205 matches found
CVE-2023-35774
Cross-Site Request Forgery CSRF vulnerability in LWS LWS Tools plugin = 2.4.1 versions...
PT-2023-25302 · Lws · Lws Tools Plugin
Name of the Vulnerable Software and Affected Versions: LWS LWS Tools plugin versions = 2.4.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2023-27901 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
com.blazemeter.plugins:blazemeterjenkinsplugin (>=1.0-beta-1, <=1.08-beta-1), com.brianfromoregon:caliper-ci (2.1) +153 more potentially affected by CVE-2023-27903 via org.jenkins-ci.main:jenkins-core (1.424)
org.jenkins-ci.main:jenkins-core MAVEN version 1.424 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =1.0-beta-1, =0.1, =0.9, =1.2.11, =1.4.0, =2.7.0...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2023-27900 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
CVE-2022-3881
The WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Log WordPress plugin before 3.43 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (1.480.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2019-10401 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
com.blazemeter.plugins:blazemeterjenkinsplugin (>=1.0-beta-1, <=1.08-beta-1), com.brianfromoregon:caliper-ci (2.1) +153 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.424)
org.jenkins-ci.main:jenkins-core MAVEN version 1.424 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =1.0-beta-1, =0.1, =0.9, =1.2.11, =1.4.0, =2.7.0...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2021-21692 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2021-21696 via org.jenkins-ci.main:jenkins-core (1.480.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2021-21683 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2021-21683 via org.jenkins-ci.main:jenkins-core (1.480.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...
GHSA-MWG2-3XPV-5V28 CSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin
Micro Focus Application Automation Tools Plugin 6.7 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to connect to attacker-specified URLs using attacker-specified username and password. Additionally, these...
GHSA-7QP2-RGXR-29Q4 Missing permission checks in Micro Focus Application Automation Tools Plugin
Micro Focus Application Automation Tools Plugin 6.7 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to connect to attacker-specified URLs using attacker-specified username and password. Additionally, these...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2021-21611 via org.jenkins-ci.main:jenkins-core (1.480.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...
com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2021-21611 via org.jenkins-ci.main:jenkins-core (1.399)
org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.480.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...
com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2021-21606 via org.jenkins-ci.main:jenkins-core (1.480.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...
com.blazemeter.plugins:blazemeterjenkinsplugin (>=1.0-beta-1, <=1.08-beta-1), com.brianfromoregon:caliper-ci (2.1) +153 more potentially affected by CVE-2021-21608 via org.jenkins-ci.main:jenkins-core (1.424)
org.jenkins-ci.main:jenkins-core MAVEN version 1.424 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =1.0-beta-1, =0.1, =0.9, =1.2.11, =1.4.0, =2.7.0...