Synopsys vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20236
3. 20241

Newest CVEs

• CVE-2024-0226

  Stored Cross-Site Scripting in Synopsys Seeker

  Synopsys · Seeker

  Medium4.8
• CVE-2023-2158

  Impersonation through User-Controlled Token

  Synopsys · Code Dx

  Critical9.8
• CVE-2023-1663

  Authenticated Resources Accessible via Forced Browsing

  Synopsys · Coverity

  Medium6.5
• CVE-2023-23850

  A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of…

  Synopsys · Synopsys Jenkins Coverity Plugin

  Medium4.3
• CVE-2023-23848

  Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an…

  Synopsys · Synopsys Jenkins Coverity Plugin

  Medium4.3
• CVE-2023-23847

  A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified…

  Synopsys · Synopsys Jenkins Coverity Plugin

  Low3.5
• CVE-2023-23849

  Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability. Any web service hosted on the same sub…

  Synopsys · Coverity

  High8.1
• CVE-2022-30278

  A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting…

  Synopsys · Black Duck Hub

  Medium6.1