io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2017-1000091 via org.jenkins-ci.plugins:github-branch-source (1.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2017-1000091 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.1) +10 more potentially affected by CVE-2017-1000091 via org.jenkins-ci.plugins:github-branch-source (>=2.0.0-beta-1, <=2.0.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version =2.0.0-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =1.6-beta-1, =1.0-alpha-2, =1.0 - org.jenkins-ci.plugins:pipeline-github-li...

org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.2) potentially affected by CVE-2017-1000091 via org.jenkins-ci.plugins:github-branch-source (1.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.0-beta-1, =1.2 Source...

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11793,...

GHSA-PX6P-JXWR-27MC ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

GHSA-6R3X-5GWG-G642 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

GHSA-6MW4-PHMC-X477 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792,...

com.splunk.splunkins:splunk-devops-extend (>=1.0, <=1.7.0), com.testinium.jenkins:testinium (1.0) +24 more potentially affected by CVE-2017-1000108 via org.jenkins-ci.plugins:pipeline-input-step (>=2.0, <=2.5)

org.jenkins-ci.plugins:pipeline-input-step MAVEN version =2.0, =1.0, =y, =1.0.0-b10, =1.0.0-b10, =1.0.0-b10, =1.0.0-b15, =1.0.0-b15, =1.0.0-b10, =1.0.0-b10, =0.1-preview-4, =2.2.0, =1.8-beta-1, =1.8-beta-1, =2.0, =2.5 and more Source cves: CVE-2017-1000108 Source advisory: OSV:GHSA-HXPW-7X95-Q38M...

Silverstripe CMS XSS Vulnerability

SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by 1 the Insert Media option in the content editor or 2 an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017...

org.jenkins-ci.plugins:github-pr-comment-build (>=1.0, <=1.1) potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (1.10)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-pr-comment-build =1.0, =1.1 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +2 more potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (1.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1) potentially affected by CVE-2017-1000085 via org.jenkins-ci.plugins:subversion (1.54)

org.jenkins-ci.plugins:subversion MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =1.0.1 Source cves:...

org.jenkins-ci.plugins:scm-sync-configuration (>=0.0.6, <=0.0.9), org.jenkins-ci.plugins:scm2job (>=2.1, <=2.5) potentially affected by CVE-2017-1000085 via org.jenkins-ci.plugins:subversion (1.39)

org.jenkins-ci.plugins:subversion MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:scm-sync-configuration =0.0.6, =2.1, =2.5 Source cves: CVE-2017-1000085...

org.jenkins-ci.plugins:pipeline-githubnotify-step (>=1.0.0, <=1.0.5) potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (1.10.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:pipeline-githubnotify-step =1.0.0, =1.0.5 Source...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.2.0-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b19-beta-1, <=1.0.1) +10 more potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (>=2.0.0-beta-1, <=2.0.6)

org.jenkins-ci.plugins:github-branch-source MAVEN version =2.0.0-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =1.0.0-b19-beta-1, =0.1-preview-4, =1.6-beta-1, =1.0-alpha-2, =1.0 - org.jenkins-ci.plugins:pipeline-github-li...

com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4) +10 more potentially affected by CVE-2017-1000085 via org.jenkins-ci.plugins:subversion (>=2.2, <=2.8)

org.jenkins-ci.plugins:subversion MAVEN version =2.2, =1.0.5.0, =0.1-beta-1, =0.1-beta-1, =1.6, =1.0.1, =1.1.0, =1.0.0, =1.17, =2.0.4, =1.6.9, =1.6.11 Source cves: CVE-2017-1000085 Source advisory: GHSA-HRWC-PQFM-G6QF...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), com.redhat.jenkins.plugins:build-requester (0.7) +4 more potentially affected by CVE-2017-1000085 via org.jenkins-ci.plugins:subversion (1.45)

org.jenkins-ci.plugins:subversion MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =0.34, =1.514, =1.12, =1.13 -...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2017-1000087 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

ru.yandex.jenkins.plugins.debuilder:debian-package-builder (>=1.2, <=1.6.8) potentially affected by CVE-2017-1000085 via org.jenkins-ci.plugins:subversion (1.42)

org.jenkins-ci.plugins:subversion MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - ru.yandex.jenkins.plugins.debuilder:debian-package-builder =1.2, =1.6.8 Source cves:...