1615 matches found
Input validation
Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM...
CVE-2019-16558
CVE-2019-16558 affects the Jenkins Spira Importer Plugin, versions up to 3.2.3. The root cause is that the plugin disables SSL/TLS certificate validation in the Jenkins master JVM, allowing potential man-in-the-middle exposure. CVSS shows network attack with high impact on confidentiality (C) and...
CVE-2019-16558
Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM...
CVE-2019-16558
Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM...
PT-2019-14713 · Jenkins · Jenkins Spira Importer Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Spira Importer Plugin versions 3.2.3 and earlier Description: The issue concerns the disabling of SSL/TLS certificate validation for the Jenkins master JVM. Recommendations: For Jenkins Spira Importer Plugin versions 3.2.3 and earlier...
CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2020-17205)
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Spira Importer Plugin is used in one of the SpiraPla...
CVE-2019-16543
Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-16543
Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
Design/Logic Flaw
Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-16543
The CVE-2019-16543 entry affects Jenkins Spira Importer Plugin versions 3.2.2 and earlier, where credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master. This exposes sensitive credentials to anyone with access to the master filesystem. Concretely, the r...
CVE-2019-16543
Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-16543
Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
PT-2019-14698 · Jenkins · Jenkins Spira Importer Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Spira Importer Plugin versions 3.2.2 and earlier Description: The issue concerns the storage of credentials in the global configuration file on the Jenkins master. Credentials are stored unencrypted, allowing users with access to the...
WordPress wp-ultimate-csv-importer plugin cross-site request forgery vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wp-ultimate-csv-importer plugin is used in which a CSV file import/export plugin. A cross-site request forgery vulnerabili...
CVE-2018-20967
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
Cross site request forgery (csrf)
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
CVE-2018-20967
The CVE-2018-20967 issue affects the WordPress plugin wp-ultimate-csv-importer prior to version 5.6.1, which is vulnerable to CSRF. Multiple sources (NVD, Red Hat, CNVD, OpenVAS, WPVulnDB, PT-2019-10403) confirm the affected software and the vulnerability class, with remediation guidance consiste...
CVE-2018-20967
The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF...
WordPress wp-ultimate-csv-importer plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wp-ultimate-csv-importer plugin is used in which a CSV file import/export plugin. A cross-site scripting vulnerability...