26795 matches found
CVE-2026-70444
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70444
A missing permission check in the Jenkins Violation Comments to GitLab Plugin (version 2.62.0 and earlier) allows an attacker with Overall/Read permission to enumerate credentials IDs of credentials stored within Jenkins. These IDs can potentially be used in conjunction with other vulnerabilities...
CVE-2026-70444
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
MAL-2026-13347 Malicious code in javas-crypto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8d6c5cf1104be2efdc1b3e6ff2e6dbc19f8b5036f87f6edaf99116216c0c53 javas-crypto ships a postinstall hook package.json line 11: "postinstall": "node setup.js" and a top-level autoExecute in index.js that both enumerat...
MAL-2026-12359 Malicious code in crypto-javas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75003e4aab1668c5d9b7f1216e6b356473ebb6e834da3a015e920807e8717ed9 The package's postinstall hook runs setup.js, which enumerates process.env excluding only a small OS blocklist for PATH/HOME/USER/SHELL/LANG, collect...
CVE-2026-70444: Protection Mechanism Failure
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
PT-2026-68279
Name of the Vulnerable Software and Affected Versions Jenkins Violation Comments to GitLab Plugin versions prior to 2.62.1 Description A missing permission check allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Recommendations Update...
Jenkins plugins Multiple Vulnerabilities (2026-08-05)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2... CVE-2026-70426 - Jenkins 2.575 and...
Missing permission check in violation-comments-to-gitlab allows enumerating credentials IDs
violation-comments-to-gitlab 2.62.0 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using anothe...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, apache-beam-python-3.12-sdk, prefect, apache-beam-python-3.11-sdk, gitlab-cng-fips, openstack-nova-2025.1, openstack-nova-2026.1, superset, vast-csi, vllm-cuda-13.2, awx, datadog-agent, lmcache-cuda-12.8, mlflow, openstack-tempest-2025.2,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.1, apache-beam-python-3.12-sdk, prefect, apache-beam-python-3.11-sdk, gitlab-cng-fips, openstack-nova-2025.1, openstack-nova-2026.1, superset, vast-csi, vllm-cuda-13.2, awx, datadog-agent, lmcache-cuda-12.8, mlflow, openstack-tempest-2025.2,...
CVE-2025-14562 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-3093 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-4672 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-6336 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-35PC-QWV6-4858 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-12436 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-14341 vulnerabilities
Vulnerabilities for packages: gitlab-runner...