5301 matches found
org.jenkins-ci.plugins:bitbucket-filter-project-trait (1.0) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.13)
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: -...
org.jenkins-ci.plugins:bitbucket-approval-filter (1.0.0) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.4.1)
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: - org.jenkins-ci.plugins:bitbucket-approval-filte...
org.jenkins-ci.plugins:skip-notifications-trait (>=1.0.0, <=1.0.2) potentially affected by CVE-2024-39460 via org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (2.2.0)
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source and may be impacted: - org.jenkins-ci.plugins:skip-notifications-trait...
CVE-2024-39460
Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases...
CVE-2024-39460
Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases...
CVE-2024-39460
The Jenkins Bitbucket Branch Source Plugin (versions 886.v44cf5e4ecec5 and earlier) is vulnerable to the insertion of sensitive information into log files. In certain cases, the plugin prints the Bitbucket OAuth access token as part of the Bitbucket URL within the build log. An attacker who can v...
CVE-2024-39460
Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases...
CVE-2024-39460
Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases...
CVE-2024-39460: Insertion of Sensitive Information into Log File
Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases...
Jenkins Plugin Bitbucket Branch Source Security Vulnerability
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
Bitbucket OAuth access token exposed in the build log by cloudbees-bitbucket-branch-source
cloudbees-bitbucket-branch-source 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases. cloudbees-bitbucket-branch-source 887.vad359b3d2d8d does not include the Bitbucket OAuth access token as part of the Bitbucket URL i...
CVE-2024-39276 ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
In the Linux kernel, the following vulnerability has been resolved: ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbcache.c:419 mbcachedestroy+0x224/0x290 Modules...
Malicious code in branch-raker (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6793 Malicious code in branch-raker (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tanker-branch (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3080 Malicious code in tanker-branch (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in branch-to-cmsg (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1838 Malicious code in branch-to-cmsg (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE: Security Advisory (SUSE-SU-2024:2180-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Improper Handling of Length Parameter Inconsistency
Overview Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency in the Pdfinfo component. An attacker can cause a crash by passing in malicious input and using the dtests parameter. Remediation Upgrade poppler to version 25.11.0 or higher. Referenc...