52 matches found
com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.403)
org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...
com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.2)
org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...
com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.403)
org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...
EUVD-2022-4530
Malicious code in bioql PyPI...
EUVD-2022-5393
Malicious code in bioql PyPI...
com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2024-43045 via org.jenkins-ci.main:jenkins-core (1.403)
org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...
com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.403)
org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...
com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (2.0.2)
org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...
org.jvnet.hudson.main:hudson-test-harness (1.270), org.jvnet.hudson.main:hudson-war (1.270) +6 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.270)
org.jvnet.hudson.main:hudson-core MAVEN version 1.270 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.270 - org.jvnet.hudson.main:hudson-war 1.270 -...
org.jvnet.hudson.main:hudson-test-harness (1.332), org.jvnet.hudson.main:hudson-war (1.332) +7 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.332)
org.jvnet.hudson.main:hudson-core MAVEN version 1.332 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.332 - org.jvnet.hudson.main:hudson-war 1.332 -...
com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2021-21640 via org.jenkins-ci.main:jenkins-core (1.403)
org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...
com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2021-21615 via org.jenkins-ci.main:jenkins-core (1.403)
org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...
com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +2 more potentially affected by CVE-2020-2138 via org.jenkins-ci.plugins:cobertura (>=1.9.3, <=1.9.7)
org.jenkins-ci.plugins:cobertura MAVEN version =1.9.3, =1.7.2, =1.0.0, =1.8, =1.0, =1.7.2 Source cves: CVE-2020-2138 Source advisory: OSV:GHSA-VPFJ-5GG5-FVFM...
com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +2 more potentially affected by CVE-2020-2138 via org.jenkins-ci.plugins:cobertura (>=1.9.3, <=1.9.7)
org.jenkins-ci.plugins:cobertura MAVEN version =1.9.3, =1.7.2, =1.0.0, =1.8, =1.0, =1.7.2 Source cves: CVE-2020-2138 Source advisory: GHSA-VPFJ-5GG5-FVFM...
GHSA-VPFJ-5GG5-FVFM XXE vulnerability in Jenkins Cobertura Plugin
Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows a user able to control the input files for the 'Publish Cobertura Coverage Report' post-build step to have Jenkins parse a crafted file that uses external entities for...
XXE vulnerability in Jenkins Cobertura Plugin
Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows a user able to control the input files for the 'Publish Cobertura Coverage Report' post-build step to have Jenkins parse a crafted file that uses external entities for...
com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +2 more potentially affected by CVE-2020-2139 via org.jenkins-ci.plugins:cobertura (>=1.9.3, <=1.9.7)
org.jenkins-ci.plugins:cobertura MAVEN version =1.9.3, =1.7.2, =1.0.0, =1.8, =1.0, =1.7.2 Source cves: CVE-2020-2139 Source advisory: OSV:GHSA-M935-CHFP-9F63...
com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +2 more potentially affected by CVE-2020-2139 via org.jenkins-ci.plugins:cobertura (>=1.9.3, <=1.9.7)
org.jenkins-ci.plugins:cobertura MAVEN version =1.9.3, =1.7.2, =1.0.0, =1.8, =1.0, =1.7.2 Source cves: CVE-2020-2139 Source advisory: GHSA-M935-CHFP-9F63...
GHSA-M935-CHFP-9F63 Arbitrary file write vulnerability in Jenkins Cobertura Plugin
An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system. Cobertura Plugin 1.16 sanitizes the file paths to prevent escape from the base directory...
Arbitrary file write vulnerability in Jenkins Cobertura Plugin
An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system. Cobertura Plugin 1.16 sanitizes the file paths to prevent escape from the base directory...