CVE-2022-46688

A cross-site request forgery CSRF vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers previously configured by Jenkins administrators using attacker-specified credentials IDs obtained through another method,...

Malicious code in ig-sonar-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d2f9e7e569b552fb1c7141755f6c84ec21e62122d3167be78aca0bd1ee2e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-578 Malicious code in ig-sonar-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d2f9e7e569b552fb1c7141755f6c84ec21e62122d3167be78aca0bd1ee2e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, akhq, sonar-scanner-cli, zookeeper-fips, ontop-fips, cassandra, sonarqube, cassandra-reaper, tez, sonarqube-10, ontop, dependency-track, management-api-for-apache-cassandra-4.1, apache-nifi, kserve-modelmesh, cassandra-fips,...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, akhq, sonar-scanner-cli, zookeeper-fips, ontop-fips, cassandra, sonarqube, cassandra-reaper, tez, sonarqube-10, ontop, dependency-track, management-api-for-apache-cassandra-4.1, apache-nifi, kserve-modelmesh, cassandra-fips,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, akhq, sonar-scanner-cli, zookeeper-fips, ontop-fips, cassandra, sonarqube, cassandra-reaper, tez, sonarqube-10, ontop, dependency-track, management-api-for-apache-cassandra-4.1, apache-nifi, kserve-modelmesh, cassandra-fips,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, akhq, sonar-scanner-cli, zookeeper-fips, ontop-fips, cassandra, sonarqube, cassandra-reaper, tez, sonarqube-10, ontop, dependency-track, management-api-for-apache-cassandra-4.1, apache-nifi, kserve-modelmesh, cassandra-fips,...

The vulnerability of the CI/CD system’s registration data protection mechanism in TeamCity allows attackers to compromise user passwords.

The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to obtain user passwords through the Sonar Runner REST...

Unspecified Vulnerability in JetBrains TeamCity

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in JetBrains...

CVE-2024-47161

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API...

CVE-2024-47161

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API...

CVE-2024-47161

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API...

CVE-2024-47161

CVE-2024-47161 affects JetBrains TeamCity prior to 2024.07.3. The vulnerability allows password disclosure via the Sonar runner REST API. Root cause and exact impacted components are not detailed in the provided documents beyond the general description. Impact is described as confidential data ex...

CVE-2024-47161

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in JetBrains...

CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a critical security flaw impacting Jenkins to its Known Exploited Vulnerabilities KEV catalog, following its exploitation in ransomware attacks. The vulnerability, tracked as CVE-2024-23897 CVSS score: 9.8, is a path travers...

Exploit for Path Traversal in Jenkins

Jenkins CVE-2024-23897 PoC A proof-of-concept PoC for CVE-2...

GHSA-4R5X-X283-WM96 Jumpserver Koko vulnerable to remote code execution on the host system via MongoDB shell

Impact An authenticated user can exploit a vulnerability in MongoDB sessions to execute arbitrary commands, leading to remote code execution. This vulnerability may further be leveraged to gain root privileges on the host system. Details Through the WEB CLI interface provided by koko, a user logs...

The Risks of Exposing DICOM Data to the Internet

Introduction Digital Imaging and Communications in Medicine DICOM is the international standard for the transmission, storage, retrieval, print, and display of medical images and related information. While DICOM has revolutionized the medical imaging industry, allowing for enhanced patient care...

OpenRefine's Zip Slip Vulnerability Could Let Attackers Execute Malicious Code

A high-severity security flaw has been disclosed in the open-source OpenRefine data cleanup and transformation tool that could result in arbitrary code execution on affected systems. Tracked as CVE-2023-37476 CVSS score: 7.8, the vulnerability is a Zip Slip vulnerability that could have adverse...