CVE-2022-34191

CVE-2022-34191 refers to a stored XSS vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin, affecting version 4.8.0.77 and earlier. The issue arises because the plugin does not escape the name of NetStorm Test parameters on views that display parameters, enabling an attacker wi...

PT-2022-22060 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.77 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not escape the name of NetStorm Test...

Jenkins Plugin NS-ND Integration Performance Publisher 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins NS-ND Integration Performance...

CVE-2022-23342

The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login...

MAL-2022-515 Malicious code in @porting-assistant/integration-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757fb325921aaf211808046101e53811f0ac571b5b1f25882a8ea84b4e2ab05c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in socless_integration_packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f8a00449ce9f5cfa113613780b17aa8f8f97ef62e54fc652d2e49eaf0988072 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sb-legacy-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ff01ef0957242defaf96e0855a5d73a8f8941ad7e6463db1eb2a2584512f472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5939 Malicious code in sb-legacy-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ff01ef0957242defaf96e0855a5d73a8f8941ad7e6463db1eb2a2584512f472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1947 Malicious code in cm-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8443ff4c1d4c5c95b7dc9d77e392b50e10171fba355445f2770d97f52f7d02a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cm-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8443ff4c1d4c5c95b7dc9d77e392b50e10171fba355445f2770d97f52f7d02a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6221 Malicious code in sovryn-node-integration-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d8a316d21d24dc79e10223d3c0b2e58efb32ba31dc62b9d09efedcc39a14d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4677 Malicious code in monday-integration-quickstart-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f9d04458f46566c206866695d05f24a298848cee6cd7a96d51652e770671e71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monday-integration-quickstart-app-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de2ecd8dfdada8f48094605e823f311f3362634a9c09c2c66e980f9739fc82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monday-integration-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15bd6b9b0873788f19b25b44217af9e4cb682eecb4e79430a8c4b0eeeac7769e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monday-integration-slack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1101e9f2bfaedb93d309fca08d582a85f84067e01343b07e8f2186b4214f43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4675 Malicious code in monday-integration-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15bd6b9b0873788f19b25b44217af9e4cb682eecb4e79430a8c4b0eeeac7769e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4678 Malicious code in monday-integration-quickstart-app-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de2ecd8dfdada8f48094605e823f311f3362634a9c09c2c66e980f9739fc82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monday-jira-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 682b5d73b34ecea889e484e569bc83c83425599166a52859e1d2e138784cdb78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4676 Malicious code in monday-integration-quickstart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef623d4ad0bb4b34fe648b3d0bfc74030fcbd72f082694d9378bd7a7f6ad93ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4680 Malicious code in monday-jira-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 682b5d73b34ecea889e484e569bc83c83425599166a52859e1d2e138784cdb78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...