Lucene search
K

286 matches found

NVD
NVD
added 2023/03/27 4:15 p.m.17 views

CVE-2022-48426

In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible...

5.4CVSS5.2AI score0.01057EPSS
Exploits0References1
Prion
Prion
added 2023/03/27 4:15 p.m.14 views

Cross site scripting

In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible...

4.9CVSS5.2AI score0.01057EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/27 3:27 p.m.21 views

CVE-2022-48426

In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible...

4.6CVSS6.4AI score0.01057EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/03/27 3:27 p.m.9 views

CVE-2022-48426

In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible...

4.6CVSS5.3AI score0.01057EPSS
Exploits0References1
CVE
CVE
added 2023/03/27 3:27 p.m.62 views

CVE-2022-48426

CVE-2022-48426 affects JetBrains TeamCity versions prior to 2022.10.3. The vulnerability is a stored XSS in Perforce connection settings , as confirmed by multiple sources (NVD entry and security analyses). Impact is limited to XSS exposure via Perforce settings; exploitation status is not detail...

5.4CVSS5.2AI score0.01057EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.3 views

PT-2023-15770 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2022.10.3 Description: The issue concerns stored XSS in Perforce connection settings. Recommendations: For versions prior to 2022.10.3, update to version 2022.10.3 or later to resolve the issue...

5.4CVSS5.2AI score0.01057EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.3 views

SUSE CVE-2018-1000145

An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them...

6.5CVSS6.2AI score0.01142EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.3 views

SUSE CVE-2018-1000147

An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them...

6.5CVSS6.4AI score0.00858EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/20 12:0 a.m.3 views

p4 操作系统命令注入漏洞

p4 is a small utility library for working with Perforce by the individual developer Nate Long. An operating system command injection vulnerability exists in versions prior to p4 0.0.7, which stems from incorrect input cleanup, and a command injection vulnerability via the run function...

9.8CVSS8.3AI score0.02418EPSS
Exploits1References4
CNVD
CNVD
added 2022/09/28 12:0 a.m.17 views

JetBrains TeamCity Information Disclosure Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

5.3CVSS5AI score0.00292EPSS
Exploits0References1
OSV
OSV
added 2022/09/23 11:15 a.m.2 views

CVE-2022-40979

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable...

5.3CVSS5.8AI score0.00292EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/23 11:15 a.m.2 views

CVE-2022-40979

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable...

5.3CVSS6AI score0.00292EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/09/23 11:15 a.m.21 views

CVE-2022-40979

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable...

5.3CVSS0.00292EPSS
Exploits0References1
Prion
Prion
added 2022/09/23 11:15 a.m.15 views

Design/Logic Flaw

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable...

5CVSS5.3AI score0.00292EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/23 10:50 a.m.21 views

CVE-2022-40979

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable...

4.4CVSS5.6AI score0.00292EPSS
Exploits0References1
CVE
CVE
added 2022/09/23 10:50 a.m.62 views

CVE-2022-40979

CVE-2022-40979 affects JetBrains TeamCity prior to 2022.04.4. Multiple sources corroborate that the vulnerability can cause an information disclosure by logging environment variables of type “password” when a custom Perforce executable is used. The Red Hat entry and CNVD/CVE records describe the ...

5.3CVSS5.3AI score0.00292EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.3 views

JetBrains TeamCity 日志信息泄露漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

5.3CVSS6.2AI score0.00292EPSS
Exploits0References2
OSV
OSV
added 2022/05/24 5:10 p.m.30 views

GHSA-RJJQ-63C7-8724 CSRF vulnerability in Jenkins P4 Plugin

A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce...

4.3CVSS4.5AI score0.00636EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/24 5:10 p.m.18 views

CSRF vulnerability in Jenkins P4 Plugin

A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce...

4.3CVSS5AI score0.00636EPSS
Exploits0References5Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/14 3:23 a.m.1 views

org.hudsonci.plugins:reviewboard (=1.0.2-h-1) potentially affected by CVE-2018-1000147 via org.jvnet.hudson.plugins:perforce (=1.1.14)

org.jvnet.hudson.plugins:perforce MAVEN version =1.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.plugins:perforce and may be impacted: - org.hudsonci.plugins:reviewboard =1.0.2-h-1 Source cves: CVE-2018-1000147 Source advisory:...

6.5CVSS6.5AI score0.00858EPSS
Exploits0
Rows per page
Query Builder