PT-2026-7954

Name of the Vulnerable Software and Affected Versions NeuVector versions prior to 4.072 Description The NeuVector scanner insecurely handles passwords as command arguments. The scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive...

CVE-2023-49673

A cross-site request forgery CSRF vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password...

CVE-2025-54471 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-54469 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-H773-7GF7-9M2X vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-C8G6-QRWH-M3VP vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-H773-7GF7-9M2X vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GHSA-C8G6-QRWH-M3VP vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

CVE-2025-54471 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

CVE-2025-54469 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: bom, redpanda, opentelemetry-operator-fips, kubeflow-katib, harbor, xeol-fips, skaffold, consul-k8s-fips, helm-mapkubeapis, tekton-pipelines-fips, bento, rancher-machine, cluster-api, gitlab-rails-ce, harbor-fips, traefik-fips, neuvector-scanner-fips, amazon-ecs-agen...

GHSA-JFVP-7X6P-H2PV vulnerabilities

Vulnerabilities for packages: kubernetes, buildah, k8s-device-plugin, opentelemetry-collector-contrib, k3s, ctop, podman, docker, runc, grype, neuvector-scanner, syft, cadvisor, grafana-alloy...

CVE-2024-45310 vulnerabilities

Vulnerabilities for packages: kubernetes, buildah, k8s-device-plugin, opentelemetry-collector-contrib, k3s, ctop, podman, docker, runc, grype, neuvector-scanner, syft, cadvisor, grafana-alloy...

Jenkins NeuVector Vulnerability Scanner Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

CVE-2023-30517

Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server...

Jenkins Plugin NeuVector Vulnerability Scanner 信任管理问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...