com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2012-6153 +1 more via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2017-1000393 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000076 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000078 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2018-1000169 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2018-1999044 via org.jenkins-ci.main:jenkins-core (1.397)

org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

com.zenika.jenkins-ci.plugins:gradle (1.12), org.jenkins-ci.main:jenkins-test-harness (1.409) +70 more potentially affected by CVE-2018-1000408 via org.jenkins-ci.main:jenkins-core (1.409)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.zenika.jenkins-ci.plugins:gradle 1.12 - org.jenkins-ci.main:jenkins-test-harness 1.409 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

Insecure transport protocol in Gradle

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

GHSA-PPRQ-4488-WGQX Insecure transport protocol in Gradle

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

be.hikage.maven.plugins:maven-xmlmerger-plugin (>=1.0.0, <=1.0.2), com.github.ben-manes:gradle-versions-plugin (0.4) +458 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - be.hikage.maven.plugins:maven-xmlmerger-plugin =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1,...

au.com.alderaan:eclipselink-staticweave-maven-plugin (>=1.0.0, <=1.0.4), biz.paluch.maven.configurator:configurator-maven-plugin (>=1.0, <=1.0.1) +592 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.5.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.com.alderaan:eclipselink-staticweave-maven-plugin =1.0.0, =1.0, =1.0.26, =1.3.2-snapshot,...

br.com.digix:editordedocumento (>=2.0.0, <=2.4.0), com.bugvm:bugvm-gradle (>=1.1.0, <=1.1.5) +188 more potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (2.0.7)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - br.com.digix:editordedocumento =2.0.0, =1.1.0, =1.0.1, =0.0.1, =2.0.2, =1.0.0, =1.0.0, =0.7.2,...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2018-1999004 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

com.zenika.jenkins-ci.plugins:gradle (1.12), org.jenkins-ci.main:jenkins-test-harness (1.409) +70 more potentially affected by CVE-2018-1999004 via org.jenkins-ci.main:jenkins-core (1.409)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.zenika.jenkins-ci.plugins:gradle 1.12 - org.jenkins-ci.main:jenkins-test-harness 1.409 -...