CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

Cross site scripting

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

Jenkins Package Version Plugin 1.0.1 and earlier does not escape the name of Package version parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-34193

CVE-2022-34193 relates to the Jenkins Package Version Plugin (versions ≤ 1.0.1). The issue is a stored XSS vulnerability: the plugin does not escape the name of Package version parameters on views displaying parameters, enabling an attacker with Item/Configure permission to inject script. The con...

PT-2022-22062 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Package Version Plugin versions 1.0.1 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the Jenkins Package Version Plugin does not escape the name of Package version parameters ...

@ampproject/toolbox-cli (3.0.0-canary.2), @ampproject/toolbox-update-cache (>=2.7.1-alpha.0, <=3.0.0-canary.2) +47 more potentially affected by CVE-2022-25898 via jsrsasign (>=10.0.0, <=10.5.24)

jsrsasign NPM version =10.0.0, =2.7.1-alpha.0, =1.0.0, =1.0.0, =0.0.1, =0.9.1, =0.9.3, =0.9.3, =0.9.3, =0.9.3, =0.9.3, =10.4.0-snapshot-1623311478116, =14.0.4 and more Source cves: CVE-2022-25898 Source advisory: SNYK:JS-JSRSASIGN-2869122...

CVE-2021-28957 affecting package python-lxml for versions less than 4.8.0-1

CVE-2021-28957 affecting package python-lxml for versions less than 4.8.0-1. An upgraded version of the package is available that resolves this issue...

Slackware: Security Advisory (SSA:2016-141-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21297 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21297 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-23303 affecting package wpa_supplicant for versions less than 2.10-1

CVE-2022-23303 affecting package wpasupplicant for versions less than 2.10-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-27803 affecting package wpa_supplicant for versions less than 2.9-4

CVE-2021-27803 affecting package wpasupplicant for versions less than 2.9-4. A patched version of the package is available...

Mageia: Security Advisory (MGASA-2013-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0182)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0436)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0423)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:3649-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:3611-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:3611-1 Security update for systemd

This update for systemd fixes the following issues: - machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 - Add timestamp to D-Bus events to improve traceability. jscSLE-21894 - busctl: add a timestamp to the output of the busctl monitor command bsc1180225, jscSLE-21894 -...