ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +2157 more potentially affected by CVE-2010-3700 via org.acegisecurity:acegi-security (>=1.0.0 <=1.0.7)

org.acegisecurity:acegi-security MAVEN version =1.0.0, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =1.17.3 and more Source cves: CVE-2010-3700 Source advisory: OSV:GHSA-3295-H9QX-R82X...

org.jenkins-ci.plugins:job-dsl (>=1.25 <=1.32) potentially affected by CVE-2018-1000152 via org.jenkins-ci.plugins:vsphere-cloud (=1.1.11)

org.jenkins-ci.plugins:vsphere-cloud MAVEN version =1.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:vsphere-cloud and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.25, =1.32 Source cves: CVE-2018-1000152 Source...

org.jenkins-ci.plugins:seed (>=0.8.0 <=2.1.4) potentially affected by CVE-2019-1003034 via org.jenkins-ci.plugins:job-dsl (>=1.34 <=1.50)

org.jenkins-ci.plugins:job-dsl MAVEN version =1.34, =0.8.0, =2.1.4 Source cves: CVE-2019-1003034 Source advisory: OSV:GHSA-5R74-PGMQ-92MM...

Script security sandbox bypass in Jenkins Job DSL Plugin

A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy,...

GHSA-5R74-PGMQ-92MM Script security sandbox bypass in Jenkins Job DSL Plugin

A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy,...

Asus DSL-N14U-B1 Denial of Service Vulnerability

The ASUS DSL-N14U-B1 is a router device from Asus China. A denial of service vulnerability exists in the Asus DSL-N14U-B1 version 1.1.2.3805. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited by a remote attacker to cause a denial of service Do...

CVE-2021-3254

Asus DSL-N14U-B1 1.1.2.3805 allows remote attackers to cause a Denial of Service DoS via a TCP SYN scan using nmap...

CVE-2021-3254

Asus DSL-N14U-B1 1.1.2.3805 allows remote attackers to cause a Denial of Service DoS via a TCP SYN scan using nmap...

CVE-2021-3254

The CVE-2021-3254 entry applies to Asus DSL-N14U-B1 routers (firmware version 1.1.2.3_805). The root cause is a failure to properly handle certain incoming error messages, allowing a remote attacker to cause a Denial of Service by performing a TCP SYN scan (e.g., with nmap). No additional exploit...

CVE-2021-3254

Asus DSL-N14U-B1 1.1.2.3805 allows remote attackers to cause a Denial of Service DoS via a TCP SYN scan using nmap...

[SECURITY] Fedora 36 Update: golang-github-pact-foundation-1.5.1-5.fc36

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

GHSA-JMXR-W2JC-QP7W Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL

Jenkins promoted builds Plugin provides dedicated support for defining promotions using Job DSL Plugin. promoted builds Plugin 873.v6149dbd64130 and earlier does not validate the names of promotions defined in Job DSL. This allows attackers with Job/Configure permission to create a promotion with...

Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL

Jenkins promoted builds Plugin provides dedicated support for defining promotions using Job DSL Plugin. promoted builds Plugin 873.v6149dbd64130 and earlier does not validate the names of promotions defined in Job DSL. This allows attackers with Job/Configure permission to create a promotion with...

CVE-2022-29049

Jenkins promoted builds Plugin 873.v6149dbd64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name...

Design/Logic Flaw

Jenkins promoted builds Plugin 873.v6149dbd64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name...

CVE-2022-29049

CVE-2022-29049 affects Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier (except 3.10.1). The issue: the plugin does not validate the names of promotions defined via Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name. The description im...

PT-2022-3217

Name of the Vulnerable Software and Affected Versions D-Link DSL-G2452DG version ME 2.00 Description The issue is related to insecure permissions in the implementation of the execute cmd.cgi script in the D-Link DSL-G2452DG router's firmware. This could allow an attacker to execute arbitrary...

D-Link DSL-2760U Gateway Cross Site Scripting (CVE-2013-5223)

A cross-site scripting vulnerability exists in D-Link DSL-2760U Gateway. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

[SECURITY] Fedora 34 Update: ghc-hakyll-4.13.4.0-5.1.fc34

Hakyll is a static website compiler library. It provides you with the tools to create a simple or advanced static website using a Haskell DSL and formats su ch as markdown or RST. You can find more information, including a tutorial, on t he website:...

Friday Squid Blogging: Unexpectedly Low Squid Population in the Arctic

Research: Abstract: The retreating ice cover of the Central Arctic Ocean CAO fuels speculations on future fisheries. However, very little is known about the existence of harvestable fish stocks in this 3.3 million­–square kilometer ecosystem around the North Pole. Crossing the Eurasian Basin, we...