PipeCD 安全漏洞

PipeCD is a PipeCD open source application. A security vulnerability exists in PipeCD version 0.49, which stems from improper privileges and could allow an attacker to obtain a token for a service account and elevate privileges...

PT-2021-14702 · Jenkins · Jenkins Urltrigger Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins URLTrigger Plugin versions 0.48 and earlier Description: The issue allows attackers with Job/Configure permission or those able to control the contents of a URL to an XML document being examined for changes to have Jenkins parse a...

DEBIAN-CVE-2007-1099

dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote attackers to conduct man-in-the-middle attacks...