CVE-2019-11350

CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage and Retrieval via the proxy configuration page...

Cross-site Scripting (XSS)

org.jenkins-ci.plugins:cloudbees-jenkins-advisor is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper escaping of server responses, which allows an attacker to inject malicious scripts that execute in the context of users viewing the affected content...

EUVD-2019-3029

Malware in sbrugna...

EUVD-2022-4982

Malicious code in bioql PyPI...

EUVD-2022-4967

Malicious code in bioql PyPI...

EUVD-2022-4826

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview org.jenkins-ci.plugins:cloudbees-jenkins-advisor is a plugin that proactively notifies you of problems with your Jenkins-based environment. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the failure to escape responses from the server. An attacker can...

Stored XSS vulnerability in cloudbees-jenkins-advisor

cloudbees-jenkins-advisor 374.v194bd4f0c8c8 and earlier does not escape responses from the Jenkins Health Advisor server. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control Jenkins Health Advisor server responses. cloudbees-jenkins-advisor...

SUSE CVE-2014-2068

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.3) potentially affected by CVE-2022-45383 via org.jenkins-ci.plugins:support-core (2.41)

org.jenkins-ci.plugins:support-core MAVEN version 2.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:support-core and may be impacted: - org.jenkins-ci.plugins:cloudbees-jenkins-advisor =1.0, =1.3 Source cves: CVE-2022-45383...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.4, <=1.5) potentially affected by CVE-2022-45383 via org.jenkins-ci.plugins:support-core (2.43)

org.jenkins-ci.plugins:support-core MAVEN version 2.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:support-core and may be impacted: - org.jenkins-ci.plugins:cloudbees-jenkins-advisor =1.4, =1.5 Source cves: CVE-2022-45383...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2022-45383 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2022-45383 Source advisory: MEND:CVE-2022-45383...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2021-21621 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2021-21621 Source advisory: GHSA-92PG-8G57-HQPX...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2021-21621 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2021-21621 Source advisory: OSV:GHSA-92PG-8G57-HQPX...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16540 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16540 Source advisory: GHSA-2CXG-448H-4WXJ...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16540 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16540 Source advisory: OSV:GHSA-2CXG-448H-4WXJ...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16539 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16539 Source advisory: GHSA-J52R-PMQV-WM38...

org.jenkins-ci.plugins:cloudbees-jenkins-advisor (>=1.0, <=1.5), org.jenkins-ci.plugins:diagnostics (>=1.0, <=1.2) potentially affected by CVE-2019-16539 via org.jenkins-ci.plugins:support-core (>=2.35, <=2.43)

org.jenkins-ci.plugins:support-core MAVEN version =2.35, =1.0, =1.0, =1.2 Source cves: CVE-2019-16539 Source advisory: OSV:GHSA-J52R-PMQV-WM38...

GHSA-PV88-J6RG-R56P Jenkins allows attackers to obtain sensitive information

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump...

com.mobileenerlytics.eagle.tester:eagle-tester (>=1.0.6, <=1.0.9), hudson.plugins.signal_killer:signal-killer (1.1) +10 more potentially affected by CVE-2017-1000354 via org.jenkins-ci.main:jenkins-core (>=2.50, <=2.56)

org.jenkins-ci.main:jenkins-core MAVEN version =2.50, =1.0.6, =4.6.0.23, =2.50, =2.50, =2.0, =1.0, =0.2, =3.0, =0.2.6, =1.0-alpha-2, =0.13, =0.14 Source cves: CVE-2017-1000354 Source advisory: GHSA-R57F-7XW3-Q2R9...