1821 matches found
Instant Search XSS
The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software exists because measures to protect the website structure have not been taken. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...
Zohocorp ManageEngine Exchange Reporter Plus Unauthorized Access
The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
Zohocorp ManageEngine Exchange Reporter Plus Unauthorized Access
The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...
How-to Restore Lost Access to Cache Database After Using Custom SSL Certificate
Article Applicability This article is relevant only if the Veeam ONE deployment uses a custom SSL certificate, and not the one generated by the Veeam ONE installer. The error shown in the challenge section can also occur if the Veeam ONE Caching Service cannot access the PostgreSQL instance that...
Jenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerability
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.623)
org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...
org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.623)
org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...
org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.623)
org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...
org.jenkins-ci.main:jenkins-core (1.623), org.jenkins-ci.main:jenkins-test-harness (1.623) +3 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.623)
org.jenkins-ci.main:cli MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.623 - org.jenkins-ci.main:jenkins-test-harness 1.623 -...
org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.623)
org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...
org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.623)
org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
CVE-2025-67643: Improper Limitation of a Pathname to a Restricted Directory
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...
PT-2025-51549
Уязвимость плагина Redpen - Pipeline Reporter for Jira сервера автоматизации Jenkins связана с неправильным ограничением пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...
Jenkins plugins Multiple Vulnerabilities (2025-12-10)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - Jenkins Coverage Plugin 2.3054.ve1ff7baa123b and earlier does not validate the configured coverage results ID when creating coverage result...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: authservice-fips, sops, aws-application-networking-k8s-fips, dex-fips, spiffe-helper-fips, fluent-operator-fips, cinder-csi-plugin-fips, fleet-server, temporal, k8ssandra-client-fips, kafka-proxy-fips, boring-registry-fips, metrics-server, eck-operator-fips,...
Malicious code in @postman/wdio-allure-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12dee0f26482378a3726898a1190f71749f0cca809d0d6dc3d9c3419473924f The package @postman/wdio-allure-reporter was found to contain malicious code. Source: google-open-source-security...
