CVE-2025-64132

Jenkins MCP Server Plugin 0.84.v50ca24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access...

PT-2025-44281

Name of the Vulnerable Software and Affected Versions Jenkins MCP Server Plugin versions 0.84.v50ca 24ef83f2 and earlier Description The Jenkins MCP Server Plugin does not properly enforce permission checks in several MCP tools. This allows attackers to initiate builds and access sensitive job an...

CVE-2025-64132: Missing Authorization

Jenkins MCP Server Plugin 0.84.v50ca24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access...

Jenkins plugin MCP Server 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

EUVD-2017-1801

Malware in sbrugna...

EUVD-2016-1908

Malware in sbrugna...

EUVD-2017-1909

Malware in sbrugna...

EUVD-2008-2518

Malware in sbrugna...

EUVD-2022-1913

Malicious code in bioql PyPI...

EUVD-2022-3556

Malicious code in bioql PyPI...

EUVD-2024-1863

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-21256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.27 and prior...

Malicious code in planetology-server-optimize-css-assets-webpack-plugin-venus (npm)

The package planetology-server-optimize-css-assets-webpack-plugin-venus was found to contain malicious code...

MAL-2025-29366 Malicious code in planetology-server-optimize-css-assets-webpack-plugin-venus (npm)

The package planetology-server-optimize-css-assets-webpack-plugin-venus was found to contain malicious code...

The vulnerability of the Jenkins continuous integration server’s HTML plugin arises from incorrect path name restrictions for the catalog directory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server plugin is related to an incorrect restriction on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

CVE-2025-49763

The ESI plugin in Apache Traffic Server fails to enforce a limit on the maximum inclusion depth , leading to excessive memory consumption when processing malicious instructions. This vulnerability affects versions 10.0.0 through 10.0.5 and 9.0.0 through 9.2.10 . Users can mitigate this by using t...

CVE-2023-30518

A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2021-21638

A cross-site request forgery CSRF vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2019-10288

Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2025-3099

The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to upda...