aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2018-1000410 via org.jenkins-ci.main:jenkins-core (1.625.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2012-6153 +1 more via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2012-6153, CVE-2017-1000396 Source advisory: OSV:GHSA-FQ9F-9WV...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.42.0.4) +1515 more potentially affected by CVE-2017-12197 via org.kohsuke:libpam4j (>=1.6, <=1.8)

org.kohsuke:libpam4j MAVEN version =1.6, =0.0.1, =3.34.0.1, =3.10.4.4, =3.10.4.4, =3.12.0.1, =3.10.4.4, =3.10.4.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.42.0.4 and more Source cves: CVE-2017-12197 Source advisory: OSV:GHSA-X9RG-Q5FX-FX66...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.42.0.4) +1515 more potentially affected by CVE-2017-12197 via org.kohsuke:libpam4j (>=1.6, <=1.8)

org.kohsuke:libpam4j MAVEN version =1.6, =0.0.1, =3.34.0.1, =3.10.4.4, =3.10.4.4, =3.12.0.1, =3.10.4.4, =3.10.4.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.42.0.4 and more Source cves: CVE-2017-12197 Source advisory: GHSA-X9RG-Q5FX-FX66...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2017-2609 via org.jenkins-ci.main:jenkins-core (1.520)

org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.4) +1304 more potentially affected by CVE-2015-5322 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.625.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0, =2.2.1, =1.0.3, =1.0.0, =1.0, =1.0.0, =2.2.0, =3.1.0 and more Source cves: CVE-2015-5322 Source advisory: OSV:GHSA-89VC-7FRQ-2RFJ...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), ai.grakn:grakn (>=0.13.0, <=0.14.0) +2167 more potentially affected by CVE-2015-0886 via org.mindrot:jbcrypt (0.3m)

org.mindrot:jbcrypt MAVEN version 0.3m is affected by a known vulnerability. The following packages have a transitive dependency on org.mindrot:jbcrypt and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =0.13.0, =0.13.0, =0.13.0, =0.13.0,...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2018-1999002 Source advisory:...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2018-1999004 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2018-1999004 Source advisory:...

GHSA-GP7C-XMMM-7PQR Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

GHSA-FCR6-6CPH-VMCM Stored XSS vulnerability in Jenkins Git Parameter Plugin

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Stored XSS vulnerability in Jenkins Git Parameter Plugin

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Jenkins Git Parameter Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exis...

CVE-2022-29038

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-29040

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-29040

Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross site scripting

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-29044

Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-29040

CVE-2022-29040 affects the Jenkins Git Parameter Plugin (version 0.9.15 and earlier). The issue is a stored XSS vulnerability caused by the plugin not escaping the name and description of Git parameters on parameter display views, enabling exploitation by attackers with Item/Configure permission....