android-check

Android Check Static code analysis plugin for Android project. Usage Modifications in /build.gradle: buildscript repositories jcenter dependencies ... classpath 'com.noveogroup.android:check:1.2.5' ... Modifications in //build.gradle: apply plugin: 'com.noveogroup.android.check' Configuration...

CVE-2018-1000011

Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

EUVD-2022-4815

Malicious code in bioql PyPI...

EUVD-2022-1902

Malicious code in bioql PyPI...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2020-2317

Jenkins FindBugs Plugin 5.0.0 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to Jenkins FindBugs Plugin's post build step...

Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

GHSA-CW5R-JX8R-9F7X Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

SUSE CVE-2018-1000011

Jenkins FindBugs Plugin 4.71 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

org.jvnet.hudson.main:hudson-test-harness (1.256), org.jvnet.hudson.main:hudson-war (1.256) +6 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.256)

org.jvnet.hudson.main:hudson-core MAVEN version 1.256 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.256 - org.jvnet.hudson.main:hudson-war 1.256 -...

org.jvnet.hudson.main:hudson-war (1.188), org.jvnet.hudson.plugins:findbugs (2.0) +3 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.188)

org.jvnet.hudson.main:hudson-core MAVEN version 1.188 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.188 - org.jvnet.hudson.plugins:findbugs 2.0 -...

org.jvnet.hudson.main:hudson-war (1.214), org.jvnet.hudson.plugins:bitkeeper (1.1) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.214)

org.jvnet.hudson.main:hudson-core MAVEN version 1.214 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.214 - org.jvnet.hudson.plugins:bitkeeper 1.1 -...

org.jvnet.hudson.main:hudson-war (1.227), org.jvnet.hudson.plugins:checkstyle (1.5) +4 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.227)

org.jvnet.hudson.main:hudson-core MAVEN version 1.227 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.227 - org.jvnet.hudson.plugins:checkstyle 1.5 -...

org.jvnet.hudson.main:hudson-test-harness (1.264), org.jvnet.hudson.main:hudson-war (1.264) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.264)

org.jvnet.hudson.main:hudson-core MAVEN version 1.264 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.264 - org.jvnet.hudson.main:hudson-war 1.264 -...

org.jvnet.hudson.main:hudson-test-harness (1.272), org.jvnet.hudson.main:hudson-war (1.272) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.272)

org.jvnet.hudson.main:hudson-core MAVEN version 1.272 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.272 - org.jvnet.hudson.main:hudson-war 1.272 -...

org.jvnet.hudson.main:hudson-test-harness (1.286), org.jvnet.hudson.main:hudson-war (1.286) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.286)

org.jvnet.hudson.main:hudson-core MAVEN version 1.286 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.286 - org.jvnet.hudson.main:hudson-war 1.286 -...

org.jvnet.hudson.main:hudson-war (1.124), org.jvnet.hudson.plugins:findbugs (1.1) +1 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.124)

org.jvnet.hudson.main:hudson-core MAVEN version 1.124 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.124 - org.jvnet.hudson.plugins:findbugs 1.1 -...