org.zeroturnaround.jenkins:build-flow-test-aggregator (>=1.1, <=1.2) potentially affected by CVE-2026-9674 via org.jenkins-ci.plugins:jenkins-multijob-plugin (1.16)

org.jenkins-ci.plugins:jenkins-multijob-plugin MAVEN version 1.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:jenkins-multijob-plugin and may be impacted: - org.zeroturnaround.jenkins:build-flow-test-aggregator =1.1, =1.2...

org.jenkins-ci.plugins:vectorcast-execution (>=0.16, <=0.61) potentially affected by CVE-2026-9674 via org.jenkins-ci.plugins:jenkins-multijob-plugin (1.21)

org.jenkins-ci.plugins:jenkins-multijob-plugin MAVEN version 1.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:jenkins-multijob-plugin and may be impacted: - org.jenkins-ci.plugins:vectorcast-execution =0.16, =0.61 Source cves...

org.jenkins-ci.plugins:feature-branch-notifier (>=1.0, <=1.4), org.jenkins-ci.plugins:vectorcast-execution (>=0.16, <=0.61) +1 more potentially affected by CVE-2026-9674 via org.jenkins-ci.plugins:jenkins-multijob-plugin (>=1.9, <=1.21)

org.jenkins-ci.plugins:jenkins-multijob-plugin MAVEN version =1.9, =1.0, =0.16, =1.1, =1.2 Source cves: CVE-2026-9674 Source advisory: MEND:CVE-2026-9674...

EUVD-2022-1396

Malicious code in bioql PyPI...

EUVD-2023-1453

Malicious code in bioql PyPI...

EUVD-2025-2961

Malicious code in bioql PyPI...

CVE-2025-22746

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zartis HireHive Job Plugin zartis-job-plugin allows Stored XSS.This issue affects HireHive Job Plugin: from n/a through = 2.9.0...

CVE-2022-28151

A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job...

CVE-2022-28152

A cross-site request forgery CSRF vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job...

CVE-2020-35749

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

CVE-2019-10422

Jenkins Call Remote Job Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

Cleartext Storage of Sensitive Information

Overview org.ukiuni.monitor-remote-job-plugin:monitor-remote-job is a monitor remote job. Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information within config.xml files. An attacker can gain unauthorized access to sensitive data by exploiting the visibility...

CVE-2025-31725

The Jenkins monitor-remote-job Plugin 1.0 is vulnerable to Cleartext Storage of Sensitive Information due to deficient access controls. The plugin stores passwords unencrypted within the config.xml files on the Jenkins controller. This flaw allows users with Extended Read permissions, or any acto...

CVE-2025-31725

Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

CVE-2025-31725: Improper Access Control

Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

PT-2025-14515 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins monitor-remote-job Plugin version 1.0 Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. These passwords can be viewed by users with Extended Read permission or those wh...

CVE-2025-22746

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zartis HireHive Job Plugin zartis-job-plugin allows Stored XSS.This issue affects HireHive Job Plugin: from n/a through = 2.9.0...

CVE-2025-22746 WordPress HireHive Job Plugin plugin <= 2.9.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zartis HireHive Job Plugin zartis-job-plugin allows Stored XSS.This issue affects HireHive Job Plugin: from n/a through = 2.9.0...

CVE-2025-22746

CVE-2025-22746: Stored XSS in HireHive Job Plugin (WordPress). Affected: HireHive Job Plugin versions up to 2.9.0. CVSS v3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). Patch status in provided sources is Unpatched; no remediation version details are provided. Monitor for updates.

CVE-2025-22746: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zartis HireHive Job Plugin zartis-job-plugin allows Stored XSS.This issue affects HireHive Job Plugin: from n/a through = 2.9.0...