Lucene search
+L

888 matches found

OSV
OSV
added 2022/03/16 1:15 a.m.6 views

CVE-2022-27225

Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identity management services. During the sign-in process, Keycloak sets browser cookies that effectively provide remember-me functionality. For backwards compatibility with older Safar...

6.5CVSS5.8AI score0.00536EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/16 1:15 a.m.21 views

CVE-2022-27225

Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identity management services. During the sign-in process, Keycloak sets browser cookies that effectively provide remember-me functionality. For backwards compatibility with older Safar...

6.5CVSS0.00536EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/16 12:10 a.m.35 views

CVE-2022-27225

Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identity management services. During the sign-in process, Keycloak sets browser cookies that effectively provide remember-me functionality. For backwards compatibility with older Safar...

6.5AI score0.00536EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/16 12:10 a.m.102 views

CVE-2022-27225

Gradle Enterprise before 2021.4.3 is affected by a session‑level vulnerability related to Keycloak cookies. During sign‑in, Keycloak sets cookies that effectively enable remember‑me functionality; for older Safari versions, a duplicate cookie is created without the Secure attribute. This allows t...

6.5CVSS6.3AI score0.00536EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.7 views

Gradle 信息泄露漏洞

Gradle is a set of JVM-based project building tools from Gradle, Inc. that supports maven, Ivy repositories, and more. Gradle Enterprise suffers from a security vulnerability that stems from the fact that during the login process, Keycloak sets a browser cookie that effectively provides remember-...

6.5CVSS6.5AI score0.00536EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/26 12:0 a.m.48 views

GHSA-2QP4-G3Q3-F92W Improper Locking in JetBrains Kotlin

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.3CVSS6.2AI score0.02212EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/02/26 12:0 a.m.35 views

Improper Locking in JetBrains Kotlin

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.3CVSS2.2AI score0.02212EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/25 3:15 p.m.7 views

CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.3CVSS6.7AI score0.02212EPSS
SaveExploits0References5
NVD
NVD
added 2022/02/25 3:15 p.m.24 views

CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.3CVSS0.02212EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/02/25 3:15 p.m.54 views

CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.3CVSS6.8AI score0.02212EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/25 3:15 p.m.28 views

Code injection

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5CVSS6.5AI score0.02212EPSS
SaveExploits0References4Affected Software3
OSV
OSV
added 2022/02/25 3:15 p.m.4 views

UBUNTU-CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.3CVSS6.8AI score0.02212EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/25 2:35 p.m.8 views

CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.1AI score
SaveExploits0References6
Cvelist
Cvelist
added 2022/02/25 2:35 p.m.37 views

CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

7.4AI score0.02212EPSS
SaveExploits0References4
CVE
CVE
added 2022/02/25 2:35 p.m.426 views

CVE-2022-24329

CVE-2022-24329 affects JetBrains Kotlin prior to 1.6.0. The issue is that dependencies for Multiplatform Gradle Projects could not be locked, per the description. The connected documents do not provide details on exploit methods, affected products beyond Kotlin/Gradle Multiplatform usage, or quan...

5.3CVSS5.4AI score0.02212EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2022/02/25 2:35 p.m.75 views

CVE-2022-24329

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects...

5.3CVSS6.8AI score0.02212EPSS
SaveExploits0
Kitploit
Kitploit
added 2022/02/19 8:30 p.m.46 views

HybridTestFramework - End To End Testing Of Web, API And Security

Full-fledged WEB, API and Security testing framework using selenium,ZAP OWASP proxy and rest-assured Supported Platforms This framework supports WebUi automation across a variety of browsers like Chrome, Firefox, IE, no only limited to this but extended to test rest api, security and visual...

7.2AI score
SaveExploits0References3
NVD
NVD
added 2022/02/10 8:15 p.m.28 views

CVE-2022-23630

Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept a dependency that would otherwise fail the build as an untrusted external artifact. This occurs when dependency verification is disabled ...

7.5CVSS0.0132EPSS
SaveExploits0References3
Prion
Prion
added 2022/02/10 8:15 p.m.19 views

Design/Logic Flaw

Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept a dependency that would otherwise fail the build as an untrusted external artifact. This occurs when dependency verification is disabled ...

6CVSS7.5AI score0.0132EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/02/10 8:15 p.m.21 views

CVE-2022-23630

Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, Gradle may skip that verification and accept a dependency that would otherwise fail the build as an untrusted external artifact. This occurs when dependency verification is disabled ...

7.5CVSS7AI score0.0132EPSS
SaveExploits0References4
Rows per page
Query Builder