com.catalogic.ecxjenkins:catalogic-ecx (1.9), com.cloudbees.plugins:build-flow-plugin (>=0.19, <=0.20) +72 more potentially affected by CVE-2018-1000997 via org.jenkins-ci.main:jenkins-core (1.609.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.609.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.catalogic.ecxjenkins:catalogic-ecx 1.9 - com.cloudbees.plugins:build-flow-plugin =0.19,...

com.catalogic.ecxjenkins:catalogic-ecx (1.9), com.cloudbees.plugins:build-flow-plugin (>=0.19, <=0.20) +72 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.609.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.609.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.catalogic.ecxjenkins:catalogic-ecx 1.9 - com.cloudbees.plugins:build-flow-plugin =0.19,...

CVE-2019-10391

Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure...

CVE-2019-10391

Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure...

PT-2019-11785 · Ibm +1 · Jenkins Ibm Application Security On Cloud Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins IBM Application Security on Cloud Plugin versions 1.2.4 and earlier Description: The issue is related to the transmission of configured passwords in plain text as part of job configuration forms, potentially resulting in their exposur...

CVE-2019-10391: Cleartext Transmission of Sensitive Information

Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure...

ibm-application-security showed plain text password in job configuration form fields

ibm-application-security stores service passwords in job configurations. While the password is stored encrypted on disk, it was transmitted in plain text as part of the configuration form. This could result in exposure of the password through browser extensions, cross-site scripting...

Android Fragment Injection vulnerability

Hi, We have recently disclosed a new vulnerability to the Android Security Team. The vulnerability affected many apps, including Settings the one that is found on every Android device, Gmail, Google Now, Dropbox and Evernote. To be more accurate, any App which extended the PreferenceActivity clas...