13474 matches found
org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.555)
org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...
org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2017-2612 via org.jenkins-ci.main:jenkins-core (1.555)
org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...
org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2017-2603 via org.jenkins-ci.main:jenkins-core (1.555)
org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-2610 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-2604 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-2613 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-2609 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-2612 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2017-2608 via org.jenkins-ci.main:jenkins-core (1.554.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-2608 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-2607 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
au.net.causal.maven.plugins:docker-image-archive-maven-plugin (1.0), com.google.code.play2-maven-plugin:play2-maven-plugin (1.0.0-alpha9) +3 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.8.2)
org.codehaus.plexus:plexus-archiver MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - au.net.causal.maven.plugins:docker-image-archive-maven-plugin 1.0 -...
org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.555)
org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...
com.switchfly:gitlab-merge-request-jenkins (2.0.0), org.jenkins-ci.main:jenkins-test-harness (1.638) +4 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.638)
org.jenkins-ci.main:jenkins-core MAVEN version 1.638 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.switchfly:gitlab-merge-request-jenkins 2.0.0 - org.jenkins-ci.main:jenkins-test-harness 1.6...
GHSA-WRGW-V987-5QMW Jenkins CloudShare Docker-Machine Plugin stores credentials in plain text
Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file com.cloudshare.jenkins.CloudShareConfiguration.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...
Jenkins CloudShare Docker-Machine Plugin stores credentials in plain text
Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file com.cloudshare.jenkins.CloudShareConfiguration.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...
com.nirima:docker-plugin (>=0.9-beta1, <=0.13.0), com.nirima:docker-plugin-parent (>=0.9-beta1, <=0.13.0) +26 more potentially affected by CVE-2017-2611 via org.jenkins-ci.main:jenkins-core (1.565.3)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.9-beta1, =0.9-beta1, =2.13.0-beta-2, =1.0, =1.0, =1.0, =0.1.0,...
GHSA-H62F-WM92-2CMW Docker Registry has Allocation of Resources Without Limits or Throttling
Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service memory consumption via the manifest endpoint. Specific Go Packages Affected...
Docker Registry has Allocation of Resources Without Limits or Throttling
Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service memory consumption via the manifest endpoint. Specific Go Packages Affected...
io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2019-1003041 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...