com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2018-1000067 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.0), com.cloudbees.plugins:build-flow-plugin (>=0.10, <=0.17) +85 more potentially affected by CVE-2019-1003050 via org.jenkins-ci.main:jenkins-core (1.480)

org.jenkins-ci.main:jenkins-core MAVEN version 1.480 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.0 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.0), com.cloudbees.plugins:build-flow-plugin (>=0.10, <=0.17) +85 more potentially affected by CVE-2019-1003049 via org.jenkins-ci.main:jenkins-core (1.480)

org.jenkins-ci.main:jenkins-core MAVEN version 1.480 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.0 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2018-1000194 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2018-6356 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2018-1000195 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

Trend Micro Partnering with Bit Discovery

We’re excited to partner with Bit Discovery, bringing attack surface discovery capabilities to the Trend Micro One platform, providing ongoing visibility to internal assets devices, identities, applications but also external, internet-facing assets...

Azure AutoWarp brings automation headaches

Azure is Microsoft’s cloud computing service providing a wide range of features for businesses worldwide. It’s particularly popular for its virtual machines and IaaS infrastructure as a service. One useful Azure feature is Automation, which has been around for some years now. Management tasks can...

Plesk CMS Access Control Error Vulnerability

Plesk Cms is a WebOps hosting platform in Switzerland. Used to run, automate and grow applications, websites and hosting businesses, an access control error vulnerability exists in Plesk CMS, which stems from the product not effectively restricting user identities. An attacker could exploit this...

Facebook sued for siphoning facial recognition data without consent

Ken Paxton, the Attorney General of Texas, recently filed a lawsuit against Facebooks parent company, Meta, for harvesting the facial recognition data of millions of Texan residents—for a decade. Paxton filed the lawsuit on Monday in the states Harrison County District Court. The suit contains...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

Researcher Spotlight: Dr. Nestori Syynimaa’s Constant Mission Protecting Identities

"When you find the things I find, they really matter. They affect everybody’s security.” Currently streaming: The Expanse and Lost in Space on Netflix Currently listening to: Amorphis, Architects, and Killswitch Engage Currently running: 130 kilometers or 80 miles a month Currently playing:...

Researcher Spotlight: Dr. Nestori Syynimaa’s Constant Mission Protecting Identities

"When you find the things I find, they really matter. They affect everybody’s security.” Currently streaming : The Expanse and Lost in Space on Netflix Currently listening to : Amorphis, Architects, and Killswitch Engage Currently running : 130 kilometers or 80 miles a month Currently playing :...

NewStart CGSL CORE 5.04 / MAIN 5.04 : samba Vulnerability (NS-SA-2021-0114)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has samba packages installed that are affected by a vulnerability: - A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw...

QuickAccManager.sol Potential replay attack

Handle WatchPug Vulnerability details This issue is possibly duplicate with a previous issue named "Potential replay attack" In QuickAccManager.solsendTxns and QuickAccManager.solsendTransfer, addressidentity is not included in the txHash, makes it possible to replay the transaction on another...

Hashicorp HashiCorp Vault has an unspecified vulnerability

HashiCorp HashiCorp Vault is a private key access management tool from HashiCorp Hashicorp, U.S. A security vulnerability exists in HashiCorp Vault and Vault Enterprise, which stems from allowing a user with write access to an entity alias ID to share with another user load visitors to gain acces...

CVE-2021-41802

HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities. Fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4...