12 matches found
VulnCheck KEV: CVE-2022-36883
A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...
EUVD-2023-1225
Malicious code in bioql PyPI...
EUVD-2023-1344
Malicious code in bioql PyPI...
EUVD-2023-1371
Malicious code in bioql PyPI...
EUVD-2022-7433
Malicious code in bioql PyPI...
EUVD-2022-3741
Malicious code in bioql PyPI...
CVE-2024-28159
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...
Information disclosure
A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build...
CVE-2024-28159
The Jenkins Subversion Partial Release Manager Plugin versions 1.0.1 and earlier contain a missing permission check. This vulnerability allows attackers who possess Item/Read permissions to trigger a build . Exploitation details are not provided in the documents.
CVE-2023-40349
The CVE-2023-40349 entry concerns Jenkins Gogs Plugin (versions 1.0.15 and earlier). The vulnerability arises from improper initialization of the option intended to secure the webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs. The advisory notes that the webhook endpo...
