Lucene search
+L

224 matches found

Kitploit
Kitploit
added 2026/09/16 6:21 p.m.9 views

sonarqube

SonarQube 持续检查 SonarQube 不仅能够展示应用程序的健康状况,还能突出显示新引入的问题。通过设置质量门(Quality Gate),您可以实现干净代码,从而系统地提升代码质量。 链接 网站 下载 文档 Web 应用源代码 X(推特) SonarSource,SonarQube 的作者 问题跟踪,只读。只有 SonarSource 内部员工可以创建工单。 负责任披露 Next 下一个 SonarQube 版本的实例 有问题或反馈? 对于支持类问题(“我该怎么做?”、“我遇到了这个错误,为什么?”等),请先阅读文档,然后前往 SonarSource...

5.8AI score
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.302 views

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

8.8CVSS7.6AI score0.15966EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 6:53 p.m.14 views

autoSource

AutoSource AutoSourceは、SonarQubeと統合された自動ソースコードレビューフレームワークであり、静的コード分析/レビューを実行できます。SDLC(ソフトウェア開発ライフサイクル)の非常に初期段階で脆弱性を効果的に発見するために使用できます。ユーザーは、フレームワークにGITリポジトリのリンクを指定するだけでコードをスキャンできます。 AutoSourceフレームワークは、すべてのプラットフォーム(MAC、Linux、Windows)でソースコードレビューを実行できます。 インストール 1. AutoSourceリポジトリをシステムにダウンロードします。 2...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:01 p.m.10 views

sonarcloud-scan

Bitbucket Pipelines Pipe: SonarQube Cloud 扫描 使用 SonarQube Cloud 扫描您的代码,检测超过 25 种编程语言中的错误、漏洞和代码异味。 您的 SonarCloud 帐户必须首先与您的 Bitbucket 团队或个人帐户关联。SonarQube Cloud 对开源项目完全免费。如果您的代码是闭源的,SonarQube Cloud 还提供付费计划来运行私有分析。 注意:对于使用 Maven 或 Gradle 的项目,请直接执行相应的扫描器,而不是使用此管道(参见示例)。 YAML 定义 将以下代码片段添加到您的...

6AI score
SaveExploits0References3
NVD
NVD
added 2026/09/02 4:17 p.m.9 views

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

8CVSS0.00238EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 3:40 p.m.9 views

EUVD-2026-70131

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

8CVSS5.8AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 3:40 p.m.31 views

CVE-2026-84665

Jenkins SonarQube Scanner Plugin versions 2.18.3 and earlier do not restrict URL schemes for dashboard links generated from SonarQube scanner results, permitting the javascript: scheme. This leads to a stored cross-site scripting (XSS) vulnerability exploitable by attackers holding Item/Configure...

8CVSS5.8AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 3:40 p.m.36 views

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

0.00238EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 4:37 a.m.9 views

Nest v2026.08.24

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

5.8AI score
SaveExploits0References18
OSV
OSV
added 2026/08/13 12:10 p.m.10 views

CLEANSTART-2026-WG27700 Security fixes in sonarqube 26.8.0.126808-r2

Package sonarqube version 26.8.0.126808-r2 fixes 5 vulnerabilities: CVE-2026-59645, CVE-2026-56819, CVE-2026-59900, CVE-2026-59901, ghsa-mfg7-5gfp-c4w3...

8.7CVSS7.3AI score0.00443EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/08/12 10:18 p.m.10 views

CVE-2026-48813

A flaw was found in Flawfinder. An improper input neutralization issue leads to output manipulation, specifically, terminal/ANSI escape sequence injection and XML injection. A malicious filename can inject arbitrary content in the terminal output and improperly sanitized fields such as filenames,...

8.7CVSS5.5AI score0.00326EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/11 7:24 p.m.14 views

EUVD-2026-56901

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

8.7CVSS5.6AI score0.00326EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/10 2:51 p.m.15 views

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.6 security update

Important: Red Hat OpenShift GitOps v1.20.6 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10444 Document as known: GitOps deployment fails as Kustomize 5.8.1 HelmChartInflationGenerator omits SonarQube namespace...

9.1CVSS6.4AI score0.07314EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/30 7:10 a.m.13 views

CLEANSTART-2026-DC00064 Security fixes in sonarqube 26.3.0.120487-r1

Package sonarqube version 26.3.0.120487-r1 fixes 1 vulnerabilities: CVE-2026-42198...

7.5CVSS7.2AI score0.03261EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/30 7:10 a.m.8 views

CLEANSTART-2026-XA52912 Security fixes in sonarqube 25.12.0.117093-r0

Package sonarqube version 25.12.0.117093-r0 fixes 2 vulnerabilities: ghsa-qf7c-7r9h-mm92, CVE-2025-68384...

6.5CVSS5.4AI score0.00323EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/30 7:10 a.m.11 views

CLEANSTART-2026-VT41102 Security fixes in sonarqube 26.3.0.120487-r3

Package sonarqube version 26.3.0.120487-r3 fixes 19 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516...

8.7CVSS5.4AI score0.0351EPSS
SaveExploits5References1
OSV
OSV
added 2026/07/30 7:10 a.m.17 views

CLEANSTART-2026-YD42613 Security fixes in sonarqube 25.12.0.117093-r1

Package sonarqube version 25.12.0.117093-r1 fixes 1 vulnerabilities: CVE-2026-42198...

7.5CVSS7AI score0.03261EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/30 7:10 a.m.8 views

CLEANSTART-2026-RN50570 Security fixes in sonarqube 26.4.0.121862-r1

Package sonarqube version 26.4.0.121862-r1 fixes 3 vulnerabilities: ghsa-6v53-7c9g-w56r, ghsa-9342-92gg-6v29, ghsa-2m67-wjpj-xhg9...

5.4AI score
SaveExploits0References1
OSV
OSV
added 2026/07/30 7:10 a.m.8 views

CLEANSTART-2026-XA75352 Security fixes in sonarqube 25.12.0.117093-r3

Package sonarqube version 25.12.0.117093-r3 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

8.7CVSS6.5AI score0.0227EPSS
SaveExploits3References1
OSV
OSV
added 2026/07/30 7:10 a.m.9 views

CLEANSTART-2026-RI78634 Security fixes in sonarqube 26.4.0.121862-r0

Package sonarqube version 26.4.0.121862-r0 fixes 8 vulnerabilities: CVE-2025-68161, CVE-2026-34479, CVE-2026-33870, CVE-2026-33871, CVE-2025-48924...

8.7CVSS6.4AI score0.0227EPSS
SaveExploits3References1
Rows per page
Query Builder