102 matches found
The January 6 Insurrection Hearings Are Just Heating Up
The US House committee has already uncovered a more organized and sinister plot than many imagined. But history suggests the worst may be yet to come...
org.jenkins-ci.plugins:php (=1.0), org.jenkins-ci.plugins:silk-performer-plugin (>=2.0.0-beta <=2.0.1-beta) potentially affected by CVE-2022-34783 via org.jenkins-ci.plugins:plot (>=1.5 <=2.1.0)
org.jenkins-ci.plugins:plot MAVEN version =1.5, =2.0.0-beta, =2.0.1-beta Source cves: CVE-2022-34783 Source advisory: OSV:GHSA-HPF7-MMQW-G6VQ...
GHSA-HPF7-MMQW-G6VQ Cross-site Scripting in Jenkins Plot Plugin
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
Cross-site Scripting in Jenkins Plot Plugin
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-34783
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-34783
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-34783
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
Cross site scripting
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-34783
CVE-2022-34783 affects Jenkins Plot Plugin, versions 2.1.10 and earlier. The vulnerability arises because plot descriptions are not escaped, enabling a stored XSS condition that is exploitable by attackers with Item/Configure permission. The Red Hat and other security records reiterate this descr...
CVE-2022-34783
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
PT-2022-22334 · Jenkins · Jenkins Plot Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Plot Plugin versions 2.1.10 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because plot descriptions are not properly escaped, allowing attackers with Item/Configure...
Jenkins Plugin Plot 跨站脚本漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...
Malicious code in sfdc-abstract-plot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 054964122d2a8e86e2c0966558d1ae1e8c3e220bcd91770788fa330bf3ed6364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6045 Malicious code in sfdc-abstract-plot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 054964122d2a8e86e2c0966558d1ae1e8c3e220bcd91770788fa330bf3ed6364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DuckDuckGo Isn’t as Private as You Think
Plus: A $150 million Twitter fine, a massive leak from a Chinese prison in Xinjiang, and an ISIS plot to assassinate George W. Bush...
GHSA-F6MG-HMFP-6GRW Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin
Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...
Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin
Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to provide report files to the plugin's post-build step...
The Fake Federal Agents Case Baffling US Intelligence Experts
Guns. Luxury apartments. Duped Secret Service personnel. Did the FBI uncover a foreign plot, or something more ridiculous?...
GHSA-8RX6-V5Q4-XW3J enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability
Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the 'Public Coverage / Complexity Scatter Plot' post-build step to have Jenkins parse a crafted...