org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...

EUVD-2017-3883

Malware in sbrugna...

EUVD-2017-3842

Malware in sbrugna...

EUVD-2016-2423

Malware in sbrugna...

EUVD-2017-3879

Malware in sbrugna...

EUVD-2015-6245

Malware in sbrugna...

EUVD-2016-2422

Malware in sbrugna...

EUVD-2016-2421

Malware in sbrugna...

EUVD-2018-0942

Malware in sbrugna...

EUVD-2023-0486

Malicious code in bioql PyPI...

CVE-2023-24451

A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2022-34808

Jenkins Cisco Spark Plugin 1.1.1 and earlier stores bearer tokens unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins.workflow:puppet-enterprise-pipeline (>=1.2.1, <=1.3.1) +5 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.2)

org.jenkins-ci.plugins:plain-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =1.2.1, =1.0.0, =1.58, =1.18, =1.0,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...

Jenkins Cisco Spark Plugin Password Storage Unauthorized Access

The vulnerability of the Jenkins Cisco Spark Plugin is related to the storage of passwords in an unencrypted form in the configuration file org.jenkinsci.plugins.spark.SparkNotifier.xml. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected informati...

Jenkins Cisco Spark Notifier Plugin Access Control

The vulnerability of the Jenkins Cisco Spark Notifier Plugin is related to deficiencies in access control when processing HTTP endpoints. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-5, <=0.1-beta-7) +4 more potentially affected by CVE-2023-24422 via org.jenkins-ci.plugins:script-security (1.6)

org.jenkins-ci.plugins:script-security MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5,...