Lucene search
+L

5801 matches found

CNVD
CNVD
added 2019/10/08 12:00 a.m.13 views

Unspecified Vulnerability in CloudBees Jenkins Gem Publisher Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Gem Publisher Plugin is used in which a Gem...

5.5CVSS6.8AI score0.00341EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/08 12:00 a.m.13 views

CloudBees Jenkins vFabric Application Director plugin security vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . vFabric Application Director Plugin is used i...

5.5CVSS6.8AI score0.00321EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/08 12:00 a.m.13 views

CloudBees Jenkins CodeScan Plugin has an Unspecified Vulnerability Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . CodeScan Plugin is used in one of the plug-i...

5.5CVSS7.1AI score0.00321EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/08 12:00 a.m.8 views

Unspecified Vulnerability in CloudBees Jenkins elOyente Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . elOyente Plugin is used in one of the plug-i...

5.5CVSS6.8AI score0.00348EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/06 4:15 p.m.19 views

CVE-2019-17218

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the communication to the web service is unencrypted via http. An attacker is able to intercept and sniff communication to the web service...

9.1CVSS9.2AI score0.00674EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/06 4:15 p.m.8 views

CVE-2019-17218

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the communication to the web service is unencrypted via http. An attacker is able to intercept and sniff communication to the web service...

9.1CVSS7.3AI score0.00674EPSS
SaveExploits0References1
Prion
Prion
added 2019/10/06 4:15 p.m.18 views

Default configuration

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the communication to the web service is unencrypted via http. An attacker is able to intercept and sniff communication to the web service...

5CVSS9.1AI score0.00674EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/10/06 3:23 p.m.24 views

CVE-2019-17218

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the communication to the web service is unencrypted via http. An attacker is able to intercept and sniff communication to the web service...

9.3AI score0.00674EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/01 2:15 p.m.33 views

CVE-2019-10433

Jenkins Dingding钉钉 Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

3.3CVSS3.8AI score0.00409EPSS
SaveExploits0References3
OSV
OSV
added 2019/10/01 2:15 p.m.22 views

CVE-2019-10433

Jenkins Dingding钉钉 Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

3.3CVSS6.7AI score
SaveExploits0References3
Prion
Prion
added 2019/10/01 2:15 p.m.21 views

Design/Logic Flaw

Jenkins Dingding?? Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

2.1CVSS4AI score0.00409EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2019/10/01 1:45 p.m.68 views

CVE-2019-10433

The CVE-2019-10433 entry affects the Jenkins Dingding plugin, where credentials are stored unencrypted in job config.xml files on the Jenkins master. This exposes credentials to users with Extended Read permissions or anyone with access to the master filesystem, as described across multiple sourc...

3.3CVSS3.9AI score0.00409EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/10/01 1:45 p.m.38 views

CVE-2019-10433

Jenkins Dingding钉钉 Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

3.8AI score0.00409EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2019/10/01 12:00 a.m.7 views

PT-2019-11827 · Jenkins · Jenkins Dingding Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dingding Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner in job config.xml files on the Jenkins master. These credentials can be accessed by users with Extende...

3.3CVSS3.6AI score0.00409EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.55 views

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to the storage of passwords in unencrypted form, allows attackers to gain unauthorized access to protected information.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.0046EPSS
SaveExploits1References12Affected Software14
Fedora
Fedora
added 2019/09/30 1:01 a.m.36 views

[SECURITY] Fedora 30 Update: krb5-1.17-15.fc30

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

7.5CVSS3.1AI score0.04436EPSS
SaveExploits0
nodejs
nodejs
added 2019/09/26 8:20 p.m.25 views

Machine-In-The-Middle

Overview Versions of https-proxy-agent prior to 2.2.3 are vulnerable to Machine-In-The-Middle. The package fails to enforce TLS on the socket if the proxy server responds the to the request with a HTTP status different than 200. This allows an attacker with access to the proxy server to intercept...

6.5AI score
SaveExploits0Affected Software1
OSV
OSV
added 2019/09/25 4:15 p.m.5 views

CVE-2019-10430

Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

5.5CVSS6.1AI score0.00252EPSS
SaveExploits0References2
NVD
NVD
added 2019/09/25 4:15 p.m.39 views

CVE-2019-10429

Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

5.5CVSS5.3AI score0.00324EPSS
SaveExploits0References2
NVD
NVD
added 2019/09/25 4:15 p.m.33 views

CVE-2019-10430

Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system...

5.5CVSS5.4AI score0.00252EPSS
SaveExploits0References2
Rows per page
Query Builder