Jenkins Plugin 代码问题漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An XML external entity...

CVE-2021-21658: Undefined Security Weakness

Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

XXE vulnerability in nuget

nuget 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This XML parser is used for the "Build on NuGet updates" feature. This allows attackers with the ability to control the contents of the packages.config file in a workspace to have Jenkins parse a...

A new experience for reporting copyright or trademark infringement on Microsoft Services

The Notice of Copyright or Trademark Infringement Portal has helped protect Microsofts users and customers from intellectual property infringement across online services like Microsoft Azure, Office, Outlook, Skype, Stream, Microsoft News, Sway, Hotmail, NuGet, and Yammer. Microsofts response to...

A new experience for reporting copyright or trademark infringement on Microsoft Services

The Notice of Copyright or Trademark Infringement Portal has helped protect Microsoft's users and customers from intellectual property infringement across online services like Microsoft Azure, Office, Outlook, Skype, Stream, Microsoft News, Sway, Hotmail, NuGet, and Yammer. Microsoft's response t...

CVE-2021-24105: Undefined Security Weakness

Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which can be retrieved and used during development, build, and release processes. This insertion could lead to remote code execution. We believe...

CentOS 8 : dotnet (CESA-2019:1259)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1259 advisory. - dotnet: NuGet Tampering Vulnerability CVE-2019-0757 - dotnet: timeouts for regular expressions are not enforced CVE-2019-0820 - dotnet: infinite loop...

GitLab Denial of Service Vulnerability (CNVD-2021-26072)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A regular expression denial of service vulnerability exists in the NuGet API in GitLab 12.8 and lat...

CVE-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

CVE-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

Denial of service

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

CVE-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

CVE-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

UBUNTU-CVE-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

CVE-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

CVE-2021-22168

CVE-2021-22168 describes a regular expression denial of service in the NuGet API that affects GitLab starting from version 12.8. The connected documents consistently list the NuGet API as the vulnerable component and GitLab 12.8+ as affected, but do not provide concrete remediation steps or avail...

CVE-2021-22168

A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8...

CVE-2021-22168

Removed by vendor...

Gitlab Nuget Api 资源管理错误漏洞

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A regular expression denial of service vulnerability exists in the NuGet API in GitLab 12.8 and lat...

PT-2021-14883 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.8 and later Description: A regular expression denial of service issue has been discovered in the NuGet API. Recommendations: For GitLab versions 12.8 and later, at the moment, there is no information about a newer version...