8 matches found
com.groupon.jenkins-ci.plugins:DotCi-Plugins-Starter-Pack (>=1.7.2 <=1.8.2), com.groupon.jenkins.plugins:DotCi-Plugins-Starter-Pack (>=1.0.0 <=1.7.1) +30 more potentially affected by CVE-2017-1000102 via org.jvnet.hudson.plugins:analysis-core (>=1.0 <=1.9)
org.jvnet.hudson.plugins:analysis-core MAVEN version =1.0, =1.7.2, =1.0.0, =0.9, =2.5.0, =2.5.0, =2.5.0, =2.5.0, =0.7, =1.20, =1.0.1, =0.3, =7.97, =1.0, =1.0, =1.19 and more Source cves: CVE-2017-1000102 Source advisory: OSV:GHSA-9C2P-99PG-C4J9...
CVE-2018-1000102
CVE-2018-1000102 is a rejected candidate; refer to CVE-2018-1000067 instead.
CVE-2018-1000102
...
CVE-2017-1000102
The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings Warnings Plugin, could insert...
CVE-2017-1000102
The CVE-2017-1000102 issue concerns the CloudBees Static Analysis Utilities plugin for Jenkins. The Details view in these plugins (notably the Warnings Plugin input parsed from console output) is vulnerable to a persisted cross-site scripting (XSS) attack. Malicious input can cause arbitrary HTML...
SUSE SLED12 Security Update : libreoffice (SUSE-SU-2016:2472-1)
LibreOffice was updated to version 5.1.5.2, bringing enhancements and bug fixes. - CVE-2016-4324: Parsing the Rich Text Format character style index was insufficiently checked for validity. Documents could be constructed which dereference an iterator to the first entry of an empty STL container...
CVE-2016-1000102
This CVE-2016-1000102 entry is rejected and not used (duplicate of CVE-2016-5387).
CVE-2016-1000102
...