CVE-2023-35142

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default...

CVE-2023-35142

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default...

Design/Logic Flaw

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default...

CVE-2023-35142

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default...

CVE-2023-35142

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default...

CVE-2023-35142

CVE-2023-35142 affects Jenkins Checkmarx Plugin up to version 2022.4.3, where SSL/TLS certificate validation is disabled by default for connections to the Checkmarx server. The issue, documented in multiple sources (NVD/NASL/Tenable, OSV, CVE lists), has a base CVSSv3.1 score of 8.1 (Network, Hig...

CVE-2023-35142

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default...

Jenkins Plugin Checkmarx 信任管理问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin Checkmarx ...

PT-2023-3634 · Jenkins · Jenkins Checkmarx Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Checkmarx Plugin versions 2022.4.3 and earlier Description: The issue is related to errors in SSL/TLS certificate validation. It may allow a remote attacker to perform a "man-in-the-middle" attack. The plugin disables SSL/TLS validati...

MAL-2023-2692 Malicious code in cxfreezepy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 98b9fe0f574ed33e0a4096ba8774936c73969493c1621244334a739ef4f94f5d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in xml2binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8d6e59c6cb9fb2059b390b3b3677b1be1d9eedbe9f78b8ffa2794d5483e2d6d4 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-2474 Malicious code in discord-spammer-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 992e658db3addbbf4402e9f8bfb5c3a8af81b96c87e70863df390190f52de66b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6525 Malicious code in selfpyintpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13bec999a49bf9dee37e242115164d05756af19ea57d26d0b54b4c67c1f01571 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5233 Malicious code in py-intellibint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c51243b24c705c8e86f895cf56a4aaf31db49b64674882dbef77513f1bc075dc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libguigrandmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6aecdbe6b089ffe59ba97add73503b78ab4c6dc432a5b733ed03687c146effbf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-mcultracraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05f872d3d839e83f4cfa6a29e16e93759396a58f0bb74d8f93ec8f14420b0a40 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqgetlibpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 67186a3694ab2d755a3b406239cd713d96ade3d92d6d45ec1e9d41506af1f3bf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqtoolinfoultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0b8b6487fc957c84302c55c746ea6ba8fc405cbb64a6a20e5e6dab52614b3f2b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4270 Malicious code in libosintliblgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6190ac1bf931e799a1ad07e94c4f41da0a77a0b541c92aa259a5cd7b82b0a6b0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqcvvermask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ff37efac8ff00c6c0fcd45c76f69f5baf4d79c1a6d2beef9826e2569e30c4073 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...