net.masterthought.jenkins:cucumber-reports (>=1.3.0, <=2.5.1), org.jenkins-ci.main:jenkins-test-harness (1.577) +21 more potentially affected by CVE-2018-1000406 via org.jenkins-ci.main:jenkins-core (1.577)

org.jenkins-ci.main:jenkins-core MAVEN version 1.577 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.masterthought.jenkins:cucumber-reports =1.3.0, =2.5.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1000997 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2017-1000401 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2017-1000395 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.444), org.jenkins-ci.main:jenkins-war (1.444) +10 more potentially affected by CVE-2017-1000391 via org.jenkins-ci.main:jenkins-core (1.444)

org.jenkins-ci.main:jenkins-core MAVEN version 1.444 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.444 - org.jenkins-ci.main:jenkins-war 1.444 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2017-1000391 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1000169 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1999044 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1000864 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1999004 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

org.jenkins-ci.main:jenkins-test-harness (1.490), org.jenkins-ci.main:jenkins-war (1.490) +4 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.490)

org.jenkins-ci.main:jenkins-core MAVEN version 1.490 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.490 - org.jenkins-ci.main:jenkins-war 1.490 -...

RewardsController Emission Manager Can Authorize Users to Claim on Behalf of the AaveV3YieldSource Contract and Siphon Yield

Lines of code Vulnerability details Impact The AaveV3YieldSource contract allows the manager or owner of the contract to claim rewards from Aave's rewards controller. However, there is an external dependency on this periphery Aave contract such that the emission manager of the RewardsController...

UBUNTU-CVE-2022-26110

An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon...

HTCondor security vulnerabilities

HTCondor is a workload management system at the University of Wisconsin-Madison USA. The system provides job queuing mechanisms, scheduling policies, prioritization schemes, resource monitoring, and resource management. A security vulnerability exists in HTCondor that stems from the fact that whe...

One co-creator with a small share can get 100% of the funds in the splitter

Lines of code Vulnerability details Impact One co-creator with a small share can get 100% of the funds by calling the incrementWindow function from an attacker contract that mimics RoyaltyVault. He can then create one or multiple fake windows and claim them to get the full balance of the splitter...

Sifchain: Subdomain Takeover on proxies.sifchain.finance pointing to vercel

Hello Team, Subdomain takeover vulnerabilities occur when a subdomain subdomain.example.com is pointing to a service e.g. GitHub pages, Heroku, etc. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that subdomain...

Missing input validation in _claim function at RewardDistributor.sol

Lines of code Vulnerability details Description All the functions present in the contract were found to have input validation except the claim functions. The function at inputs the user's value and then is processed at and is lacking all form of input validation. Impact Users can supply illegal...