22485 matches found
CVE-2026-70444
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2026-70444
The CVE covers a missing permission check in the Jenkins Violation Comments to GitLab Plugin (versions 2.62.0 and earlier). The underlying issue is an HTTP endpoint that does not enforce correct permissions, allowing users with Overall/Read privileges to enumerate credentials IDs stored in Jenkin...
MAL-2026-12359 Malicious code in crypto-javas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75003e4aab1668c5d9b7f1216e6b356473ebb6e834da3a015e920807e8717ed9 The package's postinstall hook runs setup.js, which enumerates process.env excluding only a small OS blocklist for PATH/HOME/USER/SHELL/LANG, collect...
Missing permission check in violation-comments-to-gitlab allows enumerating credentials IDs
violation-comments-to-gitlab 2.62.0 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using anothe...
Jenkins plugins Multiple Vulnerabilities (2026-08-05)
According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2... CVE-2026-70426 - Jenkins 2.575 and...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: open-webui, localstack, airflow, ggshield, mitmproxy, opal, airflow-core, crossplane-function-pythonic, openstack-horizon-2026.1, openstack-keystone-2025.2, dask-kubernetes-fips, apache-beam-python-3.12-sdk, duplicity, openstack-horizon-2025.2, request-1276,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: open-webui, localstack, airflow, ggshield, mitmproxy, opal, airflow-core, crossplane-function-pythonic, openstack-horizon-2026.1, openstack-keystone-2025.2, dask-kubernetes-fips, apache-beam-python-3.12-sdk, duplicity, openstack-horizon-2025.2, request-1276,...
CVE-2026-14351 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-8JC8-CVQJ-P926 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-3093 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-45H8-QRQH-XR5V vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-86R3-Q889-HVG2 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-12436 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-4672 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-6336 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-14562 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-2RC9-8CX9-FXPR vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-35PC-QWV6-4858 vulnerabilities
Vulnerabilities for packages: gitlab-runner...