Lucene search
+L

7651 matches found

OSV
OSV
•added 2023/05/16 5:15 p.m.•16 views

CVE-2023-33001

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

7.5CVSS5.8AI score0.00601EPSS
SaveExploits0References1
NVD
NVD
•added 2023/05/16 5:15 p.m.•54 views

CVE-2023-33001

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

7.5CVSS7.5AI score0.00601EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/16 5:15 p.m.•41 views

Design/Logic Flaw

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

5CVSS7.5AI score0.00601EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2023/05/16 4:00 p.m.•80 views

CVE-2023-33001

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

7.5CVSS7AI score0.00601EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/05/16 4:00 p.m.•59 views

CVE-2023-33001

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

7.7AI score0.00601EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/16 4:00 p.m.•8 views

CVE-2023-33001

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

7.6AI score0.00601EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2023/05/16 8:56 a.m.•11 views

kernel: sched/core: Do not requeue task on CPU excluded from cpus_mask

In the Linux kernel, the following vulnerability has been resolved: sched/core: Do not requeue task on CPU excluded from cpusmask The following warning was triggered on a large machine early in boot on a distribution kernel but the same problem should also affect mainline. WARNING: CPU: 439 PID: ...

5.5CVSS5.9AI score0.00246EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/16 12:00 a.m.•3 views

CVE-2023-33001: Insertion of Sensitive Information into Log File

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

7.5CVSS5.8AI score0.00601EPSS
SaveExploits0References3
Jenkins Security Advisories
Jenkins Security Advisories
•added 2023/05/16 12:00 a.m.•17 views

Improper masking of credentials in hashicorp-vault-plugin

hashicorp-vault-plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials printed in the build log from Pipeline steps like sh and bat, when both of the following conditions are met: The credentials are printed in build steps executing on an agent...

7.5CVSS7.2AI score0.00601EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2023/05/16 12:00 a.m.•17 views

Jenkins HashiCorp Vault Plugin 日志信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

7.5CVSS7.3AI score0.00601EPSS
SaveExploits0References4
OSV
OSV
•added 2023/05/10 5:15 a.m.•5 views

DEBIAN-CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

5.9CVSS5.9AI score0.00743EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/05/10 12:00 a.m.•15 views

dav1d 竞争条件问题漏洞

dav1d is an AV1 cross-platform decoder from the individual developers at Void². A security vulnerability exists in dav1d versions prior to 1.2.0, which stems from a threadtask.c race condition that can cause the application to crash...

5.9CVSS5.8AI score0.00743EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/05/09 10:04 a.m.•12 views

kernel: iavf: Fix reset error handling

A deadlock condition exists in the linux kernel such that when calling iavfclose in iavfresettask error handling,doing so can lead to double call of napidisable thereby leading to a denial of service due to the deadlock...

5.5CVSS6.4AI score0.00143EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/05/09 10:04 a.m.•12 views

kernel: s390: fix double free of GS and RI CBs on fork() failure

In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runtime instrumentation control blocks are stored in the threadstruct of the associated task. These pointers are initially copied on fork...

7.8CVSS6AI score0.00261EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/05/09 12:00 a.m.•16 views

PT-2025-41054

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a deadlock situation between the shrink slab and dm pool abort metadata processes. This occurred due to concurrent processes involving dropping caches and...

7.8CVSS6.3AI score0.22293EPSS
SaveExploits0References456
Github Security Blog
Github Security Blog
•added 2023/05/08 12:30 p.m.•38 views

Apache Airflow vulnerable to stored Cross-site Scripting

Task instance details page in the UI is vulnerable to stored cross-site scripting. This issue affects Apache Airflow before 2.6.0...

5.4CVSS5.2AI score0.01984EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2023/05/08 10:15 a.m.•34 views

CVE-2023-29247

Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0...

5.4CVSS5.4AI score0.01984EPSS
SaveExploits0References3
OSV
OSV
•added 2023/05/08 10:15 a.m.•30 views

PYSEC-2023-60

Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0...

5.4CVSS6.8AI score0.01984EPSS
SaveExploits0References4
PyPA
PyPA
•added 2023/05/08 10:15 a.m.•12 views

PYSEC-2023-60

Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0...

5.4CVSS6.9AI score0.01984EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/05/08 9:01 a.m.•20 views

CVE-2023-29247 Stored XSS on Apache Airflow

Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0...

6.1AI score
SaveExploits0References5
Rows per page
Query Builder