com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

EUVD-2017-6421

Malware in sbrugna...

EUVD-2017-7060

Malware in sbrugna...

EUVD-2025-13348

Malicious code in bioql PyPI...

EUVD-2022-4069

Malicious code in bioql PyPI...

Ideneo ProGet Authentication Bypass Information Disclosure

The vulnerability of the Inedo ProGet package management system relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service failures or disclose protected information...

CVE-2018-1999034

A man in the middle vulnerability exists in Jenkins Inedo ProGet Plugin 0.8 and earlier in ProGetApi.java, ProGetConfig.java, ProGetConfiguration.java that allows attackers to impersonate any service that Jenkins connects to...

CVE-2017-14944

Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060...

Inedo ProGet 安全漏洞

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from improper input cleanup in the activationMessage field, and could lead to an elevated privilege user executing a stored cross-site scripting attack...

Inedo ProGet 安全漏洞

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from improper input cleanup in the comments section and could lead to an elevated privilege user executing a stored cross-site scripting attack...

Inedo ProGet 安全漏洞

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5 that stems from a low-privileged user having access to changed information in backups, including user IDs, email addresses, and device UUIDs...

Inedo ProGet 安全漏洞

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from a low-privileged user being able to retrieve passwords for managed devices and utilize MDM-restricted features...

Inedo ProGet 安全漏洞

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from a low-privileged user having access to configuration file information containing details of allowed/prohibited features...

Inedo ProGet 安全漏洞

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from the possibility that device activation data could be downloaded as a CSV file by an elevated privileged user and cause damage to the PC, allowing an...

CVE-2025-47244

Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C reflection layer, as demonstrated by causing a denial of service when an attacker executes a loop calling RestartWeb or obtaining potentially sensitive information. Exploitation can occur if...

CVE-2025-47244

Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C reflection layer, as demonstrated by causing a denial of service when an attacker executes a loop calling RestartWeb or obtaining potentially sensitive information. Exploitation can occur if...

CVE-2025-47244

Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C reflection layer, as demonstrated by causing a denial of service when an attacker executes a loop calling RestartWeb or obtaining potentially sensitive information. Exploitation can occur if...