Lucene search
K

7 matches found

vulnersOsv
vulnersOsv
added 2022/05/17 3:53 a.m.3 views

com.amazonaws:codedeploy (=1.15), com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner (>=1.0.3 <=1.0.5) +332 more potentially affected by CVE-2014-3663 via org.jenkins-ci.main:jenkins-core (>=1.566 <=1.582)

org.jenkins-ci.main:jenkins-core MAVEN version =1.566, =1.0.3, =1.0.0, =2.2.0, =2.0, =8.5.0, =1.2, =1.29, =1.0, =1.0, =1.00, =1.2 and more Source cves: CVE-2014-3663 Source advisory: OSV:GHSA-64MC-2M9P-23C8...

6CVSS7.2AI score0.01373EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/05/13 1:30 a.m.6 views

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1304 more potentially affected by CVE-2015-5317 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.625.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0, =2.2.1, =1.0.3, =1.0.0, =1.0, =1.0.0, =1.2.0 and more Source cves: CVE-2015-5317 Source advisory: OSV:GHSA-8PQX-3RXX-F5PM...

7.5CVSS7.2AI score0.22429EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2022/05/13 1:30 a.m.3 views

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1304 more potentially affected by CVE-2015-5321 via org.jenkins-ci.main:jenkins-core (>=1.396 <=1.625.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0, =2.2.1, =1.0.3, =1.0.0, =1.0, =1.0.0, =1.2.0 and more Source cves: CVE-2015-5321 Source advisory: SNYK:JAVA-ORGJENKINSCIMAIN-9404329...

5CVSS7.2AI score0.02064EPSS
Exploits0
Veracode
Veracode
added 2021/04/20 11:44 p.m.21 views

Insecure Certificate Validation

blackduck is using insecure certificate validation. The vulnerability exists because It does not enforce SSL certificate validation could if the calling code uses either the uploadscan or downloadprojectscans methods...

7.5CVSS1.6AI score0.01112EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/04/20 4:29 p.m.19 views

GHSA-F248-V4QH-X2R6 Improper Certificate Validation in blackduck

Synopsys hub-rest-api-python aka blackduck on PyPI version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases...

8.7CVSS7.5AI score0.01112EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2021/04/20 4:29 p.m.66 views

Improper Certificate Validation in blackduck

Synopsys hub-rest-api-python aka blackduck on PyPI version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases...

7.5CVSS7.3AI score0.01112EPSS
Exploits1References9Affected Software1
PyPA
PyPA
added 2020/11/06 2:15 p.m.4 views

PYSEC-2020-26

Synopsys hub-rest-api-python aka blackduck on PyPI version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases...

7.5CVSS7AI score0.01112EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder