CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34817

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34817

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34786

Jenkins Rich Text Publisher Plugin 1.4 and earlier does not escape the HTML message set by its post-build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

CVE-2022-34785

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

CVE-2022-34785

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34815

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

Malicious code in remote-developer-jobs-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f03185f3f2f1ad0d64075fc4a6d14a5f9a607a713607990b5433c0f6d41b28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5742 Malicious code in remote-developer-jobs-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f03185f3f2f1ad0d64075fc4a6d14a5f9a607a713607990b5433c0f6d41b28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-dev-jobs-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5f1d86e52a908d4297ad2c989b9432b67179e88abd1e96fee8b9f1e00977a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a317fb1a82a0cb35c895319bf1077f69e7189c5321da3c76c2b8a6a6e2981846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1368 Malicious code in azure-quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a317fb1a82a0cb35c895319bf1077f69e7189c5321da3c76c2b8a6a6e2981846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sam_jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6ebe40c7c29b62a287c9a45a67a5ba2c507f97752b8633ab67a36fe922305ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b528bd2f048349658faa44394ec64b5c186cbb76fc0bc2e1234fb8bfcf407c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5561 Malicious code in quantum-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b528bd2f048349658faa44394ec64b5c186cbb76fc0bc2e1234fb8bfcf407c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

jobs.nationalbar.org Cross Site Scripting vulnerability OBB-2655087

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...