1073 matches found
CVE-2022-23110
Jenkins Publish Over SSH Plugin 1.22 and earlier does not escape the SSH server name, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Administer permission...
CVE-2022-27205
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
CVE-2019-16547
Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to obtain limited information about the plugin configuration and environment...
CVE-2019-16567
A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...
Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense
Today, we are proud to share that Microsoft has been recognized as an overall leader in the KuppingerCole Leadership Compass for Generative AI Defense GAD, an independent report from a leading European analyst firm. This recognition reinforces the work we’ve been doing to deliver enterprise-ready...
Missing Authorization Checks
org.jenkins-ci.plugins, publish-to-bitbucket is vulnerable to missing authorization checks. The vulnerability is due to a missing permission check when accessing credential-related functionality, which allows an attacker with Overall/Read permission to enumerate credential IDs stored in Jenkins...
Authorization Bypass
Jenkins global-build-stats Plugin is vulnerable to Authorization Bypass. The vulnerability is due to missing permission checks in REST API endpoints, where the plugin exposes graph-related APIs without validating the caller’s authorization, and allows attackers with Overall/Read permission to...
EUVD-2025-76080
Malicious code in overalllion-notthedevs npm...
EUVD-2025-62735
Malicious code in overallswordfishrequirement npm...
EUVD-2025-67911
Malicious code in overallternz3n npm...
MAL-2025-89344 Malicious code in overall_wildcat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d9f371246016bcbaa5e2f8cccd375f5378a3ba4aa7880b1460396ac27354bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52855
Malicious code in overall-emerald-mouse npm...
EUVD-2025-52860
Malicious code in overall-aquamarine-badger npm...
EUVD-2025-52854
Malicious code in overall-teal-eel npm...
EUVD-2025-52859
Malicious code in overall-beige-sole npm...
Malicious code in overall-teal-eel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed22e164e9c20139d8e782919f599f27f26200d8cf023d87d2500dd41d85c0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in overall-beige-sole (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac239d2e3e63479217ddfbf43f4552ee2db2f428e7e7805053325df7d892a252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52858
Malicious code in overall-coffee-cougar npm...