Lucene search
+L

26 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-4539

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00781EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:04 a.m.•11 views

SUSE CVE-2020-2239

Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system...

4.3CVSS4.8AI score0.00524EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/13 1:40 a.m.•41 views

GHSA-MC22-25R3-2W9W Parameterized Trigger Plugin fails to check Item/Build permission

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins. The plugin has been adapted to now check for Item/Build permission before triggering a...

6.5CVSS6.5AI score0.00781EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/05/13 1:40 a.m.•28 views

Parameterized Trigger Plugin fails to check Item/Build permission

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins. The plugin has been adapted to now check for Item/Build permission before triggering a...

6.5CVSS3AI score0.00781EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
•added 2022/03/18 4:17 p.m.•114 views

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

5.5CVSS3.9AI score0.00383EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/03/17 12:00 a.m.•88 views

Jenkins Parameterized Trigger Plugin Information Disclosure Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. These values are stored and can be viewed by an attacker with access to the...

5.5CVSS1.6AI score0.00383EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/16 12:00 a.m.•45 views

GHSA-5MPF-HW8F-86W9 Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

3.3CVSS5.7AI score0.00383EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/03/16 12:00 a.m.•32 views

Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

5.5CVSS1.2AI score0.00383EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2022/03/15 5:15 p.m.•24 views

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

5.5CVSS5.8AI score0.00383EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/15 5:15 p.m.•46 views

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

5.5CVSS0.00383EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/15 5:15 p.m.•34 views

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

5.5CVSS5.5AI score
SaveExploits0References2
Prion
Prion
•added 2022/03/15 5:15 p.m.•23 views

Design/Logic Flaw

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

2.1CVSS5.4AI score0.00383EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/15 4:45 p.m.•51 views

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

6.2AI score0.00383EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/15 4:45 p.m.•166 views

CVE-2022-27195

CVE-2022-27195 affects Jenkins Parameterized Trigger Plugin (versions 2.43 and earlier). The vulnerability arises from the plugin capturing environment variables passed to builds triggered by the plugin, including password parameter values, and storing them unencrypted in build.xml files. These s...

5.5CVSS5.7AI score0.00383EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/03/15 4:45 p.m.•1 views

CVE-2022-27195

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

6.8CVSS0.00383EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/03/15 12:00 a.m.•17 views

Jenkins Plugin Parameterized Trigger 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. These values are stored and can be viewed by an attacker with access to the...

5.5CVSS5.6AI score0.00383EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/15 12:00 a.m.•4 views

CVE-2022-27195: Undefined Security Weakness

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to...

5.5CVSS6AI score0.00383EPSS
SaveExploits0References1
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/03/15 12:00 a.m.•16 views

Sensitive parameter values captured in build metadata files by parameterized-trigger

parameterized-trigger 2.43 and earlier captures environment variables passed to builds triggered using parameterized-trigger, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to the Jenkins controller file...

5.5CVSS5.6AI score0.00383EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2017/10/31 12:00 a.m.•11 views

Unspecified Vulnerability in CloudBees Parameterized Trigger Plugin

CloudBees Parameterized Trigger Plugin is a parameterized trigger plugin in the U.S. CloudBees company's Jenkins Java-based development of continuous integration tools. An unspecified vulnerability exists in the CloudBees Parameterized Trigger Plugin that stems from the program's failure to detec...

6.5CVSS6.5AI score0.00781EPSS
SaveExploits0References1
NVD
NVD
•added 2017/10/05 1:29 a.m.•24 views

CVE-2017-1000084

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins...

6.5CVSS6.6AI score0.00781EPSS
SaveExploits0References1
Rows per page
Query Builder