1749 matches found
EUVD-2023-1708
Malicious code in bioql PyPI...
EUVD-2022-6861
Malicious code in bioql PyPI...
EUVD-2022-5368
Malicious code in bioql PyPI...
EUVD-2022-7308
Malicious code in bioql PyPI...
EUVD-2023-2429
Malicious code in bioql PyPI...
CVE-2025-58458
In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying amazon-s3 protocol for use with JGit, allowing attackers with Overall/Read permission to check f...
Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated
Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs. This has been patched in version 347.v32aeb0493c4f...
GHSA-GM8G-FH49-QQ6V Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated
Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs. This has been patched in version 347.v32aeb0493c4f...
CVE-2025-58459
Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...
Jenkins Plugin Git client 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...
The vulnerability of the Apica Loadtest plugin for Jenkins’ automation server, related to the storage of registration data, allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Apica Loadtest plugin for Jenkins-based automation servers lies in the way registration data is stored in an open manner within the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Nouvola DiveCloud plugin for Jenkins’ automation server, related to the storage of keys in an unencrypted form, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Nouvola DiveCloud plugin for Jenkins-based automation servers lies in the storage of keys in an unencrypted form within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Jenkins automation server plugin Xooa lies in the storage of tokens in an unencrypted form, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Jenkins automation server plugin Xooa is related to the storage of tokens in an unencrypted form in the file io.jenkins.plugins.xooa.GlobConfig.xml. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the Kryptowire Jenkins automation server’s plugin, related to the storage of keys in an unencrypted form, allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Kryptowire Jenkins automation server plugin relates to the storage of keys in an unencrypted form in the file org.aerogear.kryptowire.GlobalConfigurationImpl.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
The vulnerability of the Warrior Framework plugin for Jenkins’ automation servers, related to the storage of passwords in an open manner, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Jenkins automation server’s Warrior Framework plugin lies in the storage of passwords in an exposed manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...
The vulnerability of the User1st uTester plugin in the Jenkins automation server, related to the storage of tokens in unencrypted form, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the User1st uTester plugin for the Jenkins automation server lies in the fact that tokens are stored in an unencrypted form in the file io.jenkins.plugins.user1st.utester.UTesterPlugin.xml. Exploiting this vulnerability could allow a malicious actor to gain unauthorized acces...
CVE-2025-53743
Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...
CVE-2025-53742
Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...
CVE-2025-53657
Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them...
CVE-2025-53661
Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...