EUVD-2022-1998

Malicious code in bioql PyPI...

GHSA-2J4H-CJGH-659V Reflected XSS vulnerability in Jenkins VncViewer Plugin

VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...

Reflected XSS vulnerability in Jenkins VncViewer Plugin

VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint output. This results in a reflected cross-site scripting XSS vulnerability. VncViewer Plugin 1.8 escapes the parameter value in the output...

CloudBees Jenkins VncViewer Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncViewer Plugin is used in which a VNC remo...

CVE-2020-2207

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2020-2207

Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2020-2207

Jenkins VncViewer Plugin (versions 1.7 and earlier) is affected by a reflected XSS in the checkVncServ endpoint due to insufficient escaping of a parameter value. This is documented across multiple sources (CVE-2020-2207). Impact is reflected client-side script execution; remediation is to upgrad...

PT-2020-15421 · Jenkins · Jenkins Vncviewer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins VncViewer Plugin versions 1.7 and earlier Description: The issue is related to a reflected cross-site scripting XSS vulnerability. It occurs because the checkVncServ form validation endpoint does not properly escape a parameter value,...