565 matches found
CVE-2025-64146
Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
EUVD-2025-36647
Jenkins Curseforge Publisher Plugin stores API Keys unencrypted in job config.xml files...
EUVD-2025-36655
Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files...
CVE-2025-64143
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
CVE-2025-64146
Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
CVE-2025-64146
Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
CVE-2025-64143
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
CVE-2025-64143
The Jenkins OpenShift Pipeline Plugin (versions 1.0.57 and earlier ) is vulnerable to sensitive information exposure due to the unencrypted storage of authorization tokens in plaintext within config.xml (or job config.xml) files on the Jenkins controller. Attackers who obtain Item/Extended Read p...
CVE-2025-64146: Missing Encryption of Sensitive Data
Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
CVE-2025-64144: Missing Encryption of Sensitive Data
Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
CVE-2025-64143: Missing Encryption of Sensitive Data
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system...
EUVD-2022-4987
Malicious code in bioql PyPI...
EUVD-2022-4174
Malicious code in bioql PyPI...
EUVD-2022-1951
Malicious code in bioql PyPI...
EUVD-2022-6342
Malicious code in bioql PyPI...
EUVD-2022-4018
Malicious code in bioql PyPI...
EUVD-2022-4771
Malicious code in bioql PyPI...
EUVD-2022-3255
Malicious code in bioql PyPI...