Lucene search
+L

5835 matches found

Vulnrichment
Vulnrichment
added 2022/09/21 3:46 p.m.13 views

CVE-2022-41255

Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

6.6AI score0.00727EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/09/21 3:46 p.m.50 views

CVE-2022-41255

Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

6.9AI score0.00727EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/09/21 3:46 p.m.39 views

CVE-2022-41247

Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.2AI score0.00452EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/09/21 3:46 p.m.7 views

CVE-2022-41247

Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

6.6AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/21 3:46 p.m.380 views

CVE-2022-41247

CVE-2022-41247 — Jenkins BigPanda Notifier Plugin : The plugin versions 1.4.0 and earlier store the BigPanda API key unencrypted in the Jenkins controller’s global configuration file (BigpandaGlobalNotifier.xml) and do not mask it in the global configuration form, allowing users with Jenkins cont...

4.3CVSS4.5AI score0.00452EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/21 12:00 a.m.9 views

PT-2022-25763 · Jenkins · Jenkins Bigpanda Notifier Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins BigPanda Notifier Plugin versions 1.4.0 and earlier Description: The issue concerns the storage and display of the BigPanda API key in the plugin's configuration. The BigPanda API key is stored unencrypted in the...

5.3CVSS4.8AI score0.00353EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/09/21 12:00 a.m.9 views

Jenkins BigPanda Notifier Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.3AI score0.00452EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/21 12:00 a.m.11 views

PT-2022-25771 · Jenkins · Jenkins Cons3Rt Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CONS3RT Plugin versions 1.0.0 and earlier Description: The issue allows users with access to the Jenkins controller file system to view the Cons3rt API token, which is stored unencrypted in job config.xml files on the Jenkins...

6.5CVSS6.2AI score0.00727EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/09/21 12:00 a.m.11 views

Jenkins CONS3RT Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.5AI score0.00727EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.8 views

The vulnerability of the WPE WebKit web page rendering module, related to the transmission of protected information in unencrypted form, allows attackers to compromise data integrity.

The vulnerability of the WPE WebKit web page rendering module is related to the transmission of protected information in an unencrypted form. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

6.8CVSS6.5AI score0.02213EPSS
SaveExploits0References8Affected Software5
ATTACKERKB
ATTACKERKB
added 2022/09/13 4:15 p.m.7 views

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

5.3CVSS6AI score0.00397EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/09/13 4:15 p.m.11 views

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

5.3CVSS5.8AI score0.00397EPSS
SaveExploits0References2
NVD
NVD
added 2022/09/13 4:15 p.m.32 views

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

5.3CVSS0.00397EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/09/13 3:43 p.m.33 views

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

5.5AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/13 12:00 a.m.10 views

SAP BusinessObjects Business Intelligence Platform 安全漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and deploy...

5.3CVSS5.8AI score0.00397EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/09/13 12:00 a.m.13 views

PT-2022-5069 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 7.4.2j Description: The issue is related to the storage of critical informatio...

6.5CVSS6.3AI score0.00213EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/09/12 12:00 a.m.14 views

The vulnerability of Kubernets Rancher cluster management software, related to unencrypted storage of user data, allows a hacker to escalate their privileges.

The vulnerability of Kubernets Rancher cluster management software is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

9.9CVSS7.8AI score0.03233EPSS
SaveExploits3References2Affected Software1
NVD
NVD
added 2022/09/09 3:15 p.m.31 views

CVE-2022-26390

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

4.2CVSS0.0045EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/09 3:15 p.m.13 views

CVE-2022-26390

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

4.2CVSS5.8AI score0.0045EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/09 3:15 p.m.31 views

Information disclosure

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

1.2CVSS5.2AI score0.0045EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder