CVE-2022-28139

A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

CVE-2022-28139

A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

CVE-2022-28138

A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...

CVE-2022-28139

CVE-2022-28139 affects Jenkins RocketChat Notifier Plugin 1.4.10 and earlier. A missing permission check in a form-validation path allows attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credentials (potential CSRF in related endpoints). Affected versio...

CVE-2022-28138

A cross-site request forgery CSRF vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential...

CVE-2022-28138

CVE-2022-28138 is a CSRF flaw in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier that allows an attacker with no special privileges to cause the controller to connect to a URL of the attacker’s choosing using attacker‑supplied credentials. The linked sources confirm the affected component (...

PT-2022-18837 · Jenkins · Jenkins Rocketchat Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RocketChat Notifier Plugin versions 1.4.10 and earlier Description: A missing permission check in the Jenkins RocketChat Notifier Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using...

PT-2022-18836 · Jenkins · Jenkins Rocketchat Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RocketChat Notifier Plugin versions 1.4.10 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials. This issue arises becau...

The vulnerability in the implementation of NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER for the memory management driver of the NVIDIA Shield TV Experience software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the NVGPUIOCTLCHANNELSETERRORNOTIFIER implementation in the NVMAP graphics processor driver of the NVIDIA Shield TV Experience software device involves access control deficiencies. Exploiting this vulnerability could allow an attacker to trigger a service failure or execute...

CVE-2021-34401

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPUIOCTLCHANNELSETERRORNOTIFIER, where improper access control may lead to code execution, compromised integrity, or denial of service...

PT-2025-8061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the drm/amdkfd component. The problem occurs when the svm range restore work is flushed during process exit,...

The vulnerability of the node-notifier package, related to the failure to take measures to neutralize special elements used in operating system commands, allows a perpetrator to execute arbitrary code.

The vulnerability of the node-notifier package is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Botkube - An App That Helps You Monitor Your Kubernetes Cluster, Debug Critical Deployments And Gives Recommendations For Standard Practices

For complete documentation visit www.botkube.io BotKube integration with Slack, Mattermost or Microsoft Teams helps you monitor your Kubernetes cluster, debug critical deployments and gives recommendations for standard practices by running checks on the Kubernetes resources. You can also ask...

CloudBees Jenkins Jabber Notifier and Control Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

CVE-2021-21634

Jenkins Jabber XMPP notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21634

Jenkins Jabber XMPP notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

CVE-2021-21634

CVE-2021-21634 affects the Jenkins Jabber (XMPP) notifier and control Plugin: versions 1.41 and earlier store passwords in plaintext in the global configuration file hudson.plugins.jabber.im.transport.JabberPublisher.xml on the Jenkins controller, exposing credentials to users with filesystem acc...

PT-2021-14677 · Jenkins · Jenkins Jabber (Xmpp) Notifier/Control Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Jabber XMPP notifier and control Plugin versions 1.41 and earlier Description: The issue concerns the storage of passwords in the global configuration file on the Jenkins controller. Specifically, passwords are stored unencrypted in t...

Jenkins Jabber (XMPP) notifier and control 安全漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...