Jenkins Plugin build-metrics 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins build-metrics Plugin version 1.3 and earlier versions are vulnerable t...

Stored XSS vulnerability in build-metrics

build-metrics 1.3 does not escape the build description on one of its views. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Build/Update permission. As of publication of this advisory, there is no fix. Learn why we announce this...

Missing permission checks in build-metrics

build-metrics 1.3 and earlier does not perform a permission check in multiple HTTP endpoints. This allows attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them. As of publication of this advisory, there is no fix. Learn why we announce this...

GSD-2022-1002581 drm/amd/pm: fix a potential gpu_metrics_table memory leak

drm/amd/pm: fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17 by commit...

Malicious Package

Overview coil-metrics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

PT-2022-31775

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.87 Description A potential memory leak in the gpu metrics table of the Linux Kernel's drm/amd/pm module has been identified. The actual impact and attack plausibility of this issue have not yet been...

PT-2022-31196

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16 Description A potential memory leak in the gpu metrics table of the Linux Kernel's drm/amd/pm module has been identified. The actual impact and attack plausibility of this issue have not yet been prove...

PT-2022-30844

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.17 Description A potential memory leak in the gpu metrics table of the Linux Kernel's drm/amd/pm module has been identified. The actual impact and attack plausibility of this issue have not yet been prove...

Malicious code in clusterman-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030f2f80ded1b9dbab29658e5342d38fe8661034d904ba8e7c5fc95a0cf90404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1945 Malicious code in clusterman-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030f2f80ded1b9dbab29658e5342d38fe8661034d904ba8e7c5fc95a0cf90404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-74 Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 2key-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e32736cf2a40006732966fa3aade21e325e528480f008fcc14c14dbd96732e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-25 Malicious code in 2key-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e32736cf2a40006732966fa3aade21e325e528480f008fcc14c14dbd96732e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-metrics-zmarta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e6a321bdc56cccc7c6d361c64a3f2f537e49a4bad0b8054a416be2a5db10285 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2928 Malicious code in express-metrics-zmarta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e6a321bdc56cccc7c6d361c64a3f2f537e49a4bad0b8054a416be2a5db10285 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mattermost-metrics-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba6f13c504cc5c8f8eb5e6e5c39a3c91dd5017ddab1919bb2503162fa90d553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4499 Malicious code in mattermost-metrics-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba6f13c504cc5c8f8eb5e6e5c39a3c91dd5017ddab1919bb2503162fa90d553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apex-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73d846178480b0ccba17226f43820b166469311f01cd72fcf9f0fe97535e4206 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1036 Malicious code in apex-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73d846178480b0ccba17226f43820b166469311f01cd72fcf9f0fe97535e4206 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...