Lucene search
K

49 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-7713

Malware in sbrugna...

7.5CVSS7.6AI score0.00221EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-7714

Malware in sbrugna...

9.8CVSS9.5AI score0.0078EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-7942

Malware in sbrugna...

6.1CVSS6.3AI score0.00262EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-7943

Malware in sbrugna...

6.1CVSS6.3AI score0.00266EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-4212

Malicious code in bioql PyPI...

7.4CVSS7.5AI score0.0004EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 7:46 a.m.5 views

CVE-2019-10411

Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

7.5CVSS6.8AI score0.00049EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:31 a.m.2 views

CVE-2018-1999035

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

7.4CVSS6.6AI score0.0004EPSS
Exploits0References1
OSV
OSV
added 2022/05/24 4:56 p.m.16 views

GHSA-PXV2-MFQ7-VHP6 Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form

Jenkins Inedo BuildMaster Plugin Plugin stores a service password in its global Jenkins configuration. While the password is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the password through browser extensions,...

3.1CVSS7.3AI score0.00049EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/24 4:56 p.m.22 views

Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form

Jenkins Inedo BuildMaster Plugin Plugin stores a service password in its global Jenkins configuration. While the password is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the password through browser extensions,...

7.5CVSS6.1AI score0.00049EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/05/14 2:56 a.m.9 views

GHSA-HRR3-7R5V-VXX5 Jenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

7.4CVSS7.3AI score0.0004EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/05/14 2:56 a.m.16 views

Jenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

7.4CVSS6.6AI score0.0004EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2019/10/09 12:0 a.m.1 views

Unspecified Vulnerability in CloudBees Jenkins Inedo BuildMaster Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . Inedo BuildMaster Plugin is used in one of...

7.5CVSS6.5AI score0.00049EPSS
Exploits0References1
NVD
NVD
added 2019/09/25 4:15 p.m.9 views

CVE-2019-10411

Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

7.5CVSS7.6AI score0.00049EPSS
Exploits0References2
OSV
OSV
added 2019/09/25 4:15 p.m.12 views

CVE-2019-10411

Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

7.5CVSS6.8AI score
Exploits0References2
Prion
Prion
added 2019/09/25 4:15 p.m.7 views

Code injection

Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

5CVSS7.5AI score0.00049EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/09/25 3:5 p.m.43 views

CVE-2019-10411

CVE-2019-10411 affects Jenkins Inedo BuildMaster Plugin, where versions 2.4.0 and earlier transmitted configured credentials in plain text via the global Jenkins configuration form, potentially exposing them. The issue stems from credential data being sent in cleartext, even though the password i...

7.5CVSS7.5AI score0.00049EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/09/25 3:5 p.m.14 views

CVE-2019-10411

Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...

7.5AI score0.00049EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/09/25 12:0 a.m.4 views

PT-2019-11805 · Jenkins · Jenkins Inedo Buildmaster Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Inedo BuildMaster Plugin versions 2.4.0 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form, potentially leading to their exposure...

7.5CVSS7.2AI score0.00049EPSS
Exploits0References7
CNVD
CNVD
added 2018/08/08 12:0 a.m.2 views

CloudBees Jenkins Inedo BuildMaster Plugin SSL/TLS Certificate Validation Vulnerability

CloudBees Jenkins is a Java-based continuous integration tool from CloudBees, which is mainly used to monitor continuous software version release/testing projects and some timed tasks.Inedo BuildMaster Plugin is used in which a plugin from BuildMaster collects version information and triggers a...

7.4CVSS7.2AI score0.0004EPSS
Exploits0References1
NVD
NVD
added 2018/08/01 1:29 p.m.10 views

CVE-2018-1999035

A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to...

7.4CVSS7.3AI score0.0004EPSS
Exploits0References1
Rows per page
Query Builder