Cross site scripting

Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Malicious Package

Overview helix-contentsource-connector is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview contentsource-connector is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

CVE-2022-34195

CVE-2022-34195 relates to the Jenkins Repository Connector Plugin (versions

CVE-2022-34195

Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Jenkins Plugin Repository Connector 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

PT-2022-22064 · Jenkins +1 · Jenkins +2

Name of the Vulnerable Software and Affected Versions: Jenkins Repository Connector Plugin versions 2.2.0 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the Jenkins Repository Connector Plugin does not escape the name and description of...

MAL-2022-4565 Malicious code in meshblu-connector-arc-thermometer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f1869e723aea9d866700e89b3eaa39a2866762e0d10d4bebe7419833a14567e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meshblu-connector-arc-thermometer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f1869e723aea9d866700e89b3eaa39a2866762e0d10d4bebe7419833a14567e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mbed-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507fba4e1775a5f4e7f71be9c9c8e6f86ce9411d60798e9dac4fef8bb4c47685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4512 Malicious code in mbed-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507fba4e1775a5f4e7f71be9c9c8e6f86ce9411d60798e9dac4fef8bb4c47685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helix-contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6bfb146db6490aea3415da94f36a8e0e45b5870003b32633008db18332b36d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3591 Malicious code in helix-contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6bfb146db6490aea3415da94f36a8e0e45b5870003b32633008db18332b36d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2171 Malicious code in contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7affff92ed54471ef6d90243e6e26888e38d143653ffdf8cc103f3bf4e5bdea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7affff92ed54471ef6d90243e6e26888e38d143653ffdf8cc103f3bf4e5bdea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-28749

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

CVE-2022-28749

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

Design/Logic Flaw

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

CVE-2022-28749

Affected software: Zoom On-Premise Meeting Connector MMR (versions prior to 4.8.113.20220526). Issue: improper permission checking for attendees in the waiting room, enabling a threat actor to join a meeting without the host’s consent. Impact: unauthorized entry into meetings (no host permission)...

CVE-2022-28749 Insufficient Authorization Check During Meeting Join

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...