https://vulnogram.org/ Most recent CVEs assigned by Qualys, Inc. (qualys). https://vulnogram.org/seaview/icons/qualys.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-43079 https://vulnogram.org/CVE-2025-43079 The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uni… Medium Mon, 10 Nov 2025 17:10:31 GMT https://vulnogram.org/CVE-2023-6149 https://vulnogram.org/CVE-2023-6149 Qualys Jenkins Plugin for WAS prior to version and including 2.0.11 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with logi… Medium Tue, 09 Jan 2024 08:21:12 GMT https://vulnogram.org/CVE-2023-6148 https://vulnogram.org/CVE-2023-6148 Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any u… Medium Tue, 09 Jan 2024 08:14:51 GMT https://vulnogram.org/CVE-2023-6147 https://vulnogram.org/CVE-2023-6147 Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any u… Medium Tue, 09 Jan 2024 08:08:43 GMT https://vulnogram.org/CVE-2023-6146 https://vulnogram.org/CVE-2023-6146 A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce… Medium Fri, 08 Dec 2023 14:21:56 GMT https://vulnogram.org/CVE-2023-4777 https://vulnogram.org/CVE-2023-4777 An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of cre… Low Fri, 08 Sep 2023 08:42:35 GMT https://vulnogram.org/CVE-2023-28143 https://vulnogram.org/CVE-2023-28143 Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX (macOS 10.15 and older) versions. Attackers may exploit incorrect file perm… Medium Tue, 18 Apr 2023 15:54:16 GMT https://vulnogram.org/CVE-2023-28142 https://vulnogram.org/CVE-2023-28142 A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows… Medium Tue, 18 Apr 2023 15:51:58 GMT https://vulnogram.org/CVE-2023-28141 https://vulnogram.org/CVE-2023-28141 An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the process, a… Medium Tue, 18 Apr 2023 15:50:19 GMT https://vulnogram.org/CVE-2023-28140 https://vulnogram.org/CVE-2023-28140 An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a Dependency Link Library (DLL) via a local attack vector instead of the DLL that the applicati… Medium Tue, 18 Apr 2023 15:47:37 GMT