Lucene search
+L

175 matches found

vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•4 views

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2019-1003050 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...

5.4CVSS0.01321EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/13 1:01 a.m.•2 views

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...

8.8CVSS0.18116EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/05/13 1:00 a.m.•4 views

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2018-1999003 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...

4.3CVSS0.00759EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/05 2:48 a.m.•5 views

columnpack:columnpack-plugin (1.0.3), com.amazonaws:aws-codepipeline (>=0.9, <=0.45) +698 more potentially affected by CVE-2013-0327 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.480.2)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.9, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.9.1 and more Source cves: CVE-2013-0327 Source advisory: OSV:GHSA-RQHG-CXFR-8XQW...

6.8CVSS0.03147EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/04/23 12:40 a.m.•4 views

columnpack:columnpack-plugin (1.0.3), com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.0, <=1.6.3) +634 more potentially affected by CVE-2012-4439 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.0, =0.1, =0.1, =0.5, =1.02.03, =1.0, =1.0.6 and more Source cves: CVE-2012-4439 Source advisory: OSV:GHSA-X97G-3GP9-CF2P...

6.1CVSS0.01849EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/01/21 11:37 p.m.•3 views

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...

4.3CVSS0.01813EPSS
SaveExploits0
osv_cve
osv_cve
•added 2020/03/09 4:15 p.m.•24 views

CVE-2020-2157

Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.3CVSS6.8AI score0.00511EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/09 4:15 p.m.•34 views

CVE-2020-2157

Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.3CVSS4.7AI score0.00511EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/09 3:01 p.m.•93 views

CVE-2020-2157

CVE-2020-2157 affects Jenkins Skytap Cloud CI Plugin, versions 2.07 and earlier. The underlying issue is that credentials are transmitted in plain text as part of job configuration forms, while stored encrypted on disk in config.xml. This can lead to exposure, e.g., to users with Extended Read pe...

4.3CVSS4.6AI score0.00511EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/03/09 3:01 p.m.•6 views

CVE-2020-2157

Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

5.3CVSS0.00511EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/09 12:00 a.m.•10 views

CVE-2020-2157: Cleartext Transmission of Sensitive Information

Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.3CVSS5.5AI score0.00511EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/03/09 12:00 a.m.•20 views

PT-2020-15375 · Jenkins · Jenkins Skytap Cloud Ci Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Skytap Cloud CI Plugin versions 2.07 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. The credentials are...

4.3CVSS4.2AI score0.00511EPSS
SaveExploits0References7
NVD
NVD
•added 2019/11/18 10:15 p.m.•27 views

CVE-2012-4441

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

6.1CVSS6AI score0.01867EPSS
SaveExploits0References3
NVD
NVD
•added 2019/10/16 2:15 p.m.•34 views

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

3.3CVSS3.8AI score0.00241EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/16 2:15 p.m.•30 views

Design/Logic Flaw

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

2.1CVSS3.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/10/16 1:00 p.m.•46 views

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

3.7AI score0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2019/10/16 1:00 p.m.•104 views

CVE-2019-10450

The CVE-2019-10450 entry concerns the Jenkins ElasticBox CI Plugin, which stores credentials unencrypted in the global config.xml on the Jenkins master. The underlying issue is the plaintext storage of sensitive information in the master configuration, enabling any user with master filesystem acc...

3.3CVSS3.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2019/10/16 1:00 p.m.•9 views

CVE-2019-10450

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

4.8CVSS0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/16 12:00 a.m.•7 views

CVE-2019-10450: Cleartext Storage of Sensitive Information

Jenkins ElasticBox CI Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

3.3CVSS5.5AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/16 12:00 a.m.•22 views

PT-2019-11844 · Jenkins · Jenkins Elasticbox Ci Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ElasticBox CI Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global config.xml configuration file on the Jenkins master. This allows users with...

3.3CVSS3.6AI score0.00241EPSS
SaveExploits0References4
Rows per page
Query Builder