Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-20841

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00105EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/07/11 3:42 p.m.10 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

6.5CVSS7AI score0.00105EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/11 3:42 p.m.7 views

CVE-2025-53674

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

5.3CVSS7.1AI score0.00094EPSS
Exploits0References1
Snyk
Snyk
added 2025/07/09 4:48 p.m.2 views

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the global configuration form where the integration token is not properly masked. An attacker can obtain sensitive authentication credentials by viewing the configuration interface. Remediation...

5.3CVSS7.1AI score0.00094EPSS
Exploits0References2
OSV
OSV
added 2025/07/09 4:15 p.m.0 views

CVE-2025-53674

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

5.3CVSS5.8AI score0.00094EPSS
Exploits0References2
NVD
NVD
added 2025/07/09 4:15 p.m.4 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

6.5CVSS0.00105EPSS
Exploits0References2
NVD
NVD
added 2025/07/09 4:15 p.m.3 views

CVE-2025-53674

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

5.3CVSS0.00094EPSS
Exploits0References2
OSV
OSV
added 2025/07/09 4:15 p.m.1 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

6.5CVSS5.8AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/09 3:39 p.m.2 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

7AI score0.00105EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/09 3:39 p.m.6 views

CVE-2025-53674

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

0.00094EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/09 3:39 p.m.7 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

0.00105EPSS
Exploits0References1
CVE
CVE
added 2025/07/09 3:39 p.m.17 views

CVE-2025-53674

The CVE-2025-53674 entry affects the Jenkins Sensedia Api Platform Tools Plugin (version 1.0). The underlying issue is that the plugin does not mask the Sensedia API Manager integration token on the global configuration form, enabling potential observers to view the token. This exposure is suppor...

5.3CVSS6.5AI score0.00094EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2025/07/09 3:39 p.m.18 views

CVE-2025-53673

CVE-2025-53673 affects the Jenkins Sensedia Api Platform Tools Plugin (version 1.0). The issue is that the Sensedia API Manager integration token is stored unencrypted in the plugin’s global configuration file on the Jenkins controller, specifically viewable by users with access to the controller...

6.5CVSS6.4AI score0.00105EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/07/09 12:0 a.m.2 views

Jenkins plugin Sensedia Api Platform tools 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

5.3CVSS6.2AI score0.00094EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/05 4:15 p.m.1 views

CVE-2022-2497

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. A malicious developer could exfiltrate an integration's access token by modifying the integration URL...

8.5CVSS6.7AI score0.0159EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/05 12:0 a.m.1 views

PT-2022-17020 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.6 through 15.0.4 GitLab CE/EE versions 15.1 through 15.1.3 GitLab CE/EE versions 15.2 through 15.2.0 Description: An issue has been discovered in GitLab CE/EE where a malicious developer could exfiltrate an...

8.5CVSS6.5AI score0.0159EPSS
Exploits0References11
Rows per page
Query Builder