Batched HTTP requests may set incorrect `cache-control` response header

Impact In Apollo Server 3 and 4, the cache-control HTTP response header may not reflect the cache policy that should apply to an HTTP request when that HTTP request contains multiple operations using HTTP batching. This could lead to data being inappropriately cached and shared. Apollo Server...

GHSA-9523-474X-5H36 Cross site scripting in Jenkins Mission Control Plugin

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

WordPress Core Control plugin <= 1.2.1 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary Settings Update via Cross-Site Request Forgery CSRF vulnerability was discovered by Daniel Ruf in the WordPress Core Control plugin versions = 1.2.1. Solution Deactivate and delete. This plugin has been closed as of May 18, 2022 and is not available for download. This closure is permane...

Enterprise Manager FMW Control Plugin Data Access Modification DoS

The vulnerability of the FMW Control Plugin component of the Enterprise Manager for Fusion Middleware software from Oracle exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain read access to data, modify data, or cause a partial service...

CVE-2021-2008

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: FMW Control Plugin. The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2021-2134: Undefined Security Weakness

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: FMW Control Plugin. The supported version that is affected is 12.2.1.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterpri...

PT-2021-2939

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager component: FMW Control Plugin version 12.2.1.4 Description The issue is related to insufficient input validation in the FMW Control Plugin component of Oracle Enterprise Manager for Fusion Middleware. This allows a...

PT-2021-2916

Name of the Vulnerable Software and Affected Versions Enterprise Manager for Fusion Middleware versions 11.1.1.9 through 12.2.1.3 Description The issue exists due to insufficient input validation in the FMW Control Plugin component. It allows a remote attacker to gain read access to data, modify...

CVE-2021-2008: Undefined Security Weakness

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: FMW Control Plugin. The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Unspecified Vulnerability in Oracle Enterprise Manager for Fusion Middleware

Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 13.4.0.0. An attacker could exploit this vulnerability t...

Unspecified Vulnerability in Oracle Enterprise Manager for Fusion Middleware (CNVD-2021-30937)

Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 12.2.1.4. An attacker could exploit this vulnerability t...

Oracle Enterprise Manager for Fusion Middleware 安全漏洞

Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 13.4.0.0. An attacker could exploit this vulnerability t...

CloudBees Jenkins Jabber Notifier and Control Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

CVE-2021-21634

Jenkins Jabber XMPP notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CloudBees Jenkins Mission Control Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A cross-site scripting vulnerability exists in CloudBees Jenkins Mission Control Plugin version 0.9.16 and earlier. The vulnerability stems from the failure of a...

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

Cross site scripting

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

CVE-2019-16563

Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties...

CVE-2019-16563

The CVE-2019-16563 entry concerns Jenkins Mission Control Plugin (versions 0.9.16 and earlier). The vulnerability is a stored XSS caused by the plugin not escaping job display names and build names displayed in its view, enabling an attacker who can modify these properties to inject script. Impac...