663 | Medium | 6.5 | 2023-03-29 | Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vul… |
CVE-2023-23850 | Medium | 4.3 | 2023-02-15 | A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of… |
CVE-2023-23848 | Medium | 4.3 | 2023-02-15 | Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specifie… |
CVE-2023-23847 | Low | 3.5 | 2023-02-15 | A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified HT… |
CVE-2023-23849 | Medium | 6.1 | 2023-02-06 | Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability. Any web service hosted on the same sub… |
CVE-2022-30278 | Medium | 6.1 | 2022-05-10 | A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting… |
CVE-2020-27589 | High | 7.5 | 2020-11-06 | Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases. |
CVE-2019-3800 | Medium | 6.3 | 2019-08-05 | CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-cred… |