EUVD-2026-17041

In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...

OpenSCAP Libraries 1.3.13

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...

OpenSCAP Libraries 1.3.12

The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...

[SECURITY] Fedora 41 Update: containers-common-0.60.4-4.fc41

This package contains common configuration files and documentation for contai ner tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from pro jects which are vendored into Podman, Buildah, Skopeo, etc. but they are not packag ...

com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.11), com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5) +3 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.0.4)

org.jenkins-ci.plugins:credentials MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.compuware.jenkins:compuware-common-configuration =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0,...

PT-2022-17467 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service in the Modem component due to a reachable assertion while processing the common config procedure. This affects various Qualcomm...

GHSA-G43X-PCC9-F472 Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to change the contents of the Topaz Workbench CLI home directory on agents to have Jenkins parse a crafted file that uses...

com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=2.0, <=2.3.7) +2 more potentially affected by CVE-2022-41226 via com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.8)

com.compuware.jenkins:compuware-common-configuration MAVEN version =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0, =1.0.6 Source cves: CVE-2022-41226 Source advisory: GHSA-G43X-PCC9-F472...

com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=2.0, <=2.3.7) +2 more potentially affected by CVE-2022-41226 via com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.8)

com.compuware.jenkins:compuware-common-configuration MAVEN version =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0, =1.0.6 Source cves: CVE-2022-41226 Source advisory: OSV:GHSA-G43X-PCC9-F472...

CVE-2022-41226

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-41226

CVE-2022-41226 affects Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier. The connected sources confirm the root cause is that the plugin’s XML parser is not configured to mitigate XML External Entity (XXE) attacks. This can enable XXE in parsing XML data, with the documented impli...

com.compuware.jenkins:compuware-scm-downloader (>=2.0.0, <=2.0.5), com.compuware.jenkins:compuware-topaz-for-total-test (>=2.0, <=2.3.7) +2 more potentially affected by CVE-2022-41226 via com.compuware.jenkins:compuware-common-configuration (>=1.0.2, <=1.0.8)

com.compuware.jenkins:compuware-common-configuration MAVEN version =1.0.2, =2.0.0, =2.0, =1.0.2, =1.0.0, =1.0.6 Source cves: CVE-2022-41226 Source advisory: MEND:CVE-2022-41226...

CVE-2022-41226: Improper Restriction of XML External Entity Reference

Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Jenkins Compuware Common Configuration Plugin code-related vulnerabilities

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2021-21606 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2021-21606 Source advisory:...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2020-2161 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2020-2161 Source advisory:...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +278 more potentially affected by CVE-2020-2105 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.150.3)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2020-2105 Source advisory: GHSA-7XP8-7WQX-5HQX...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2018-1999002 Source advisory:...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +277 more potentially affected by CVE-2018-1999004 via org.jenkins-ci.main:jenkins-core (>=2.0-alpha-1, <=2.57)

org.jenkins-ci.main:jenkins-core MAVEN version =2.0-alpha-1, =0.0.5, =1.0.0, =0.1.1, =1.0.5, =2.0.0, =2.0, =1.0.2, =1.0.0, =2.0.0, =0.1.0-rc33, =0.1.0-rc33, =2.37.0, =1.4, =1.5 and more Source cves: CVE-2018-1999004 Source advisory:...

CVE-2021-27358

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set...