com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.15, <=1.27), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (1.5.0) +8 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.481)

org.jenkins-ci.main:jenkins-core MAVEN version 1.481 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.15, =2.4, =2.5.4 Source cves: CVE-2026-53438...

EUVD-2022-2305

Malicious code in bioql PyPI...

com.mabl.integration.jenkins:mabl-integration (>=0.0.5, <=0.0.19), org.jenkins-ci.plugins:hockeyapp (>=1.3.0, <=1.3.3) +2 more potentially affected by CVE-2024-39458 via org.jenkins-ci.plugins:structs (1.13)

org.jenkins-ci.plugins:structs MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:structs and may be impacted: - com.mabl.integration.jenkins:mabl-integration =0.0.5, =1.3.0, =1.2.1, =2.0.0, =2.1.0 Source cves:...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.15, <=1.27), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (1.5.0) +8 more potentially affected by CVE-2017-1000399 via org.jenkins-ci.main:jenkins-core (1.481)

org.jenkins-ci.main:jenkins-core MAVEN version 1.481 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.15, =2.4, =2.5.4 Source cves: CVE-2017-10003...

Jenkins HockeyApp Plugin stores credentials in plain text

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

GHSA-45FR-W365-F7PM Jenkins HockeyApp Plugin stores credentials in plain text

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.15, <=1.27), eu.markov.jenkins.plugin.mvnmeta:maven-metadata-plugin (1.5.0) +8 more potentially affected by CVE-2018-1999001 via org.jenkins-ci.main:jenkins-core (1.481)

org.jenkins-ci.main:jenkins-core MAVEN version 1.481 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.15, =2.4, =2.5.4 Source cves: CVE-2018-19990...

CloudBees Jenkins HockeyApp Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . HockeyApp Plugin is used in one of the...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

Design/Logic Flaw

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003053

The CVE-2019-1003053 entry concerns the Jenkins HockeyApp Plugin, where credentials are stored in plaintext in job config.xml files on the Jenkins master. The underlying issue is improper credential handling in the plugin, making secrets viewable to users with Extended Read permission or anyone w...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

CVE-2019-1003053

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

PT-2019-11343 · Jenkins · Jenkins Hockeyapp Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins HockeyApp Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner in job config.xml files on the Jenkins master. These credentials can be accessed by users who have...

CVE-2019-1003053: Missing Encryption of Sensitive Data

Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

HockeyApp stores credentials in plain text

HockeyApp stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...