Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2159

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00243EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-4132

Malicious code in bioql PyPI...

4.3CVSS4.1AI score0.00033EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 4:5 a.m.9 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.4AI score0.00243EPSS
Exploits0
OSV
OSV
added 2023/07/12 4:15 p.m.13 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.7AI score
Exploits0References2
NVD
NVD
added 2023/07/12 4:15 p.m.12 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.3AI score0.00243EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/07/12 3:52 p.m.14 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5AI score0.00243EPSS
Exploits0References2
CVE
CVE
added 2023/07/12 3:52 p.m.42 views

CVE-2023-37944

The CVE-2023-37944 issue affects Jenkins Datadog Plugin (versions up to 5.4.1). A missing permission check on an HTTP endpoint allows attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credentials IDs, enabling capture of credentials stored in Jenkins. Mi...

6.5CVSS6.2AI score0.00243EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.3 views

PT-2023-26192 · Jenkins · Jenkins Datadog Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Datadog Plugin versions 5.4.1 and earlier Description: A missing permission check in the Jenkins Datadog Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

6.5CVSS6.1AI score0.00243EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/07/12 12:0 a.m.2 views

Jenkins Plugin Datadog 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.5AI score0.00243EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:35 a.m.1 views

SUSE CVE-2017-1000114

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser...

4.3CVSS4.1AI score0.00033EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/17 12:33 a.m.17 views

Exposure of Sensitive Information in Jenkins Datadog plugin

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser...

4.3CVSS1.1AI score0.00033EPSS
Exploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/13 1:30 a.m.2 views

com.piketec.jenkins.plugins:piketec-tpt (=6.3), io.jenkins.plugins:aws-lambda-cloud (>=0.3 <=0.4) +14 more potentially affected by CVE-2015-8103 via org.jenkins-ci.main:cli (>=1.626 <=1.637)

org.jenkins-ci.main:cli MAVEN version =1.626, =0.3, =1.2, =1.1.2, =1.626, =1.626, =1.626, =1.1.0, =0.1, =0.2, =0.1, =2.4, =1.626, =1.21, =1.0.3, =1.0.18 and more Source cves: CVE-2015-8103 Source advisory: OSV:GHSA-WFW7-6632-XCV2...

9.8CVSS7.2AI score0.86333EPSS
Exploits12
vulnersOsv
vulnersOsv
added 2022/05/13 1:30 a.m.2 views

com.piketec.jenkins.plugins:piketec-tpt (=6.3), io.jenkins.plugins:aws-lambda-cloud (>=0.3 <=0.4) +13 more potentially affected by CVE-2015-5322 via org.jenkins-ci.main:jenkins-core (>=1.626 <=1.637)

org.jenkins-ci.main:jenkins-core MAVEN version =1.626, =0.3, =1.2, =1.1.2, =1.626, =1.626, =1.1.0, =0.1, =0.2, =0.1, =2.4, =1.626, =1.21, =1.0.3, =1.0, =2.0.27 Source cves: CVE-2015-5322 Source advisory: OSV:GHSA-89VC-7FRQ-2RFJ...

5CVSS7.2AI score0.00165EPSS
Exploits0
OSV
OSV
added 2017/10/05 1:29 a.m.11 views

CVE-2017-1000114

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser...

3.1CVSS6AI score
Exploits0References2
NVD
NVD
added 2017/10/05 1:29 a.m.9 views

CVE-2017-1000114

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser...

4.3CVSS3.6AI score0.00033EPSS
Exploits0References2
Prion
Prion
added 2017/10/05 1:29 a.m.9 views

Cross site scripting

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser...

4.3CVSS3.8AI score0.00033EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/10/04 1:0 a.m.10 views

CVE-2017-1000114

The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. While the API key is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the API key for example through browser...

3.6AI score0.00033EPSS
Exploits0References2
CVE
CVE
added 2017/10/04 1:0 a.m.57 views

CVE-2017-1000114

CVE-2017-1000114 concerns the Jenkins/Datadog plugin where the API key used to access Datadog was stored in the global Jenkins configuration and transmitted in plain text via the configuration form, potentially exposing the key through browser extensions or XSS. Documents indicate the plugin was ...

4.3CVSS3.7AI score0.00033EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2017/08/17 12:0 a.m.2 views

CloudBees Jenkins Datadog Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Datadog Plugin is one ...

4.3CVSS4AI score0.00033EPSS
Exploits0References1
Rows per page
Query Builder