EUVD-2019-4955

Malware in sbrugna...

CVE-2022-30962

Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

org.jenkins-ci.main:jenkins-test-harness (1.525), org.jenkins-ci.main:jenkins-war (1.525) +5 more potentially affected by CVE-2021-21640 via org.jenkins-ci.main:jenkins-core (1.525)

org.jenkins-ci.main:jenkins-core MAVEN version 1.525 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.525 - org.jenkins-ci.main:jenkins-war 1.525 -...

Cross site scripting

Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30962

Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30962

Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2022-30962: Improper Neutralization of Input During Web Page Generation

Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Variable String parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

PT-2022-20418 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Global Variable String Parameter Plugin versions 1.2 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability, which is exploitable by attackers with Item/Configure permission. This occurs because...

org.jenkins-ci.main:jenkins-test-harness (1.525), org.jenkins-ci.main:jenkins-war (1.525) +5 more potentially affected by CVE-2018-1000997 via org.jenkins-ci.main:jenkins-core (1.525)

org.jenkins-ci.main:jenkins-core MAVEN version 1.525 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.525 - org.jenkins-ci.main:jenkins-war 1.525 -...

Stack overflow

nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file...