EUVD-2022-1332

Malicious code in bioql PyPI...

EUVD-2022-1538

Malicious code in bioql PyPI...

CVE-2022-28156

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace...

CVE-2022-28155

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2023-27901 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2021-21608 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2020-2231 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2019-10383 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2017-1000401 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2017-1000392 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2018-1000193 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2018-1000192 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

com.cisco.step.jenkins.plugins:people-redirector (>=1.0, <=1.3), org.jenkins-ci.main:jenkins-test-harness (1.415) +6 more potentially affected by CVE-2019-1003049 via org.jenkins-ci.main:jenkins-core (1.415)

org.jenkins-ci.main:jenkins-core MAVEN version 1.415 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cisco.step.jenkins.plugins:people-redirector =1.0, =1.1, =0.0.5, =0.0.9 -...

Jenkins Pipeline Phoenix AutoTest Plugin XML External Entity Injection Vulnerability

Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins.The Jenkins Pipeline Phoenix AutoTest Plugin 1.3 and earlier versions are vulnerable to XML external entity injection, which can be exploited by remote attackers to...

XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the readXml or writeXml build step to have Jenkins parse a crafted file that uses external entities for...

GHSA-RWG2-W82X-V57J XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the readXml or writeXml build step to have Jenkins parse a crafted file that uses external entities for...

GHSA-6H2C-G688-Q9QR Path traversal in Jenkins Phoenix AutoTest Plugin

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace...

Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...