Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-2466

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00024EPSS
Exploits0References5
OSV
OSV
added 2022/05/24 5:15 p.m.17 views

GHSA-4WX5-C723-XVWV Credentials stored in plain text by Jenkins Copr Plugin

Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files as part of its configuration. These credentials can be viewed by users with Extended Read permission or access to the Jenkins controller file system. Copr Plugin 0.6.1 stores these credentials encrypted. This chang...

4.3CVSS4.5AI score0.00024EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/24 5:15 p.m.23 views

Credentials stored in plain text by Jenkins Copr Plugin

Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files as part of its configuration. These credentials can be viewed by users with Extended Read permission or access to the Jenkins controller file system. Copr Plugin 0.6.1 stores these credentials encrypted. This chang...

4.3CVSS4.9AI score0.00024EPSS
Exploits0References5Affected Software1
Fedora
Fedora
added 2020/10/18 3:50 p.m.24 views

[SECURITY] Fedora 32 Update: dnf-plugins-core-4.0.18-1.fc32

Core Plugins for DNF. This package enhances DNF with builddep, config-manag er, copr, debug, debuginfo-install, download, needs-restarting, repoclosure, repograph, repomanage, reposync, changelog and repodiff commands. Additiona lly provides generatecompletioncache passive plugin...

8.5CVSS2.5AI score0.04104EPSS
Exploits0
CNVD
CNVD
added 2020/04/17 12:0 a.m.2 views

CloudBees Jenkins Copr Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Copr Plugin is used in one of the support in...

4.3CVSS6.3AI score0.00024EPSS
Exploits0References1
NVD
NVD
added 2020/04/16 7:15 p.m.10 views

CVE-2020-2177

Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

4.3CVSS4.6AI score0.00024EPSS
Exploits0References2
OSV
OSV
added 2020/04/16 7:15 p.m.3 views

CVE-2020-2177

Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

4.3CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2020/04/16 7:15 p.m.17 views

Design/Logic Flaw

Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

4CVSS4.5AI score0.00024EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/04/16 1:35 p.m.11 views

CVE-2020-2177

Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

4.6AI score0.00024EPSS
Exploits0References2
CVE
CVE
added 2020/04/16 1:35 p.m.70 views

CVE-2020-2177

CVE-2020-2177 affects the Jenkins Copr Plugin (versions 0.3 and earlier). The vulnerability stems from credentials being stored unencrypted in job config.xml files on the Jenkins master, enabling disclosure to users with Extended Read permissions or anyone with access to the master filesystem. Ex...

4.3CVSS4.5AI score0.00024EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/04/16 12:0 a.m.3 views

PT-2020-15390 · Jenkins · Jenkins Copr Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Copr Plugin versions 0.3 and earlier Description: The issue concerns the storage of credentials in an unencrypted manner in job config.xml files on the Jenkins master. These credentials can be accessed by users with Extended Read...

4.3CVSS4.4AI score0.00024EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2018/01/15 12:0 a.m.10 views

Fedora 27 : fedpkg / rpkg (2017-9cac2b8b4a)

Update - Fixed chain-build - Remove hard dependency of bash-completion from fedpkg rpkg - Ignore TestModulesCli if openidc-client is unavailable cqi - Port mbs-build to rpkg mprahl - Add .vscode to .gitignore mprahl - Fix TestPatch.testrediff in order to run with old version of mock cqi - Allow t...

5.6AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2018/01/15 12:0 a.m.19 views

Fedora 27 : python-copr (2017-1fbb5ccbd6)

Change default COPR URL route from http://copr.fedoraproject.org to https://copr.fedorainfracloud.org Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

5.5AI score
Exploits0References3
OpenVAS
OpenVAS
added 2017/11/23 12:0 a.m.12 views

Fedora Update for python-copr FEDORA-2017-1a9068594d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OpenVAS
OpenVAS
added 2017/11/23 12:0 a.m.10 views

Fedora Update for python-copr FEDORA-2017-1fbb5ccbd6

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OpenVAS
OpenVAS
added 2017/11/23 12:0 a.m.9 views

Fedora Update for python-copr FEDORA-2017-60c61b6e79

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2017/11/22 5:9 a.m.11 views

[SECURITY] Fedora 25 Update: python-copr-1.84-1.fc25

COPR is lightweight build system. It allows you to create new project in We bUI, and submit new builds and COPR will create yum repository from latest build s. This package contains python interface to access Copr service. Mostly useful for developers only...

2.9AI score
Exploits0
Fedora
Fedora
added 2017/11/22 2:34 a.m.9 views

[SECURITY] Fedora 26 Update: python-copr-1.84-1.fc26

COPR is lightweight build system. It allows you to create new project in We bUI, and submit new builds and COPR will create yum repository from latest build s. This package contains python interface to access Copr service. Mostly useful for developers only...

2.9AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/11/22 12:0 a.m.11 views

Fedora 26 : python-copr (2017-60c61b6e79)

Change default COPR URL route from http://copr.fedoraproject.org to https://copr.fedorainfracloud.org Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

5.5AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2017/11/22 12:0 a.m.15 views

Fedora 25 : python-copr (2017-1a9068594d)

Change default COPR URL route from http://copr.fedoraproject.org to https://copr.fedorainfracloud.org Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

5.5AI score
Exploits0References3
Rows per page
Query Builder