13170 matches found
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-31139
JetBrains TeamCity prior to 2025.03 exposes base64 encoded passwords in build logs (CVE-2025-31139). Affects JetBrains TeamCity (CI/CD server); vulnerability arises from passwords being logged in base64 form. Impact: potential credential exposure. Mitigation: upgrade to version 2025.03 or later o...
CVE-2025-31139
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
JetBrains TeamCity 日志信息泄露漏洞
JetBrains TeamCity is a powerful continuous integration and continuous delivery CI/CD tool developed by JetBrains. JetBrains TeamCity suffers from an information disclosure vulnerability that stems from base64 encoded passwords being exposed in build logs. An attacker can exploit the vulnerabilit...
CVE-2025-31139: Insertion of Sensitive Information into Log File
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log...
CVE-2025-30407
Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...
CVE-2025-26869
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Build allows Stored XSS.This issue affects Build: from n/a through 1.0.3...
CVE-2025-26869 WordPress Build theme <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Build allows Stored XSS.This issue affects Build: from n/a through 1.0.3...
CVE-2025-26869 WordPress Build theme <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Build allows Stored XSS.This issue affects Build: from n/a through 1.0.3...
CVE-2025-26869
CVE-2025-26869 is a Stored Cross-Site Scripting (XSS) vulnerability in the Build WordPress plugin, affecting builds up to 1.0.3. The CVSS v3.1 base score is 6.5 (Medium) with Network attack vector, Low attack complexity, and user interaction required. The provided connected documents confirm the ...
Security Bulletin: IBM UrbanCode Build 6.1.7.10 addresses multiple vulnerabilities.
Summary Security Bulletin: IBM UrbanCode Build 6.1.7.10 addresses multiple vulnerabilities, listed in multiple CVEs CVE-2023-34981, CVE-2022-1471, CVE-2022-4065, CVE-2021-23450, CVE-2021-23450, CVE-2022-40151, CVE-2022-41966, CVE-2023-41080, CVE-2022-48285, CBE-2020-11971, CVE-2023-28709,...
Scriptcase 安全漏洞
Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A security vulnerability exists in Scriptcase version v.1.0.002 Build 7, which stems from HTTP response manipulation and could lead to elevation of privilege...
WordPress plugin Build 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-13164 · Jetbrains · Teamcity
Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03 Description: The issue concerns the potential exposure of a base64 encoded password in the build log. Recommendations: For versions prior to 2025.03, update to version 2025.03 or later to resolve t...
CVE-2025-26869: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Build allows Stored XSS.This issue affects Build: from n/a through 1.0.3...
@aicblock/cli (>=1.0.0, <=1.0.1), @angular-devkit/build-angular (>=19.2.1, <=20.0.0-next.2) +34 more potentially affected by CVE-2025-30208 via vite (>=6.2.0, <=6.2.2)
vite NPM version =6.2.0, =1.0.0, =19.2.1, =19.2.1, =0.55.0, =1.0.0, =1.0.410, =5.0.0-alpha.40, =1.0.0-next.1, =3.0.0-BETA.0, =19.1.1-snapshot-1741264224607, =19.1.1-snapshot-1741264224607, =19.1.3 and more Source cves: CVE-2025-30208 Source advisory: OSV:GHSA-X574-M823-4X7W...
@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +40 more potentially affected by CVE-2025-30208 via vite (>=6.1.0, <=6.1.1)
vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...
@adhd/backlog (>=1.0.0, <=1.0.8), @adhd/react-hooks (2.2.1) +445 more potentially affected by CVE-2025-30208 via vite (>=5.0.0, <=5.4.14)
vite NPM version =5.0.0, =1.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview 1.0.1 - @beaker-tools/typescript-toolkit 1.3.0 - @beardeddudes/strapi-types 0.1.1 and more Source cves:...