Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-4172

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.00024EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 3:18 p.m.2 views

CVE-2020-2156

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.3CVSS6.8AI score0.00024EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 10:25 a.m.7 views

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS6.7AI score0.00075EPSS
Exploits0References1
OSV
OSV
added 2022/05/24 5:10 p.m.14 views

GHSA-HM57-4QPX-F734 Credentials transmitted in plain text by Jenkins DeployHub Plugin

DeployHub Plugin stores credentials in job config.xml files as part of its configuration. While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form by DeployHub Plugin 8.0.14 and earlier. These credentials could be viewed by users wit...

3.1CVSS4.4AI score0.00024EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/24 5:10 p.m.18 views

Credentials transmitted in plain text by Jenkins DeployHub Plugin

DeployHub Plugin stores credentials in job config.xml files as part of its configuration. While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form by DeployHub Plugin 8.0.14 and earlier. These credentials could be viewed by users wit...

4.3CVSS5AI score0.00024EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/05/13 1:15 a.m.12 views

GHSA-9M3C-XFHF-53MH Jenkins DeployHub Plugin stores credentials in plain text

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

4.3CVSS8.7AI score0.00075EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:15 a.m.16 views

Jenkins DeployHub Plugin stores credentials in plain text

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

8.8CVSS6.8AI score0.00075EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2020/09/18 12:0 a.m.1 views

CloudBees Jenkins DeployHub Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . DeployHub Plugin is used in which an...

4.3CVSS6.2AI score0.00024EPSS
Exploits0References1
NVD
NVD
added 2020/03/09 4:15 p.m.7 views

CVE-2020-2156

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.3CVSS4.6AI score0.00024EPSS
Exploits0References2
OSV
OSV
added 2020/03/09 4:15 p.m.8 views

CVE-2020-2156

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.3CVSS6.8AI score
Exploits0References2
Prion
Prion
added 2020/03/09 4:15 p.m.10 views

Code injection

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4CVSS4.6AI score0.00024EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/03/09 3:1 p.m.9 views

CVE-2020-2156

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.6AI score0.00024EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2020/03/09 3:1 p.m.29 views

CVE-2020-2156

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...

4.3CVSS1.7AI score0.00024EPSS
Exploits0References2
CVE
CVE
added 2020/03/09 3:1 p.m.62 views

CVE-2020-2156

The CVE-2020-2156 issue affects Jenkins DeployHub Plugin (up to and including 8.0.14). The root cause is that credentials are transmitted in plain text as part of job configuration forms and, although encrypted on disk in config.xml, can be viewed by users with Extended Read permission, potential...

4.3CVSS4.6AI score0.00024EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/03/09 12:0 a.m.1 views

PT-2020-15373 · Jenkins · Jenkins Deployhub Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins DeployHub Plugin versions 8.0.14 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. The credentials are...

4.3CVSS4.2AI score0.00024EPSS
Exploits0References7
CNVD
CNVD
added 2019/10/15 12:0 a.m.1 views

CloudBees Jenkins DeployHub Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . DeployHub Plugin is used in which an...

8.8CVSS6.9AI score0.00075EPSS
Exploits0References1
OSV
OSV
added 2019/04/04 4:29 p.m.1 views

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS6.5AI score
Exploits0References3
NVD
NVD
added 2019/04/04 4:29 p.m.8 views

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS8.7AI score0.00075EPSS
Exploits0References3
Prion
Prion
added 2019/04/04 4:29 p.m.10 views

Design/Logic Flaw

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

4CVSS8.6AI score0.00075EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2019/04/04 3:38 p.m.28 views

CVE-2019-10286

Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

8.8CVSS3.2AI score0.00075EPSS
Exploits0References3
Rows per page
Query Builder