164 matches found
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2018-1000169 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2018-1000863 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2017-2600 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2017-2604 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2019-1003004 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2019-1003049 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands
A flaw was found in the SQL plugin shipped with Cyrus SASL. The vulnerability occurs due to failure to properly escape SQL input and leads to an improper input validation vulnerability. This flaw allows an attacker to execute arbitrary SQL commands and the ability to change the passwords for othe...
WordPress cross-site scripting vulnerabilities
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of the WordPress Form Store to DB plugin...
org.jenkins-ci.main:jenkins-test-harness (1.565.2), org.jenkins-ci.main:jenkins-war (1.565.2) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.565.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.2 - org.jenkins-ci.main:jenkins-war 1.565.2 -...
CVE-2021-24790
The Contact Form Advanced Database WordPress plugin through 1.0.8 does not have any authorisation as well as CSRF checks in its deletecf7data and exportcf7data AJAX actions, available to any authenticated users, which could allow users with a role as low as subscriber to call them. The...
CloudBees Jenkins CSRF Vulnerability (CNVD-2020-51389)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CloudBees Jenkins CSRF Vulnerability (CNVD-2020-51390)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CloudBees Jenkins path traversal vulnerability (CNVD-2020-52604)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...
CVE-2020-2240
A cross-site request forgery CSRF vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts...
CVE-2020-2241
A cross-site request forgery CSRF vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials...
CVE-2020-2242
A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials...
