PT-2022-8977

Name of the Vulnerable Software and Affected Versions Countdown Timer affected versions not specified Description A problematic issue was found in the Macro Handler component, leading to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

PT-2022-8974

Name of the Vulnerable Software and Affected Versions PlantUML version 6.43 Description A vulnerability was found in the Database Information Macro component, which can be exploited to lead to cross-site scripting. The attack can be launched remotely. Recommendations For version 6.43, consider...

CVE-2020-36523: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

PT-2022-8976

Name of the Vulnerable Software and Affected Versions Linking affected versions not specified Description A problematic vulnerability has been found in Linking, affecting an unknown part of the New Windows Macro component. This issue leads to cross-site scripting and can be initiated remotely. Th...

CVE-2022-31001

Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause crash. This type of crash may be caused by define MATCHs, m strncmps, m, n = sizeofm - 1 == 0, which will make n...

Ransomware-Simulator - Ransomware Simulator Written In Golang

The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware behaviour, such as: Staging from a Word document macro Deleting Volume Shadow Copies Encrypting documents embedded and dropped by the simulator into...

RevoWorks incomplete filtering of MS Office v4 macros

Overview RevoWorks SCVX, RevoWorks Browser and RevoWorks Desktop provided by J's Communication Co., Ltd. enables users to execute web browsers, accessing drives, folders, files and registries in a sandboxed environment. Users can download files from the internet to the sandboxed environment,...

Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin

An XML external entities XXE vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31), org.jenkins-ci.plugins:antexec (1.11) +10 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.10)

org.jenkins-ci.plugins:token-macro MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =5.0, =1.3.1, =1.0.1, =1.0, =0.1, =2.38, =1.4.1,...

com.nirima:docker-plugin (>=0.18, <=1.0.4), org.jenkins-ci.plugins:antexec (>=1.7, <=1.10) +3 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.7)

org.jenkins-ci.plugins:token-macro MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - com.nirima:docker-plugin =0.18, =1.7, =2.30.1, =1.11, =0.0.5, =0.2.0 Source cves:...

org.jenkins-ci.plugins:any-buildstep (0.1), org.jenkins-ci.plugins:conditional-buildstep (>=0.1, <=1.0) +4 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.4)

org.jenkins-ci.plugins:token-macro MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:any-buildstep 0.1 - org.jenkins-ci.plugins:conditional-buildstep =0.1,...

org.jenkins-ci.plugins:email-ext (>=2.37, <=2.37.2.2), org.jenkins-ci.plugins:nodelabelparameter (>=1.5.0-beta, <=1.5.1) +5 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.9)

org.jenkins-ci.plugins:token-macro MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:email-ext =2.37, =1.5.0-beta, =1.0.3, =2.0, =0.1-beta, =0.6.8, =1.1.1...

org.jenkins-ci.plugins:email-ext (2.36), se.diabol.jenkins.pipeline:delivery-pipeline-plugin (>=0.6.1, <=0.6.7) potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.8.1)

org.jenkins-ci.plugins:token-macro MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:email-ext 2.36 - se.diabol.jenkins.pipeline:delivery-pipeline-plugin...

org.jenkins-ci.plugins:email-ext (>=2.31, <=2.35.1), org.jenkins-ci.ruby-plugins:yammer (1.1.0) potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.8)

org.jenkins-ci.plugins:token-macro MAVEN version 1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:email-ext =2.31, =2.35.1 - org.jenkins-ci.ruby-plugins:yammer 1.1.0...

de.tsystems.mms.apm:performance-signature-viewer (>=2.5.8, <=2.5.8.1), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.2.0-beta-1) +37 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (>=2.0, <=2.7)

org.jenkins-ci.plugins:token-macro MAVEN version =2.0, =2.5.8, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =1.0.0-b22, =0.3.0-beta-1, =1.1.0, =3.7.0, =1.1.7, =1.7.0, =2.0.0, =2.15, =2.18 and more Source cves: CVE-2019-10337 Source advisory: GHSA-G6H2-4X64-C59X...

org.jenkins-ci.plugins:build-name-setter (>=1.0, <=1.3) potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.0)

org.jenkins-ci.plugins:token-macro MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:build-name-setter =1.0, =1.3 Source cves: CVE-2019-10337 Source...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.5, <=0.3.15), io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0.0-b21) +16 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.12.1)

org.jenkins-ci.plugins:token-macro MAVEN version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.5, =1.0-alpha-1, =1.0.0-b13,...

org.jenkins-ci.plugins:build-alias-setter (>=0.1, <=0.4) potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.1)

org.jenkins-ci.plugins:token-macro MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - org.jenkins-ci.plugins:build-alias-setter =0.1, =0.4 Source cves: CVE-2019-10337 Source...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.1.2, <=1.7.1) +42 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.5.1)

org.jenkins-ci.plugins:token-macro MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack =1.7.2, =1.1.2, =0.1, =3.6.0,...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.biouno:uno-choice (>=1.0, <=1.4) +5 more potentially affected by CVE-2019-10337 via org.jenkins-ci.plugins:token-macro (1.6)

org.jenkins-ci.plugins:token-macro MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:token-macro and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.0, =0.2.8, =2.29, =2.6, =1.1, =1.2.1...